
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa
File: 0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa (raw, json)
Hash identifier: x1HrLeAS7BQaQsPkCE7WOJ5OtbakK9lbjOgqmBCHb2Q=
Subject key identifier: CD:B6:4A:B9:1F:F8:0A:22:E4:87:46:26:98:36:68:B5:05:0F:F1:1F
Certificate issuer: /CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063
Certificate serial: 010D0C9F4328584EA79720FE1A4E4C74C917E18C
Authority key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14237
IP address blocks: 216.152.248.0/21 maxlen: 24
2606:e580::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:20:fe:1a:4e:4c:74:c9:17:e1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4c98b303-2c3a-4af8-9e80-afb52bc4d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3f:87:47:d0:7c:13:78:fc:2a:d1:d4:a7:54:
4a:14:40:0b:92:22:72:f3:d1:26:a5:d2:e2:e7:03:
ea:d0:fe:bc:53:c3:08:b4:38:9a:78:96:27:0f:e7:
c3:55:cd:47:a5:80:8a:1a:14:54:5d:17:23:c2:52:
0a:a2:20:da:0b:24:18:95:35:81:8a:5e:47:02:69:
ac:08:57:c4:1a:8d:58:e7:07:66:08:f1:ea:bf:d1:
0d:c6:81:8b:23:95:11:12:67:8e:05:5f:f5:4b:1e:
0d:ef:9a:b7:5e:cb:5d:b4:f8:c1:08:c5:0a:a5:59:
ff:f1:3d:1a:c9:02:0f:1a:7a:e9:fe:43:e6:87:03:
5a:9d:78:91:58:87:78:6d:01:4e:f0:32:5c:e7:95:
cb:7c:c8:20:d6:49:88:41:99:49:b2:ab:ff:e3:3e:
95:51:55:ba:18:f1:39:25:24:a5:6c:fb:c4:af:14:
df:68:a5:ce:04:f0:79:8d:64:6a:0b:62:e5:96:ae:
c3:8e:12:00:38:53:a8:a3:a8:d6:da:45:e5:1d:89:
90:c2:77:e6:43:62:4d:5a:4c:78:2d:69:ca:71:46:
d7:4e:61:a1:8c:73:68:1f:ae:eb:0a:5a:6f:b3:7b:
0e:0f:80:1f:5b:01:11:17:21:94:74:a9:73:b5:bd:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:4A:B9:1F:F8:0A:22:E4:87:46:26:98:36:68:B5:05:0F:F1:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl
X509v3 Authority Key Identifier:
keyid:2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.248.0/21
IPv6:
2606:e580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:c5:0e:aa:44:db:0c:c8:8e:b8:98:5b:e4:2f:00:3d:84:dd:
96:64:d5:5d:77:db:ac:84:a8:1e:91:7c:c5:15:40:45:b3:cd:
5c:66:4e:8d:f5:41:d2:a0:26:8d:e2:de:38:d2:5d:10:f7:e4:
88:04:7d:a5:d3:4e:73:6c:93:8e:ca:6d:87:9b:9c:74:a9:cc:
49:92:ee:a9:4f:a0:73:5f:a4:2a:6d:c7:6c:fc:8a:ff:d0:58:
3d:d8:bc:f1:5b:a3:11:6b:b2:78:12:5f:cc:15:e5:28:48:c4:
87:50:7e:ad:e1:31:67:99:52:5f:b6:57:e5:fd:5f:1b:72:65:
3c:a1:1f:bd:4f:4c:bb:c4:6a:0b:f6:b9:1d:98:9d:8d:2d:79:
1f:46:85:2c:a2:e2:3d:58:c5:cc:eb:c6:d0:e2:8e:19:da:f9:
d2:d7:1b:26:1a:25:07:67:5c:4d:fe:7a:53:5d:97:22:d3:56:
fe:9e:b7:d7:1a:ce:25:6b:6c:2a:0e:f5:d4:57:6b:58:d6:6e:
83:51:7b:6e:a1:ea:4b:5f:20:da:dd:39:31:21:34:96:0a:e2:
58:a7:44:55:85:59:5a:c4:19:45:98:f8:51:84:8e:ee:8a:e2:
34:2d:de:67:52:3a:b5:f3:54:b9:5f:e5:48:db:9a:40:37:67:
60:5d:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:14:53 2026 by rpki-client