
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
File: 296474ca-9a2b-35f1-a900-62276c4b824d.roa (raw, json)
Hash identifier: E2GhROUVZK5sy3G9pDPPN7/qZg7G51s+mADrWf1Cv1E=
Subject key identifier: FB:8F:CB:10:69:90:3E:AE:85:B6:43:BE:7E:E0:BE:84:BC:1F:5E:18
Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Certificate serial: 010D0C9F4328584EA78F40FF46793B5DEFFE5600
Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16509
IP address blocks: 64.207.222.0/24 maxlen: 24
64.207.223.0/24 maxlen: 24
67.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:40:ff:46:79:3b:5d:ef:fe:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8eee11b4-2938-4489-9a20-61e5714dd30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:ff:87:4f:58:63:4b:50:b4:49:35:bf:8c:
58:86:75:37:e6:ac:b6:fa:e6:7b:3a:23:0f:59:e6:
d7:a1:a7:ef:26:1e:bb:fb:a6:47:cf:05:9f:75:07:
ae:22:b9:78:c7:c0:1a:c4:5b:6d:b2:70:a6:4e:bf:
a0:36:75:ae:b8:4b:b4:98:57:6b:58:cc:8d:25:24:
d2:81:9a:17:73:fd:56:7e:57:1d:38:a2:aa:cd:67:
81:48:16:8b:5c:7a:cf:76:c5:bd:0f:29:39:cd:db:
24:9d:c1:9a:bd:b8:8c:2c:67:04:a7:c9:15:69:2d:
96:ce:18:79:10:8c:bc:bd:d5:f5:17:42:32:84:62:
b5:f0:3d:5b:8e:c9:ff:6f:01:67:2f:74:e2:61:04:
d0:cd:d5:7b:70:e5:65:8d:9e:b8:68:0e:32:e3:04:
d0:f2:eb:51:09:e0:98:ae:e0:79:9d:9f:a8:4a:60:
b0:5e:90:19:67:6f:02:86:fb:e6:54:37:a1:5a:1c:
fd:6f:0b:09:c5:67:36:dc:aa:99:f4:a7:04:88:b9:
4a:64:02:7c:92:56:be:25:5d:a4:87:ad:24:89:94:
c0:5b:26:57:fc:25:2b:67:37:7c:2f:86:5f:53:54:
7e:69:5a:19:36:d6:85:9d:6f:bd:fb:54:96:9f:99:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8F:CB:10:69:90:3E:AE:85:B6:43:BE:7E:E0:BE:84:BC:1F:5E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl
X509v3 Authority Key Identifier:
keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.207.222.0/23
67.222.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:03:a3:ce:2e:26:51:c5:2e:67:c1:1e:14:d0:f4:6d:5d:c6:
12:fd:48:1d:f1:30:a7:b8:63:c7:48:03:50:06:42:8a:7b:e3:
51:04:ee:37:16:f1:cd:a1:32:51:1c:0f:db:48:eb:9d:14:ed:
da:d9:9f:f1:0a:d4:59:74:6f:ce:42:1b:76:f9:49:7b:0e:da:
d8:b2:55:62:d9:35:5f:a7:51:53:81:7b:12:4d:10:d5:57:0f:
51:a5:f0:a5:36:ed:5e:56:b1:c6:8c:49:c8:4d:06:91:6e:cc:
d9:9e:3f:3f:64:02:01:0d:02:22:86:79:54:b2:20:23:74:89:
a2:8f:8f:cd:66:e3:2f:22:8b:de:0f:30:8e:9c:c1:99:29:45:
42:e5:7e:92:f9:e3:db:e5:99:0c:18:a0:7b:8c:9a:fc:1f:58:
19:d0:b5:fb:8a:2e:e1:37:6f:0f:be:ce:e8:16:9c:f7:60:38:
d5:7c:ae:f1:90:95:31:14:d3:4f:a0:df:a0:23:fc:5b:58:a7:
ab:4e:01:22:4a:9f:40:47:95:16:7a:cf:68:b9:3a:8c:27:e3:
1d:d2:86:88:f2:51:8f:94:f7:cc:17:1b:6f:1b:d2:4b:0a:9d:
ee:39:02:f0:71:37:eb:ad:9d:5f:b1:12:5b:0d:e8:b2:7f:ad:
b3:76:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:57:38 2026 by rpki-client