
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d64874f8-5a1a-3ebf-b2c3-1fdca920e093.roa
File: d64874f8-5a1a-3ebf-b2c3-1fdca920e093.roa (raw, json)
Hash identifier: 1GGCxF/WkLg6QfeWxddBKsLGxzJO3kX7j9CXrJhY1uQ=
Subject key identifier: CA:B7:B2:35:5B:D0:54:41:71:3C:79:2F:85:26:A3:10:70:46:E5:13
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F5E62DD6095434718C6A56C80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d64874f8-5a1a-3ebf-b2c3-1fdca920e093.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 19318
IP address blocks: 108.186.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:dd:60:95:43:47:18:c6:a5:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=29d1d789-7ff6-4f50-9cb6-5684b26eda8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:8b:26:21:3d:34:82:df:81:d5:bd:9c:c8:
e6:d8:b2:8b:96:e6:d9:43:02:ce:4a:c3:14:4d:3e:
1b:c4:37:2d:a9:ce:3f:0a:13:52:30:82:c6:7a:7a:
4e:f3:76:9c:b6:3c:5d:91:ab:a6:71:a3:19:a4:1f:
6a:38:ed:c5:bb:3d:dc:fb:b8:25:cd:90:56:65:89:
2e:4d:fc:34:5a:90:e4:61:a9:cd:87:e9:42:bc:92:
19:9b:b4:93:cc:67:a0:70:19:2b:25:89:72:2b:7c:
8c:30:b0:d5:46:24:98:18:08:de:79:dc:62:3f:9b:
6b:21:72:18:d7:b9:af:ed:09:06:f1:7d:6a:d7:96:
ed:62:fc:ee:b7:2c:fa:55:78:3a:55:b7:1e:62:6a:
06:7f:62:f6:e5:2a:7c:be:70:24:5b:e7:9e:5f:89:
29:65:6f:17:4f:ac:1d:51:e9:58:30:ad:b5:39:89:
0d:6b:2c:e2:a5:c8:97:89:80:e6:b7:b7:1f:e4:8c:
35:a0:38:8d:2e:e1:e8:64:ff:3c:11:42:58:17:04:
13:6b:80:ff:1b:8f:0f:d7:19:11:84:f0:0a:2a:3d:
dc:67:63:19:7c:4e:89:97:11:d5:b8:86:08:ee:35:
12:05:67:97:07:0f:ae:d6:77:e4:d6:38:d1:75:be:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B7:B2:35:5B:D0:54:41:71:3C:79:2F:85:26:A3:10:70:46:E5:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d64874f8-5a1a-3ebf-b2c3-1fdca920e093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
108.186.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:20:4d:11:04:a9:2a:9c:ac:4b:03:a7:eb:9b:66:c7:92:5d:
71:88:e3:fe:a3:17:b8:d4:5b:92:c1:0a:49:4a:fc:2f:0d:9b:
f4:f7:fb:39:bf:24:0a:73:c3:6d:0c:43:94:99:01:04:f0:2d:
9b:96:39:5a:45:fb:37:49:27:12:86:12:33:d0:b5:05:3a:06:
ad:df:2b:1e:52:c7:ed:85:74:d8:24:c4:ce:1e:84:c8:0a:6d:
43:c4:0b:24:b7:f3:c9:90:52:ce:cf:8a:49:66:58:d7:38:2f:
12:ac:bf:fb:1e:b1:42:61:4b:cf:b0:93:36:8c:0e:78:58:a5:
b1:ff:be:a9:4d:28:6f:69:fd:b4:2e:2e:c3:f1:44:db:9a:5f:
7e:71:5a:19:88:42:0d:c7:aa:8b:37:9b:84:e8:15:60:33:2c:
b6:48:3b:7b:61:05:ba:d9:66:83:fb:81:5d:61:35:ae:73:bd:
79:4b:25:a7:91:a8:94:99:c3:d3:10:67:3f:9d:4a:9c:8e:ed:
d0:0f:81:42:97:d7:69:9d:6e:f3:34:a2:23:53:12:68:b9:1f:
a1:51:81:cf:d7:7f:b3:ed:47:49:bf:e9:3d:37:bb:c3:7c:e2:
7a:e0:21:14:0c:1e:40:48:f7:a5:9b:a4:13:11:c9:13:83:2e:
11:da:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 12:40:20 2026 by rpki-client