
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
File: f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json)
Hash identifier: 1bKgAJzkw7g8YrPTMaj1ezjqXNQathk9FavrN7jSCWU=
Subject key identifier: E1:73:52:10:71:F1:DB:DE:04:EB:3C:E2:E3:E6:2F:38:81:33:C2:15
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584ED431F43A68828E8F047D09A0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 16839
IP address blocks: 149.96.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:f4:3a:68:82:8e:8f:04:7d:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=89e766d1-0698-45b1-9884-0d42fcb4dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:6b:5c:d8:0b:68:6a:86:eb:d7:35:2d:71:
01:29:53:dd:b4:5a:86:f0:20:71:13:45:4e:e1:cc:
32:24:45:3b:1f:8c:f6:dc:4a:4d:e7:4a:37:47:93:
7a:4e:d1:ca:d8:22:9a:2b:33:04:fb:80:a4:6c:18:
ea:12:6f:bb:2c:cf:52:a1:b7:06:b8:49:b1:6f:27:
56:2b:bc:27:a4:26:d5:b9:82:ac:b2:cb:f6:1d:cc:
69:16:78:82:17:f3:fa:ee:44:68:e9:26:bb:42:dd:
50:48:8f:d3:51:6c:c0:7b:77:a3:10:95:ae:fe:49:
99:61:30:11:a2:ac:5d:2f:68:42:98:f2:8d:12:bb:
0f:30:89:31:4d:6d:b4:87:5b:ef:82:f2:7b:9c:e7:
d4:66:0f:c1:94:48:da:a3:f4:c4:bc:7b:69:05:ea:
72:42:8c:d8:7d:b2:2f:29:7d:a4:aa:1f:a9:a9:df:
4d:08:d2:49:bb:43:20:d2:9a:24:c0:fc:1d:02:2d:
e8:b1:fc:f6:43:95:bf:7c:9d:d8:7d:a0:e2:55:9c:
0a:91:fe:c0:2b:04:56:21:f7:da:17:d9:63:15:7e:
39:b8:1a:89:c3:49:fc:86:73:e8:e1:8d:fa:39:e8:
fb:dc:6a:db:f5:2d:90:26:33:e7:b9:9d:c1:c5:63:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:52:10:71:F1:DB:DE:04:EB:3C:E2:E3:E6:2F:38:81:33:C2:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:38:28:8c:9b:93:68:59:bf:35:1a:94:c9:85:1f:a4:99:b1:
2f:f3:84:35:cb:9d:56:77:e2:a0:a1:d5:19:db:f4:a8:19:c4:
bc:99:62:3c:06:e0:f0:0d:d7:f4:84:b8:03:60:f4:52:0b:e0:
d2:fe:ff:b7:74:c6:a8:49:99:61:52:bc:e3:30:72:65:71:94:
b5:a0:7e:3a:c1:05:84:9d:45:ce:bb:ba:f5:99:cc:a5:0d:00:
1f:4b:48:87:c7:28:73:a1:23:7c:14:0c:d0:04:ac:33:09:97:
29:ff:90:dc:83:1f:6f:a0:44:54:69:fa:8f:2d:e5:e1:1e:87:
92:c4:39:fe:e3:bf:8a:d5:36:ec:ce:78:d1:c8:7f:db:74:a6:
5c:b1:5f:20:8c:e2:2f:e5:32:20:d6:95:91:1e:3d:99:a1:24:
65:4c:9f:98:ef:a9:8f:d5:db:7a:53:39:b6:5a:c6:7d:64:8e:
af:69:bd:f6:96:2a:26:0b:e7:7a:7b:4f:5a:5a:8a:c6:a3:f7:
d4:e8:58:5b:5f:b3:5e:8a:fe:1d:c4:7b:a6:e4:23:4a:1e:40:
7c:f8:bf:6b:0d:06:48:96:c4:3f:7e:b8:98:7f:07:5f:06:9c:
94:2e:b8:54:21:c9:bc:8d:fd:18:e5:7f:81:a5:81:28:92:8a:
0e:77:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:58 2026 by rpki-client