
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa
File: 9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa (raw, json)
Hash identifier: j9EDySu84JpZkt3xLS00UEpdxr8AJ3yixxvRkm2erO8=
Subject key identifier: 35:85:85:44:DD:3D:83:D4:51:0B:37:29:53:94:1A:6B:3A:06:B4:67
Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b
Certificate serial: 010D0C9F4328584EA79630111974BF35722F0B50
Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40676
IP address blocks: 199.89.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:30:11:19:74:bf:35:72:2f:0b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=985d6b93-3ab7-40a0-a045-a09eb5bdfc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:6e:6b:35:6b:82:3c:6a:d3:93:b7:e7:fc:
56:c3:d4:07:42:4c:b9:e5:cc:81:5e:80:59:99:ad:
13:aa:22:d7:70:64:af:7b:2f:8e:93:46:f9:23:80:
d4:cd:72:de:aa:7c:55:c9:8d:14:a4:98:0b:2d:29:
ef:d7:1b:8f:71:0c:c2:7c:80:f4:b1:10:94:b4:89:
6c:33:0c:44:e3:18:08:f3:99:ac:11:05:a1:20:90:
c5:2b:2a:9f:27:40:ed:3f:8b:f6:cc:1f:1a:7e:f0:
f5:f4:ea:db:64:e6:f3:b0:ed:84:a0:d2:ee:37:22:
9e:df:f4:77:4f:82:c0:73:7e:27:a2:97:6c:6f:d8:
1a:40:24:7f:c2:e1:64:33:be:7b:f8:1c:a4:6b:25:
0e:ac:ca:04:31:6a:ad:8e:da:e6:fe:67:a2:11:b2:
4b:b4:66:9d:bc:4d:34:82:34:29:86:65:1b:61:ba:
2d:25:2e:cc:7c:d9:69:a1:e3:4d:c3:7b:39:31:6e:
f1:67:5d:2c:b7:80:10:38:b0:9b:64:60:58:cb:10:
f5:24:02:7d:2f:ec:6b:7f:ec:bf:22:77:4b:fa:d0:
67:f2:88:32:22:2a:5e:79:06:a5:50:0c:7a:47:1c:
fc:c3:33:e6:7f:bb:32:06:28:97:c5:f5:41:76:cd:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:85:85:44:DD:3D:83:D4:51:0B:37:29:53:94:1A:6B:3A:06:B4:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl
X509v3 Authority Key Identifier:
keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.89.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:64:fd:92:60:b5:64:76:87:aa:3f:51:de:0d:6b:c6:42:7b:
0b:e7:7d:47:97:52:aa:b9:18:67:5a:68:7a:07:5e:c0:4e:91:
f0:1d:e0:0e:b0:23:b2:42:b7:02:94:d3:6e:b6:28:e9:99:ec:
40:cf:a4:15:8d:6f:21:a9:59:c9:5c:ca:8a:fa:4e:28:a8:3e:
37:75:da:9f:97:66:68:7a:7a:cb:f4:a5:e9:e6:a8:0d:11:b9:
0e:09:a7:09:c4:da:2e:fd:d5:9b:d1:53:be:f9:01:bb:0f:ad:
79:c6:c5:89:6c:db:4e:ca:07:6a:27:30:d8:5a:dd:16:7a:9f:
53:55:5f:a4:d0:97:f7:1a:d4:11:14:a4:b8:8f:d7:ae:e3:8e:
40:80:7b:d0:34:44:3d:2f:11:7c:29:7a:4d:57:78:58:0f:02:
2d:e9:29:bc:cd:49:aa:9b:22:14:4d:92:9c:35:0e:7a:d3:ec:
3c:51:90:07:d5:0b:c6:46:34:45:58:58:64:6c:2e:89:eb:9f:
e4:32:da:f4:c6:aa:90:76:27:99:99:12:8b:9c:ac:a3:37:a9:
a2:51:a5:63:79:38:4c:86:ed:56:15:4f:d8:f8:0e:9c:05:21:
a4:88:e2:52:fd:83:cb:74:64:34:1a:af:12:12:66:a9:d7:6d:
10:39:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:17:54 2026 by rpki-client