
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa
File: 7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa (raw, json)
Hash identifier: HgdUbcQttKMAOF+DQGW2NtWSgoG0PcCYV1e5gXkrcQE=
Subject key identifier: 28:77:A0:8E:52:2F:99:0C:1A:0A:73:FF:5F:A7:9C:68:07:0F:04:80
Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial: 010D0C9F4328584EAE8197DBD55F70D9A23F3580
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 14618
IP address blocks: 143.244.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:97:db:d5:5f:70:d9:a2:3f:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=f0d74bac-ddd9-49f5-a06f-6c745dd709fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:87:64:5b:cc:35:85:5d:d9:3f:75:d3:e4:
45:16:2e:9d:9f:01:96:8b:25:2f:77:eb:99:16:da:
d8:55:dd:94:c5:f0:91:25:86:85:9d:57:35:40:69:
78:c8:95:32:ed:79:13:bc:5b:25:59:53:e6:78:cd:
3f:77:89:e2:a7:18:96:22:f8:79:45:97:0c:5f:a1:
d2:bc:42:c3:4e:0f:ac:37:c9:0e:00:3b:05:91:08:
c9:c1:ef:c5:3a:4b:e1:0d:e7:56:47:53:de:1e:da:
2f:23:e0:25:19:61:81:33:f8:70:8c:37:7e:6e:9b:
69:55:ad:2a:6f:2b:61:c9:3f:6c:03:ea:50:80:72:
da:9a:7f:72:09:33:44:81:57:8f:5b:81:e3:3c:d9:
16:12:4f:2a:15:63:54:a6:3b:a8:b8:cc:77:53:67:
02:f6:da:8b:c8:2e:f7:3e:84:2b:88:31:7a:88:f8:
fd:09:fc:63:ac:ed:25:9b:6e:41:98:b5:47:14:07:
a0:68:8c:f0:2c:b1:3c:fb:03:3b:43:3e:1c:4b:81:
27:a9:4e:9d:e3:52:84:7c:75:61:28:bc:69:8a:dc:
3e:d4:5d:0f:8f:9e:e9:e4:ad:85:62:4d:9a:d2:b2:
62:8d:81:f5:45:45:e6:2a:d5:16:fd:aa:a7:00:0c:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:A0:8E:52:2F:99:0C:1A:0A:73:FF:5F:A7:9C:68:07:0F:04:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/7e8c9917-50d4-3d43-8859-57e4e45c2a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
X509v3 Authority Key Identifier:
keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
sbgp-ipAddrBlock: critical
IPv4:
143.244.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:06:c1:bf:39:fc:60:cc:01:20:d1:68:f8:08:44:7d:3a:55:
f1:c6:a2:46:94:f2:01:b0:91:42:06:2d:60:bd:52:51:c7:25:
aa:07:f3:23:a6:82:58:c0:a8:3b:d3:07:0e:b1:43:62:aa:13:
4f:67:86:1e:10:92:15:f5:f2:2c:bf:85:1c:48:ed:f8:e0:49:
c0:15:48:1b:7f:3f:66:6d:d4:26:5d:8b:57:c8:9d:93:e9:f1:
f6:bb:bb:4a:8c:e7:e6:82:97:12:d9:23:fd:37:ca:34:0e:2f:
d5:df:16:8f:75:f6:00:d6:62:55:04:c5:2e:44:81:1b:00:94:
9b:0a:23:63:c2:16:ba:c4:e4:f4:95:85:4b:aa:b6:a9:c1:f0:
75:19:16:63:42:bb:7a:0d:db:9b:04:3b:02:36:18:67:06:26:
cb:e6:d0:9f:d6:79:4a:68:3d:a8:75:05:3c:1f:c5:ca:17:b2:
2f:e0:40:c8:f5:ed:b8:08:bf:61:2f:50:27:c4:2a:e8:cc:3b:
d5:2f:e6:c4:9c:8e:0e:d1:8b:13:37:0a:48:18:d7:61:53:c0:
6a:c5:de:c0:a1:38:77:d5:a7:e7:6a:e6:c6:58:b8:2b:aa:d3:
cf:47:10:b7:d1:90:9d:ac:83:7d:a5:ff:c6:bf:88:39:b1:34:
dd:0d:04:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZfb1V9w2aI/NYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
ZjBkNzRiYWMtZGRkOS00OWY1LWEwNmYtNmM3NDVkZDcwOWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7qHZFvMNYVd2T910+RFFi6dnwGWiyUvd+uZ
FtrYVd2UxfCRJYaFnVc1QGl4yJUy7XkTvFslWVPmeM0/d4nipxiWIvh5RZcMX6HS
vELDTg+sN8kOADsFkQjJwe/FOkvhDedWR1PeHtovI+AlGWGBM/hwjDd+bptpVa0q
bythyT9sA+pQgHLamn9yCTNEgVePW4HjPNkWEk8qFWNUpjuouMx3U2cC9tqLyC73
PoQriDF6iPj9CfxjrO0lm25BmLVHFAegaIzwLLE8+wM7Qz4cS4EnqU6d41KEfHVh
KLxpitw+1F0Pj57p5K2FYk2a0rJijYH1RUXmKtUW/aqnAAwOYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCh3oI5SL5kMGgpz/1+nnGgHDwSAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvN2U4Yzk5MTctNTBkNC0z
ZDQzLTg4NTktNTdlNGU0NWMyYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/RRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQGwb85/GDMASDRaPgIRH06VfHGokaU8gGwkUIGLWC9UlHHJaoH8yOm
gljAqDvTBw6xQ2KqE09nhh4QkhX18iy/hRxI7fjgScAVSBt/P2Zt1CZdi1fInZPp
8fa7u0qM5+aClxLZI/03yjQOL9XfFo919gDWYlUExS5EgRsAlJsKI2PCFrrE5PSV
hUuqtqnB8HUZFmNCu3oN25sEOwI2GGcGJsvm0J/WeUpoPah1BTwfxcoXsi/gQMj1
7bgIv2EvUCfEKujMO9Uv5sScjg7RixM3CkgY12FTwGrF3sChOHfVp+dq5sZYuCuq
089HELfRkJ2sg32l/8a/iDmxNN0NBAM=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:55:07 2026 by rpki-client