
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa
File: 0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa (raw, json)
Hash identifier: 1F+HpdzMutbOpj1NQMgem/G05xSvfa84PNd8oS5w8Dw=
Subject key identifier: D5:28:9C:15:FE:63:92:13:DD:49:FA:24:24:80:88:2A:1B:85:F6:34
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584F03A7969A9FCFD9AF0DC95000
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 16839
IP address blocks: 199.91.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:96:9a:9f:cf:d9:af:0d:c9:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=6a2673b2-1565-46dd-bf43-05b239e8c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:e3:73:03:5c:13:c5:9a:68:49:43:a6:6e:
4e:56:72:39:b2:d9:24:3a:49:37:85:7c:f2:0d:a2:
7f:4b:86:82:f4:d9:9f:4e:7c:29:29:6a:40:a0:9b:
1a:5e:8c:24:a8:43:be:e4:f7:24:5e:44:d3:74:d2:
ce:46:6b:55:ac:69:4f:44:ca:05:94:87:b7:04:e9:
e6:ca:8b:6c:35:96:4c:a1:fc:9c:e7:ad:c4:3a:59:
b9:e9:75:d8:4e:a6:cc:71:2b:4f:ca:f2:ae:d6:6f:
99:50:2d:7a:35:98:51:23:01:4d:aa:8e:fd:36:b1:
96:3d:5b:ea:8c:8c:91:d3:90:55:b0:8d:00:66:1e:
c6:4b:7b:0f:49:56:0b:60:1a:41:ac:d0:51:74:c9:
bb:bd:77:ec:1c:81:0c:46:69:2a:88:51:71:1f:cf:
44:29:03:72:7e:b3:a8:3e:6f:87:74:82:25:3c:c2:
c2:b3:32:37:c5:78:b6:2d:71:b0:63:5c:8c:ef:e5:
c0:6f:86:1f:8c:d3:41:5b:6a:4e:93:ff:0a:ee:b0:
92:92:22:df:0c:e7:be:90:1d:0d:33:69:5c:66:4c:
0a:2b:cd:59:a1:5f:c3:92:d0:b8:d9:cd:cc:09:8c:
3a:3d:fd:aa:aa:7f:c2:18:43:be:dc:f8:0e:30:5f:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:9C:15:FE:63:92:13:DD:49:FA:24:24:80:88:2A:1B:85:F6:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:9c:e6:8d:62:de:16:dd:1c:87:fb:c7:09:7f:dd:b7:db:ca:
6a:f9:f4:d2:68:7a:82:21:1b:6e:15:5e:a3:ec:b2:be:ed:c8:
61:a7:b7:79:da:0b:f8:de:2b:08:6f:44:f0:35:ee:d3:ce:2b:
4b:f6:19:2c:6f:df:66:8f:86:22:e6:a8:e8:cd:30:f5:df:d5:
95:86:46:55:fa:93:55:e0:6a:9e:97:a2:dc:ea:df:96:84:73:
fb:0c:23:9e:32:d8:a7:56:c2:50:fe:05:a4:cd:cf:a9:28:5e:
c0:11:56:51:80:ba:3b:de:5b:5f:c4:81:19:92:a4:25:98:2d:
3c:b5:71:03:d5:95:97:a4:1b:e4:05:bc:a8:0e:89:94:00:c2:
e2:a9:0a:cb:05:c8:1e:0f:d2:80:26:26:1e:7c:7f:9d:24:e2:
66:ce:fc:68:61:f0:fd:7c:ad:59:ab:f0:6b:b4:ea:4b:a6:14:
a4:e5:dd:ad:1c:d6:3d:b8:15:44:f7:90:0b:0f:b4:47:4e:d4:
30:28:ab:1f:3f:75:a8:e9:bc:53:b8:f6:65:db:10:6f:af:47:
62:a8:c7:02:8d:8f:97:e3:fc:1f:74:f6:d7:1a:00:a5:8d:2f:
ab:b7:b4:1e:3d:e7:60:ab:c2:c4:6f:f5:96:23:39:ed:9b:14:
40:0d:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:43:55 2026 by rpki-client