
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa
File: 08662a15-e04a-359b-8c07-283ea782a9b0.roa (raw, json)
Hash identifier: t2Pom/R7QtmQUZQn9p+hZ3PBCTIRtoCiptxn1sBLG6E=
Subject key identifier: B2:61:38:58:A1:0F:A1:2F:68:00:6D:65:50:20:3C:18:F8:CB:7E:F4
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584F03A7EA74BF2C3103447F7180
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 16839
IP address blocks: 149.96.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:ea:74:bf:2c:31:03:44:7f:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=6d61735d-6eba-4c79-8ce7-26e7a0170ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:a1:35:f6:30:5d:95:7b:70:aa:11:07:dc:
7f:9b:c2:54:dc:81:94:27:8b:75:a6:92:14:2b:d2:
3c:71:59:47:80:12:c1:45:c3:38:7a:11:37:86:c2:
29:92:73:da:83:1e:e5:f4:0a:8b:f1:c3:ae:8c:0e:
6a:a5:0a:53:37:b2:4b:a9:ea:b9:bc:16:07:01:09:
0f:e5:92:9d:a2:d4:49:f5:44:a3:f0:2a:07:e4:a2:
2a:99:4b:37:77:17:95:d1:88:a5:98:1a:db:10:9c:
f9:27:1a:49:c2:f0:63:cd:c3:41:91:9a:64:6b:af:
54:76:bb:8f:d2:19:5f:56:20:b0:2b:05:51:aa:c8:
ca:0a:cc:21:85:ab:ad:68:e1:48:da:5b:68:fb:70:
07:1c:d2:64:08:19:aa:8f:38:ce:6b:23:a4:1b:30:
cc:15:8d:70:07:0f:bf:80:1e:6a:e5:fa:a1:d1:b4:
7f:4a:57:1a:90:af:f5:a9:cd:91:48:22:d2:e1:1a:
f8:f8:b8:5d:85:d0:dd:f2:7b:e6:94:d9:9b:0f:ae:
b5:9c:22:89:da:24:92:c8:97:dc:6c:83:69:19:cd:
95:35:02:42:ad:00:a4:c1:e6:14:83:94:27:9c:3f:
4c:88:6d:fa:23:8a:2f:90:7c:b3:54:7a:87:4b:9b:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:61:38:58:A1:0F:A1:2F:68:00:6D:65:50:20:3C:18:F8:CB:7E:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d0:7a:5e:2d:fb:22:8d:33:c8:59:e2:da:59:26:7e:c5:09:
b6:43:9a:55:48:9f:04:ec:75:b7:6b:0c:1f:cd:4e:c3:0b:7d:
20:6b:f4:de:9c:7e:33:11:bb:ba:36:51:a7:66:97:27:9a:7c:
82:bf:02:64:7e:9a:09:d7:ea:6b:32:e0:91:51:f6:d1:aa:85:
21:27:08:cf:e8:93:32:5e:38:8f:e5:90:d8:27:76:ac:f7:3a:
fa:b6:96:e3:41:30:ad:7c:49:2c:c7:f3:b2:52:77:e2:14:29:
f4:c3:4b:87:09:a8:62:29:31:97:3c:b5:10:4e:00:19:fa:66:
db:a2:34:82:f7:ae:b6:d2:25:f2:3c:a4:f1:b0:43:5a:81:7d:
1e:ae:b3:a3:be:a7:e7:90:00:a2:00:98:d8:11:3c:f9:cb:e1:
13:63:7a:df:3a:8d:ca:88:95:92:c1:55:ea:9f:c5:a9:9a:ff:
db:b2:d0:6e:18:a1:77:18:72:e4:bc:15:70:44:b6:e7:5f:13:
4b:67:ae:ce:3b:12:cc:87:4b:cd:f6:f8:27:3e:d4:eb:d1:d5:
bd:65:9a:79:8a:a9:7b:e1:30:02:fc:4a:b3:e1:ea:59:78:b3:
05:dd:56:ce:28:0c:55:55:cd:8e:f7:23:07:02:18:06:b2:8f:
3a:37:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:16:31 2026 by rpki-client