
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa
File: d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa (raw, json)
Hash identifier: kvJWB6FEZdndQymNca8VsUyP1al8NNih2cYyQ2mZDNc=
Subject key identifier: DE:CC:03:54:7F:06:37:78:06:4F:08:EF:EF:AF:6E:6A:9C:D9:6F:48
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584D9A203489F1D11CB612453760
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 16839
IP address blocks: 149.96.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:34:89:f1:d1:1c:b6:12:45:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=4e8760ea-3809-4d88-b650-722546c7c0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:56:64:05:41:1d:bf:56:09:ed:64:f8:b6:
7f:e8:e1:c7:23:ae:64:aa:64:14:33:66:41:8a:02:
3a:89:d7:c7:99:44:d6:df:49:3d:08:1d:fa:c8:3c:
79:bb:02:a4:16:d7:7d:97:68:af:71:e0:92:9b:93:
01:6e:22:9b:76:a6:eb:6a:78:c7:95:6e:2e:66:3e:
95:f5:f7:b2:3d:aa:06:98:fb:db:21:2e:65:72:d3:
39:44:94:f5:e9:8d:7c:8d:85:62:05:d1:28:8d:bc:
c2:a9:e6:60:b9:28:f5:3a:06:5e:b1:5d:bd:26:51:
6a:42:e0:f3:49:f8:42:2f:9d:b3:92:54:5b:7b:09:
65:59:37:6a:3a:55:cc:78:c3:70:e3:9b:8f:90:f4:
44:61:d8:ba:17:c3:74:ee:38:4a:eb:84:a2:81:47:
5d:2d:31:ff:44:a7:7c:87:d6:f9:ca:04:68:ab:e2:
b7:fc:df:84:13:83:5d:06:c9:b4:92:95:d0:15:5f:
fd:2e:98:8c:df:89:9b:7b:87:1e:5b:73:a6:0d:e3:
22:40:01:6e:f2:6c:1c:cc:c5:2c:ea:ff:16:81:cd:
5d:4a:7a:2a:4d:6b:39:00:4a:3a:18:0f:18:47:c3:
57:7a:a6:a7:7f:0f:ef:92:f6:8f:9f:b8:7a:76:51:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:03:54:7F:06:37:78:06:4F:08:EF:EF:AF:6E:6A:9C:D9:6F:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:23:a8:cf:86:db:6e:a9:3d:40:72:e5:5a:b0:1f:22:19:e7:
93:a7:d0:19:a6:89:8c:71:7f:0f:23:80:e2:d6:2f:25:96:1c:
00:22:68:eb:aa:ba:07:4d:01:ba:5f:99:15:35:1c:7c:3b:96:
a6:3a:d4:a4:85:19:7c:0c:f1:f8:c5:bf:1d:88:a4:29:3d:d1:
61:5f:26:fd:8b:31:4f:09:e4:94:f4:f8:a0:c8:f9:f6:64:cd:
9d:32:3d:54:e0:d8:a8:d9:5c:a3:3a:be:db:7e:bc:dc:72:05:
e2:db:df:dc:83:38:b7:65:97:3f:e4:37:5a:2e:09:fc:e9:c7:
57:78:ad:32:83:37:89:fe:8d:28:ce:2b:5c:7f:a1:13:f9:65:
8b:fc:f3:19:c8:67:3e:5a:6b:cb:22:05:82:71:a8:b9:d8:59:
37:c7:c0:c3:b2:b9:7c:f9:d2:0f:02:ed:69:67:ef:0e:0f:ef:
ec:86:1c:d1:bc:71:13:2a:09:36:67:01:fd:94:d8:47:3d:bc:
02:96:01:ea:53:7c:89:a9:77:65:53:5e:c8:ab:47:e1:e1:3d:
cd:87:3c:1c:9c:24:16:02:9b:4b:93:85:b0:46:46:be:47:25:
48:07:58:7b:56:8f:99:73:97:4b:c8:27:7f:4c:31:23:2e:49:
8d:d8:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:55 2026 by rpki-client