
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa
File: 148e8965-c9d0-383e-82c1-fd713e6a01d1.roa (raw, json)
Hash identifier: uceaabI2BYDLs3gwOxrnSsdmGsxK3EqeoTbE9TYX4Q0=
Subject key identifier: 34:09:D2:DD:22:6C:49:67:D2:57:BA:5B:3F:38:99:C3:3A:89:A3:3C
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584E31CF1B635D1CA1B9026B2A00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa
Signing time: Tue 16 Jun 2026 21:00:12 +0000
ROA not before: Tue 16 Jun 2026 21:00:12 +0000
ROA not after: Mon 14 Sep 2026 21:00:12 +0000
asID: 16839
IP address blocks: 149.96.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 29 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:31:cf:1b:63:5d:1c:a1:b9:02:6b:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Jun 16 21:00:12 2026 GMT
Not After : Sep 14 21:00:12 2026 GMT
Subject: CN=6d263cb4-80f5-48d0-b725-9ddb72a001ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:17:71:56:22:fd:56:39:e6:02:d1:33:9e:
bb:8a:33:86:fe:45:47:33:a0:df:a6:45:d1:94:42:
76:0c:c8:de:d2:df:70:3d:2a:9e:b9:44:14:a0:8a:
e9:57:a3:b9:ca:9b:81:c7:7b:1e:42:59:93:bc:4d:
54:1d:c9:50:a7:62:25:5f:ab:84:45:3e:33:e6:44:
7e:6d:2c:61:55:3e:7d:07:62:1f:ca:b7:2a:bc:d1:
ea:ba:16:69:00:c7:81:82:48:a4:1c:1b:07:fe:ab:
8c:c9:5b:c2:bf:5f:25:d0:68:bc:0c:fd:9e:41:57:
30:28:6c:0b:db:89:b5:73:95:ff:e6:99:24:98:22:
3b:1d:2d:9b:2c:c5:30:62:b6:c7:10:ff:7c:0e:3b:
31:c0:09:d1:2f:37:cb:cc:0f:f4:00:56:05:1c:6b:
d6:30:f6:57:95:a8:85:7b:c8:4a:db:30:78:c3:25:
de:f6:4a:64:dc:35:72:3c:4f:c0:6b:40:ad:5c:81:
4a:dc:53:8d:48:32:8b:08:0e:58:eb:de:fd:d3:89:
7a:3e:0e:dc:de:da:b5:b7:df:33:c9:9c:86:68:1f:
a8:5d:e8:d6:bf:81:ca:ee:f8:a8:54:69:92:85:6b:
ea:43:b5:6a:d1:06:39:05:72:92:81:39:b6:2d:d4:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:D2:DD:22:6C:49:67:D2:57:BA:5B:3F:38:99:C3:3A:89:A3:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:32:a1:ca:a8:10:b3:3e:d3:39:f3:66:a5:47:74:cd:00:53:
09:33:8a:72:31:50:bc:f6:7e:ed:bf:e3:bf:10:c3:c0:81:9b:
88:0e:4d:f7:07:e3:58:98:f7:f8:5c:6e:46:95:c6:1a:9d:f1:
e6:08:42:a8:57:30:15:1c:9c:3f:42:9e:4b:75:93:1d:97:ba:
6e:16:1d:3e:a9:ce:39:1b:b9:ca:f1:73:bb:61:f2:fd:3f:a8:
5d:59:0e:2c:e2:5c:96:7e:b6:92:e6:bb:0b:4d:9a:04:11:b4:
fc:7d:31:b0:5e:8c:b2:44:9f:28:aa:1e:f7:66:52:16:af:d6:
e2:02:8d:79:1b:da:2b:0c:f7:0e:f2:5d:61:e5:1e:cf:39:be:
70:98:6e:5e:55:f3:8a:2f:16:4c:1d:d6:28:32:68:29:8a:c2:
37:1f:60:14:22:61:d4:06:1a:85:f9:8d:72:00:b6:c9:d5:a2:
f2:8d:7e:d5:49:67:48:3e:16:b4:a6:06:55:a9:a6:98:3c:c0:
b7:8f:3d:20:3c:f8:c9:90:9c:53:fb:88:9d:ea:06:45:34:c7:
2c:15:cf:b0:c9:e7:f7:58:42:9c:8e:39:7e:17:3a:aa:08:ca:
27:73:5c:c5:1b:8e:0a:05:97:c2:b7:80:ac:18:bd:bd:b9:c2:
89:12:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:23:33 2026 by rpki-client