
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
File: 37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa (raw, json)
Hash identifier: 5Zc8mRRkA6r0RCaUw23xbgyIMJ5n7OcpaKH1L/RzsDc=
Subject key identifier: 6E:3A:C2:55:47:A8:79:FE:85:42:AD:B1:03:F1:F6:1B:18:80:BC:9F
Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial: 010D0C9F4328584F66C2BBF3AD970F5F3AA5BC80
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
Signing time: Mon 05 Oct 2026 13:00:13 +0000
ROA not before: Mon 05 Oct 2026 13:00:13 +0000
ROA not after: Sun 03 Jan 2027 14:00:13 +0000
asID: 14618
IP address blocks: 216.139.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:c2:bb:f3:ad:97:0f:5f:3a:a5:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Validity
Not Before: Oct 5 13:00:13 2026 GMT
Not After : Jan 3 14:00:13 2027 GMT
Subject: CN=353d91bb-8c75-4798-b5b1-0461f50d343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:4f:b8:e8:77:17:23:21:75:7a:5b:11:74:
52:20:98:88:04:40:d0:26:68:fb:ec:62:ec:bb:b0:
2f:17:b4:90:dc:97:76:65:cc:6b:9e:25:21:54:66:
f3:49:93:3c:8f:ea:23:0a:f8:db:33:43:ce:68:72:
b1:24:14:4a:fc:ae:9f:76:55:03:3b:30:7e:a7:0b:
f5:08:5a:ab:5f:5c:b5:83:0b:62:c0:89:4b:06:10:
86:d5:f9:d5:5d:00:1d:95:bf:ca:a2:10:70:0b:c4:
3d:ee:ec:e1:ff:73:35:ac:83:8e:d3:c1:c7:ce:3a:
a8:9c:49:09:d1:24:71:ec:e4:f1:a1:b4:fc:0d:ae:
ee:20:35:4d:e2:fe:5a:a6:1f:c6:1a:88:ba:4f:5b:
43:bc:b8:d6:f5:63:8d:de:af:24:f3:48:9a:b0:12:
13:68:95:f7:cf:29:fd:6e:a4:2f:b6:64:70:06:f3:
8e:39:c6:0d:61:0a:a8:a6:c4:33:54:1e:48:a2:6c:
50:73:bf:61:90:bb:e4:49:6b:13:ac:60:37:09:74:
ea:54:40:fc:7d:e6:ca:a1:77:79:ad:8c:21:5b:d6:
4c:e0:fb:24:38:35:77:2d:39:00:98:d6:1a:f9:2a:
13:60:ed:84:55:2f:33:63:d4:1e:51:96:10:19:14:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:C2:55:47:A8:79:FE:85:42:AD:B1:03:F1:F6:1B:18:80:BC:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/37e03cc8-c9c3-3fc5-8ed1-a0490f895058.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
X509v3 Authority Key Identifier:
keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.139.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2d:3c:26:31:c7:21:e3:97:d7:a5:4e:73:4f:a4:f1:93:a9:
42:0a:b3:27:c3:67:29:64:4b:44:f2:1f:43:ca:7a:db:c2:b1:
35:7e:1c:5a:2f:89:85:e8:7b:05:6a:7e:db:fc:61:28:01:7c:
4b:a5:62:43:21:8d:57:27:21:43:cd:3b:90:b2:83:2b:c1:b8:
1a:cd:0c:88:85:bc:ac:44:22:38:f8:aa:54:f1:a7:b2:64:a8:
57:44:b5:34:36:70:3a:e9:cb:6a:fc:3a:00:e9:ae:6e:7b:71:
55:d8:78:e1:80:de:a0:06:20:a7:5b:40:df:67:bb:61:df:86:
cb:d1:70:49:d6:1e:ba:e6:d1:5d:28:f1:6e:3c:cd:2c:a9:32:
d6:60:9b:0a:60:18:f8:a7:43:1e:fe:3c:6d:d4:ef:74:4d:85:
a3:f1:93:f9:63:f2:a4:12:c6:2c:08:80:eb:c7:af:35:ce:da:
ef:8f:e9:c1:4c:ad:7f:4c:7f:16:2c:6f:09:6b:d5:cf:57:4c:
cc:3c:1a:bb:80:97:ee:36:c4:05:73:c7:16:2e:96:6c:66:ad:
24:55:2c:17:e3:55:27:a9:e5:ca:11:01:93:5c:82:19:ff:34:
c7:4b:28:e0:a7:47:ec:29:f6:e1:3e:92:ad:ea:ac:ac:dc:24:
77:c7:45:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:24:23 2026 by rpki-client