
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa
File: 098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa (raw, json)
Hash identifier: 44x4jT27uQwnTmAtPB7rjUg/A4qcPvw1DvMycbMfYD4=
Subject key identifier: B7:B9:75:D2:1E:54:40:A1:57:B0:23:70:DB:36:77:41:7C:FF:9D:9B
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584ED431EDD3A44543FF9DC46CC0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 16839
IP address blocks: 149.96.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:ed:d3:a4:45:43:ff:9d:c4:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=921eea9b-b0ae-4d6d-8a1a-eb45e5372620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:a4:67:b7:73:8e:4b:b7:39:20:35:54:93:
9f:ae:b0:ca:22:cb:0d:b7:7e:46:46:8b:71:df:a8:
d8:1f:22:21:02:37:9f:1d:55:36:f9:8e:ae:99:0a:
ff:08:07:57:96:a8:fd:3d:c5:ca:5d:50:56:5b:bc:
c7:95:d7:7c:fb:d6:96:a6:03:23:17:7a:e8:d4:dc:
7e:9d:0e:d3:25:f2:9f:8d:7c:cf:f0:f4:31:cb:4a:
1f:db:b3:1a:6a:1d:3a:16:a2:05:a1:40:e1:bc:d1:
0a:45:c4:7a:81:7c:ed:92:61:6e:7b:73:69:ce:1c:
1e:84:3f:5b:20:6c:70:95:e2:2c:89:9d:b2:66:3e:
79:26:ee:d8:11:61:d3:c9:ea:9c:03:17:4d:c3:31:
ef:4e:63:31:7c:6a:70:a9:e5:6d:e7:43:fd:51:63:
24:fc:23:0c:68:db:22:36:f6:0a:b4:b5:62:af:87:
95:b5:01:9a:2e:c0:23:11:18:32:45:24:a5:23:1a:
8c:bd:c7:d7:a0:ed:ed:96:6a:95:59:15:73:5f:96:
c7:b8:96:f1:6d:e1:01:91:cd:ce:50:06:bb:ca:c5:
33:2a:dc:f8:49:97:60:f7:fd:8f:08:5b:b1:23:6b:
f9:38:74:6a:fd:a5:f6:83:8a:42:d4:2e:fe:c8:21:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:75:D2:1E:54:40:A1:57:B0:23:70:DB:36:77:41:7C:FF:9D:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:59:00:08:5e:df:91:44:e1:d1:e0:f9:33:a0:9d:7f:5a:47:
e6:61:78:0a:e0:89:ca:8e:2d:65:fe:70:18:58:2f:4b:65:ec:
90:99:db:ba:9a:c3:91:e2:d3:9d:fb:01:bc:0c:7f:b3:bd:9a:
9b:af:9b:72:74:1c:1e:eb:f5:e3:db:3f:f1:7b:50:a5:18:1a:
cd:c2:28:2f:14:30:5d:99:f2:07:17:79:53:8b:a1:c4:2f:48:
98:30:70:7b:87:ed:2c:05:4c:0c:a7:77:d0:dd:90:6c:b4:20:
56:ff:df:11:94:58:ea:af:13:19:c9:fa:ea:80:13:16:21:9b:
9e:85:4e:06:31:1f:14:a6:00:13:7d:d0:ca:4c:d5:42:cb:56:
05:86:d2:31:dc:4d:bc:6d:c9:5f:fe:36:72:6a:2d:09:db:40:
24:b6:e5:a8:18:03:42:27:76:dc:16:87:ec:33:dc:0e:1b:64:
1a:74:c1:b8:eb:86:f0:f0:23:c8:b8:39:fe:fc:1c:0a:93:30:
4c:66:91:0e:f1:c8:c5:f0:4e:8c:31:86:11:67:b7:04:70:52:
da:a5:45:15:07:2a:79:3b:02:bc:c1:42:88:5c:93:9a:40:54:
33:e8:05:7e:c2:ae:3f:3c:f5:09:e7:a9:0a:5d:d9:8e:26:d6:
2b:8f:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:32 2026 by rpki-client