
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa
File: ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa (raw, json)
Hash identifier: LLYbdCiR9krFBCFOhIJNnGFjZmnhz/ci3j/6Em8ohT0=
Subject key identifier: FF:F3:3F:75:5E:45:27:54:AE:36:74:9C:B8:48:57:BB:21:D8:45:06
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584ED431F4017F4AD82D6F8CBBC0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 16839
IP address blocks: 149.96.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:f4:01:7f:4a:d8:2d:6f:8c:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=49f0b6ce-c8a9-48a1-b369-d05fbee32eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:71:5b:4e:8c:61:ac:cb:63:5f:43:70:22:
f8:51:17:0d:2a:1a:b4:af:ab:d7:fd:45:8e:34:a4:
3d:51:06:36:aa:5f:30:ef:7c:ae:37:d9:57:6e:ea:
c8:0e:72:c8:b9:6f:40:90:ec:d5:e7:16:e7:00:e3:
cc:bf:cc:37:a0:14:1e:2b:8b:99:01:0b:ad:23:62:
8d:a6:8f:69:92:86:7f:4f:02:6e:f3:fc:e5:1d:33:
c3:96:9c:c8:3a:3f:3d:d4:3c:26:ff:28:f9:93:8e:
62:8f:fe:e4:e5:37:30:bc:52:8d:20:01:17:9b:ab:
43:53:34:e0:77:54:7d:5b:82:11:9d:fb:ab:d6:59:
6f:ef:fb:19:98:f5:00:53:c1:f6:48:dd:fa:8d:2e:
dd:94:00:57:15:bb:65:df:b2:af:bc:68:e6:ae:52:
2b:92:74:19:b5:7e:63:be:bd:fb:14:c7:c1:41:f4:
ec:20:ae:3a:69:ca:f5:76:09:a7:d8:70:e8:63:fa:
b3:08:eb:df:61:fd:34:e4:ec:b5:ab:65:89:b4:bb:
2c:8b:80:cb:b5:71:8f:ce:fa:83:e8:e6:62:fc:55:
38:30:eb:cd:43:e3:d1:b8:c8:01:d5:a9:c4:b2:26:
13:b2:48:fc:a2:d2:8e:3c:eb:3a:1e:4d:50:10:78:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:3F:75:5E:45:27:54:AE:36:74:9C:B8:48:57:BB:21:D8:45:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:53:c8:d1:a8:f3:6b:d1:3b:21:57:14:13:33:4c:75:44:11:
df:31:e3:29:96:a6:ef:4a:2d:7b:d0:e9:38:82:fe:6c:7c:a9:
b8:ae:e8:be:c8:38:63:7a:94:fb:64:3f:70:b9:e2:fa:9d:bc:
1f:1e:19:f1:1d:c6:d4:77:de:98:51:34:f8:6f:8b:22:13:1b:
e7:1a:3f:87:1f:11:8a:89:50:4b:9f:ab:58:df:a6:13:57:18:
ee:af:90:6e:d7:cb:ff:8d:74:aa:cd:d2:77:9a:9a:7d:ca:6d:
a4:9a:ba:49:be:0b:df:6a:90:6f:31:94:42:c1:49:bc:b3:7b:
de:61:ae:66:e8:10:10:b9:e6:a5:ee:cc:b5:2c:c0:14:66:a0:
92:b4:41:69:21:f5:71:0a:65:d1:72:d6:e5:19:7b:f9:b2:54:
3d:27:58:5f:69:53:a9:89:c8:ab:aa:30:c3:29:ff:a1:88:9a:
77:74:00:f9:da:3d:17:2e:80:c7:bb:c4:47:8a:cc:a4:c8:24:
a3:de:f2:e8:50:88:d1:4e:24:0b:1e:be:e9:e8:35:77:6d:10:
e2:2e:59:58:b5:0e:ac:3f:40:42:e4:c4:0c:fb:83:56:f8:e7:
35:c0:a7:b1:b8:4a:c8:dc:e7:cc:34:59:d9:1c:d6:f1:1b:9c:
b0:4e:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:50 2026 by rpki-client