
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa
File: ee433468-bf42-3f91-8d0a-4a4c07f44583.roa (raw, json)
Hash identifier: kiqnyNjvQV56WAjtY3XUP93uKAVNhxZDxtR6E4qKYfA=
Subject key identifier: 46:11:BE:E8:77:66:60:23:2F:F4:65:3E:F8:79:2A:BD:51:78:D9:6D
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584ED431F4184347FBCD2EEEEA40
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 16839
IP address blocks: 149.96.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:f4:18:43:47:fb:cd:2e:ee:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=bb168e66-c377-476d-90ae-2fcd1b037c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:88:c7:bf:d6:0a:15:41:42:f4:50:05:36:
9f:dd:27:64:84:d6:af:b0:7e:67:b4:9b:91:4b:4e:
5b:ab:2d:43:a5:fd:94:cb:26:8e:46:1e:31:b5:24:
4f:31:48:a0:8c:14:ca:c9:f6:a9:09:a0:58:4b:5f:
27:d7:83:cb:f0:57:94:39:bf:2f:8f:5a:b1:a9:2d:
77:df:43:64:e0:60:7a:f6:32:62:b8:66:c5:0a:f9:
5e:7e:83:e9:58:f0:aa:6c:57:31:10:d7:a0:51:67:
d1:ff:15:a3:69:51:58:36:d3:23:94:3e:64:d4:64:
1a:ef:1d:5e:06:93:4a:79:1c:80:36:7c:ce:bb:25:
7b:bd:f6:c6:5c:94:b1:5c:24:ea:1f:3f:3c:57:6f:
c0:5d:69:85:3d:2e:11:aa:b9:8b:9c:0b:6b:0d:76:
58:23:90:e2:28:5c:de:e4:79:21:ea:fe:f6:8b:81:
97:1a:1c:9d:a0:21:06:a3:42:db:7c:f2:d4:45:88:
e9:f4:a4:51:a7:3c:2f:54:5a:e3:c1:91:6a:2c:7b:
a1:92:02:c4:f9:73:10:d9:ff:20:18:85:cd:21:84:
c3:e8:9f:69:96:c1:cc:57:e5:f9:20:a5:fd:4d:46:
ad:54:92:1b:4d:f3:b4:59:ff:91:e3:b7:a7:f9:1c:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:BE:E8:77:66:60:23:2F:F4:65:3E:F8:79:2A:BD:51:78:D9:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ee433468-bf42-3f91-8d0a-4a4c07f44583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a6:99:e5:5d:c6:6a:10:83:87:ed:8b:9b:95:78:3e:e3:d9:
04:74:a3:dd:fa:5c:89:f9:10:43:01:22:55:ec:f3:73:23:c7:
ed:d7:eb:84:09:4f:08:3a:b9:7c:4d:28:df:3d:38:15:28:93:
49:4b:6d:b4:69:ab:82:8b:bc:0a:fa:0c:8b:e5:31:7c:6f:a7:
80:40:2c:e0:ce:10:c6:32:e5:ad:c3:d0:0a:c2:28:9b:fb:8d:
9c:36:e1:c5:22:26:68:16:ab:c8:63:c2:53:49:7f:1e:70:ff:
26:0b:c5:19:79:10:5b:ca:ed:4b:b1:92:e1:cf:73:bc:52:c9:
89:03:18:56:68:cf:a0:9b:d4:9a:60:c8:63:86:a0:96:b3:92:
d9:ed:e4:c8:f7:7f:ff:5e:2c:6a:8b:90:ec:72:f4:0d:3f:7f:
a5:fa:cf:93:01:c5:39:ed:0e:4c:08:f4:bc:c0:de:c6:c6:99:
f6:8f:ae:bc:00:e6:62:23:b0:88:2f:b0:e9:7e:1a:e0:5c:3b:
e1:b7:7f:8f:66:1a:b0:06:45:0f:fb:8b:41:01:1a:03:0c:12:
9f:9f:66:bb:8e:f4:40:27:57:84:f4:d8:11:2f:35:c2:90:ba:
fe:42:7f:5e:7e:b6:92:fd:3a:48:d9:25:14:6e:5e:14:1b:4b:
7c:de:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:55 2026 by rpki-client