
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa
File: 89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa (raw, json)
Hash identifier: iTs4QIpy7qOR7iWFOsOklrWc1oeYvs8UelEmnwecugU=
Subject key identifier: 46:80:E2:2F:E3:AC:59:79:CB:20:84:2F:14:20:7E:E9:C4:61:4D:3E
Certificate issuer: /CN=7b430551-8bf9-4310-8a7f-b2233e29affd
Certificate serial: 010D0C9F4328584C602BF0DC15125F46DFB27000
Authority key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa
Signing time: Thu 01 Jan 2026 02:00:31 +0000
ROA not before: Thu 01 Jan 2026 02:00:31 +0000
ROA not after: Wed 01 Apr 2026 01:00:31 +0000
asID: 17456
IP address blocks: 199.127.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 21 Feb 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:60:2b:f0:dc:15:12:5f:46:df:b2:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b430551-8bf9-4310-8a7f-b2233e29affd
Validity
Not Before: Jan 1 02:00:31 2026 GMT
Not After : Apr 1 01:00:31 2026 GMT
Subject: CN=6be74e76-3bde-4049-b3b6-3f7f98e040ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:f1:e4:dc:d9:a1:f0:6a:07:f8:95:29:ec:
d3:bc:ef:23:d0:93:ce:41:93:ec:4b:0d:9a:73:18:
3a:0f:ad:a9:5a:51:88:88:02:4b:00:37:87:46:85:
41:81:30:fd:c3:a4:7e:83:7f:38:2c:96:1c:eb:f2:
70:a8:af:f2:fd:88:1a:88:90:66:63:ad:de:92:fb:
60:54:fc:73:68:c3:3d:2f:04:51:df:ec:99:13:4f:
88:01:fb:97:b1:2c:2e:e7:82:52:2a:15:b0:eb:06:
e9:a8:d8:3f:76:60:57:b8:de:e7:e0:4e:6b:3c:f0:
aa:9f:ce:f2:5a:2b:58:ea:a7:74:1f:b7:2e:d7:ed:
e1:28:80:aa:51:80:07:a5:bb:d6:a4:ca:90:08:e6:
6b:15:ea:80:7e:aa:a5:94:79:10:06:cb:d2:46:98:
10:e8:22:69:f6:b2:9c:c4:d6:80:26:b2:4b:df:74:
9a:38:cf:b2:45:2e:ca:67:f7:95:27:7a:de:78:23:
68:f5:d4:6a:2f:20:2b:b2:e9:03:8d:61:33:9d:82:
9d:f4:86:15:c9:87:8c:02:66:95:26:e5:4a:d9:34:
33:0f:24:29:f0:76:ab:26:5a:26:78:3f:73:38:90:
69:3f:d1:b6:2b:45:4f:34:86:ad:d0:6a:b5:87:03:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:E2:2F:E3:AC:59:79:CB:20:84:2F:14:20:7E:E9:C4:61:4D:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl
X509v3 Authority Key Identifier:
keyid:6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.127.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:31:ab:28:d0:e3:2b:19:dd:41:ee:b7:ba:0a:56:d3:71:cf:
a4:28:7a:8f:b2:5d:d6:2d:20:09:53:25:8c:ec:ec:93:18:88:
c1:76:1e:98:26:d5:18:9d:0e:34:38:b5:bb:c6:c4:91:e9:0f:
5a:7a:e3:ac:d4:27:72:01:b6:95:26:7d:a6:89:15:44:82:95:
4f:49:5c:2b:75:7b:2e:00:07:1e:65:c6:f9:d4:08:b6:23:7e:
45:87:96:42:0d:2e:28:ef:1c:56:0e:04:49:44:d6:0e:48:17:
4d:01:5d:b4:e4:f6:3f:6f:06:a6:10:ab:5c:fc:2d:a8:d0:0e:
4a:23:5f:13:a5:c0:ce:c2:10:db:48:b7:d2:9a:13:5b:ad:88:
7e:d0:e9:08:dd:96:71:a3:f2:8c:50:1f:9f:56:cb:62:62:86:
44:e3:cc:51:e6:a8:0f:1e:97:5a:78:14:59:39:67:3e:a3:ee:
71:40:a0:44:cf:9f:f4:0f:ee:7d:a3:8d:1d:92:06:22:a7:d2:
5c:5e:a5:ac:6d:9a:a9:bb:43:24:ee:d3:d2:a2:49:35:62:eb:
a3:9e:5b:de:a3:c6:2d:2a:23:29:39:bc:cf:99:a3:6b:58:00:
a8:75:7f:7a:a0:de:82:cb:d6:b1:0b:95:83:36:0b:1e:70:db:
8c:34:03:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:54 2026 by rpki-client