
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa
File: 0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa (raw, json)
Hash identifier: jhKOJ+mXszzObTaKlg/iDHaAsVYw8OllP23eC+3asQ4=
Subject key identifier: 2F:EB:06:D5:31:91:E4:56:7E:58:13:77:A6:4A:CA:7F:C3:22:3C:B9
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584ED431F3BD3993E5FDAC91D800
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 16839
IP address blocks: 149.96.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:f3:bd:39:93:e5:fd:ac:91:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=cd534cb4-597e-40ed-891b-36640615c376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:fe:87:8e:7f:02:2f:29:e7:f0:cf:fe:52:
e5:fb:61:fc:bc:0b:9d:12:b3:fb:3f:83:ce:65:89:
5f:2e:c9:88:f7:b5:a2:72:13:3e:59:79:be:f5:f3:
a4:41:01:d1:08:fa:96:89:59:fe:50:6c:ea:08:20:
1a:92:7f:ce:f5:66:3a:fd:d0:81:48:ad:b1:8a:46:
ee:bd:10:83:ac:9b:b5:99:81:98:39:7b:3a:30:08:
dd:75:8b:55:ec:f8:d9:82:c8:06:12:e7:c8:64:7d:
89:d5:77:ba:51:5c:4e:3c:fa:00:ed:8c:dc:fe:72:
60:94:f8:3f:a7:03:5f:47:cd:c3:c1:bd:9e:d7:ee:
e8:32:94:ea:0b:74:4b:f5:5d:0e:68:ef:3c:05:74:
b3:bd:ae:0c:39:60:88:87:27:f5:86:ce:13:88:f1:
d3:65:9f:8a:3f:d7:34:c6:3b:91:08:c7:90:be:53:
65:f4:13:7c:8c:73:d6:90:d7:96:3c:8f:cf:1d:b9:
28:1a:16:37:ec:86:1a:34:1e:36:0a:d1:fb:28:69:
bf:3c:e4:19:0f:94:ab:36:4e:f7:98:85:24:55:87:
1e:ae:2b:33:fc:4a:f0:be:cd:4b:3e:1e:8d:be:0c:
13:ba:f6:10:e0:d1:2b:24:f1:08:bb:ab:ed:63:a9:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EB:06:D5:31:91:E4:56:7E:58:13:77:A6:4A:CA:7F:C3:22:3C:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b8:a4:9d:dc:8f:03:3a:7a:7d:24:a2:b0:db:60:d9:31:ca:
cc:93:d9:91:29:51:db:87:eb:c8:a4:fc:04:cc:be:a0:35:c3:
09:a9:89:e8:cb:b4:7e:cc:47:9e:80:7c:ed:46:21:16:cb:24:
cf:b0:f7:b8:53:55:e1:aa:ae:2a:59:aa:66:4a:c6:72:ac:26:
28:29:26:73:0d:16:b2:6b:ec:84:be:40:e0:48:ee:26:86:29:
61:11:10:1d:d5:b1:1d:c8:45:5e:0e:d2:29:2a:31:93:55:c0:
82:b3:2e:16:da:39:ba:27:af:76:13:93:c1:f0:f0:2a:09:3d:
61:f4:68:4e:cc:0f:6e:49:0d:21:05:f0:4b:b4:f8:bc:bc:cb:
17:54:64:ce:ab:64:1c:4f:26:04:46:99:15:99:7f:ba:bb:fd:
fc:7a:08:01:d1:32:00:e7:36:99:9d:b1:a2:27:1b:15:ce:c5:
8c:21:12:59:a7:da:22:8f:45:2c:ac:04:3e:ff:f0:f7:09:9f:
ea:16:ca:f0:a8:c7:87:44:3d:fa:86:d9:6a:4d:c3:8c:ed:fb:
bb:b4:26:e0:44:86:4e:5e:64:3f:04:11:8d:26:52:68:db:1a:
d4:cf:a1:cb:f8:b6:12:c0:bc:bd:29:3a:fd:b5:4c:86:3b:ef:
e6:c2:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:33 2026 by rpki-client