
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa
File: f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa (raw, json)
Hash identifier: eykEy6Sbb2DRWfi6ESehYiNB9TSGgTi8sUbzZQTsQ1c=
Subject key identifier: 49:5D:FF:50:FD:3B:44:9C:FA:B4:0F:AF:F1:BD:DA:19:66:F6:04:DD
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584E6144BDCD4B7D86A6FFAAFD80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 16839
IP address blocks: 149.96.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:44:bd:cd:4b:7d:86:a6:ff:aa:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=1961f564-0ab0-4843-866a-cf968ab679cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:87:be:72:1a:33:e5:45:dc:b1:2a:b8:df:
f1:dd:e2:4b:b3:3b:8b:45:d3:e6:d4:54:0c:3b:31:
c7:bb:37:f0:d1:c6:22:aa:7c:7f:04:b4:3b:b4:0f:
17:a1:e5:e7:34:20:aa:7c:c9:49:26:3b:0d:c2:14:
70:70:1d:a0:3a:f0:29:4b:0d:29:ca:c4:08:ab:01:
81:07:3e:34:39:32:d5:d8:74:e4:be:51:49:5e:ba:
cc:75:eb:b9:42:1d:4a:71:ee:9a:36:a6:5e:a5:8d:
63:8c:ce:79:3c:7d:9b:50:06:74:83:cf:91:80:69:
92:3a:68:be:e3:ed:29:5e:be:c4:86:8d:61:91:87:
1a:64:58:ed:80:86:77:86:c3:f3:f1:fc:12:3d:2d:
8d:76:c9:e7:28:dd:51:85:57:ad:ae:23:b2:4a:2b:
15:ab:a3:52:ad:24:e6:f1:6d:39:04:3c:1c:d2:ac:
90:99:ea:9b:83:f4:80:43:12:99:e5:c3:10:80:79:
8e:52:2c:4d:12:2c:6e:a8:26:10:c5:24:66:85:0c:
91:4e:81:f7:f9:b8:73:f9:25:bc:16:b8:df:07:eb:
2e:ae:ea:fe:1a:f1:0e:dc:e6:7f:11:a8:07:0a:83:
e7:c5:d3:8b:12:ae:65:3a:8b:76:9a:dd:b0:75:4c:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:FF:50:FD:3B:44:9C:FA:B4:0F:AF:F1:BD:DA:19:66:F6:04:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4e:f9:c9:f9:12:62:7a:ac:4a:46:9e:ae:c5:9d:72:c7:ea:
10:c2:cf:59:e7:e9:c7:07:f6:e1:ce:0b:23:5c:83:09:6f:28:
de:49:ab:e3:f9:58:88:32:dc:41:0f:dc:02:2e:15:f9:b9:ee:
12:a3:61:0c:bd:63:e1:52:2c:01:b0:ce:29:93:dc:a9:55:5d:
90:d0:ea:d3:da:cd:25:7e:e2:5d:5a:df:e9:11:b8:cd:45:24:
7f:e4:24:28:5a:f2:07:a4:14:d2:64:c9:0b:ab:1e:3b:c1:57:
cf:85:aa:b7:a8:05:31:5a:d0:34:35:80:ec:c2:c8:e0:2d:25:
8e:b5:e8:af:78:81:c3:57:43:b3:bb:84:3a:06:fe:df:8d:47:
45:1e:d0:11:56:7e:45:f6:3d:f1:40:25:4d:56:b5:04:c5:c8:
16:08:4c:9d:11:c4:d8:61:81:34:5a:b0:2a:ec:d1:05:bb:d9:
30:89:4d:54:08:6a:27:55:43:da:3f:10:b5:21:22:35:82:0f:
de:f9:d3:30:74:01:28:44:b3:95:6e:80:40:bc:54:95:ef:82:
fa:7b:51:ba:17:78:cf:16:e4:59:c1:38:14:2a:d9:ad:1a:24:
53:b0:ef:70:6e:ac:a0:a0:be:0e:0e:c2:90:0e:39:2b:0e:e4:
cc:d3:ce:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRL3NS32Gpv+q/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
MTk2MWY1NjQtMGFiMC00ODQzLTg2NmEtY2Y5NjhhYjY3OWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPSHvnIaM+VF3LEquN/x3eJLszuLRdPm1FQM
OzHHuzfw0cYiqnx/BLQ7tA8XoeXnNCCqfMlJJjsNwhRwcB2gOvApSw0pysQIqwGB
Bz40OTLV2HTkvlFJXrrMdeu5Qh1Kce6aNqZepY1jjM55PH2bUAZ0g8+RgGmSOmi+
4+0pXr7Eho1hkYcaZFjtgIZ3hsPz8fwSPS2NdsnnKN1RhVetriOySisVq6NSrSTm
8W05BDwc0qyQmeqbg/SAQxKZ5cMQgHmOUixNEixuqCYQxSRmhQyRToH3+bhz+SW8
FrjfB+surur+GvEO3OZ/EagHCoPnxdOLEq5lOot2mt2wdUwp1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEld/1D9O0Sc+rQPr/G92hlm9gTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1YTY3OTUtYjFmOS0z
OTI5LWIyZmItYWUzNjNjZGZmMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJO+cn5EmJ6rEpGnq7FnXLH6hDCz1nn6ccH9uHOCyNcgwlvKN5Jq+P5
WIgy3EEP3AIuFfm57hKjYQy9Y+FSLAGwzimT3KlVXZDQ6tPazSV+4l1a3+kRuM1F
JH/kJCha8gekFNJkyQurHjvBV8+FqreoBTFa0DQ1gOzCyOAtJY616K94gcNXQ7O7
hDoG/t+NR0Ue0BFWfkX2PfFAJU1WtQTFyBYITJ0RxNhhgTRasCrs0QW72TCJTVQI
aidVQ9o/ELUhIjWCD9750zB0AShEs5VugEC8VJXvgvp7UboXeM8W5FnBOBQq2a0a
JFOw73BurKCgvg4OwpAOOSsO5MzTzmU=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:49 2026 by rpki-client