
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa
File: 4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa (raw, json)
Hash identifier: tJKRDfYU/6rze5i3uExRzkp64xmeXbq4EJSFPx7uLVE=
Subject key identifier: 4D:21:AD:3D:F8:7A:BA:D1:7B:E7:8A:7E:40:70:82:09:68:32:65:F9
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584F03A7EA520889CE03E7EE3C00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 16839
IP address blocks: 149.96.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:ea:52:08:89:ce:03:e7:ee:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=f69c57d6-d90b-4eec-9157-2538d01b336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:88:80:16:df:26:98:68:b8:ea:5f:2e:db:
bd:36:04:68:e3:2d:30:4e:eb:da:f9:a3:ac:3f:f1:
d9:48:f5:41:7a:16:fa:b5:0d:88:87:1c:c2:ab:92:
92:2d:b4:bd:81:75:71:8f:4d:93:2e:8b:e8:a5:36:
dd:72:5f:c0:18:b1:87:be:a7:d8:77:c7:b3:a9:c0:
b2:58:e4:5c:19:ac:2d:ad:bd:40:e5:93:2d:13:20:
d0:c6:cb:d8:a9:45:93:86:cf:3e:e8:5d:04:b3:69:
c6:76:15:6c:47:08:b9:c5:6e:f9:de:94:ae:70:84:
20:52:6c:94:c6:e0:a5:b9:89:f4:e9:ab:1c:8f:3f:
2e:4e:5e:56:b3:58:b3:7c:8a:35:e5:a0:0a:e2:6c:
e1:0f:1d:6d:b4:cc:99:07:c1:19:7b:d4:f2:99:c4:
65:eb:9f:33:78:25:f0:96:96:82:53:33:16:7e:54:
9a:b1:9b:a5:51:4a:cc:ea:4a:aa:05:b2:aa:64:3e:
ae:3a:b2:5d:a5:75:2b:12:03:e5:6b:a2:c2:d2:94:
c7:72:7c:cc:c6:1f:44:b4:e2:b6:ac:d8:17:4d:9c:
a0:b5:3d:8a:e4:f7:fc:86:be:f6:a7:5f:ea:4f:ef:
d0:aa:20:41:1e:5a:69:9b:05:23:d0:aa:08:53:7f:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:AD:3D:F8:7A:BA:D1:7B:E7:8A:7E:40:70:82:09:68:32:65:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:61:e7:79:bc:1e:c4:5c:46:25:ba:52:e6:22:a4:c1:02:4f:
55:05:5e:ca:f7:6d:ec:5d:18:5c:77:ed:8c:dc:0f:f0:0e:05:
63:77:fe:fe:4e:e5:4c:fe:81:e3:eb:7f:c5:a4:73:77:fc:ac:
b8:39:12:24:c2:ea:9b:1d:6b:6d:4c:b4:9b:b7:20:e1:e7:30:
3e:77:50:a4:35:1e:b2:ee:32:ee:ac:1d:f8:78:79:95:06:f8:
f3:36:f9:96:17:36:12:e5:eb:39:d8:44:c2:3a:26:0f:f7:29:
b9:ab:ce:9b:8b:18:d8:20:d0:b4:83:f7:46:fb:e3:e8:0b:7a:
bb:49:9c:5c:0e:d5:ee:37:37:2e:45:2e:53:8f:98:f7:62:d6:
87:27:7c:06:91:a5:fc:20:6c:d7:64:23:9d:fe:3a:fc:6a:7a:
21:95:8f:c9:89:76:26:a1:bc:d8:3d:68:27:a4:ce:3a:b7:86:
29:3f:fe:db:60:1c:ff:a1:94:4f:ea:54:ff:10:40:a0:94:a6:
77:5e:90:5f:ba:af:8f:0b:a5:e1:4e:21:8e:66:10:09:60:4e:
f0:a0:2a:e0:bd:1f:0f:35:18:17:d2:1c:70:13:74:82:79:04:
81:cb:19:77:ab:4d:a8:f8:6a:ca:a1:2a:c5:9c:1d:ef:b2:d7:
d4:54:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:15:55 2026 by rpki-client