
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/89497639-b474-3049-bf36-ec4bc0d6f185.roa
File: 89497639-b474-3049-bf36-ec4bc0d6f185.roa (raw, json)
Hash identifier: CmP/mezs+ibem2HNSKcCQjClOAt1n26RV5NvSsia8kc=
Subject key identifier: 60:49:80:08:93:BA:53:D5:67:7D:7F:AB:83:DC:09:38:C7:A4:17:EB
Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
Certificate serial: 010D0C9F4328584E6C369D00DCE6B927AA9624C0
Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/89497639-b474-3049-bf36-ec4bc0d6f185.roa
Signing time: Tue 07 Jul 2026 19:05:51 +0000
ROA not before: Tue 07 Jul 2026 19:05:51 +0000
ROA not after: Mon 05 Oct 2026 19:05:51 +0000
asID: 30286
IP address blocks: 192.225.156.20/32 maxlen: 32
192.225.156.21/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6c:36:9d:00:dc:e6:b9:27:aa:96:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
Validity
Not Before: Jul 7 19:05:51 2026 GMT
Not After : Oct 5 19:05:51 2026 GMT
Subject: CN=11e7f265-4b52-4ad5-9c5d-e109c2b2d974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:98:a0:d5:be:fb:db:97:25:0d:8e:dc:12:
db:05:76:31:3b:9f:ce:f3:ad:97:71:5e:19:d6:10:
e9:10:94:2c:1d:fe:0c:4b:6e:cf:19:36:de:28:4f:
c5:f9:5e:75:d7:ff:e0:2a:cb:f4:e5:66:fd:15:65:
1d:16:63:f3:f1:72:10:c5:59:18:fa:96:fa:07:a7:
33:b5:b6:f1:d0:6b:fc:d9:41:7a:3a:e3:68:34:a1:
9e:ab:6c:5c:b5:db:c2:ed:25:94:3e:7a:8a:2f:ce:
b5:66:19:2a:54:af:de:fe:97:96:06:66:18:e4:3f:
7a:4d:79:6c:3d:cf:19:1e:06:79:e3:c5:56:08:0e:
ac:b9:e4:32:d9:10:5b:80:b0:0c:ba:e8:8b:f7:59:
d3:74:df:ac:c0:b3:53:83:09:9b:ed:e0:be:76:2e:
d4:a7:6b:12:16:59:9d:85:75:e7:37:05:62:8e:f0:
85:ef:63:60:6a:e7:bf:9b:a4:a1:e9:ea:6f:78:23:
b4:bd:c0:b0:49:dc:d7:ac:58:21:47:db:64:6e:3c:
fe:eb:a1:1b:06:15:0a:58:0d:15:26:e6:07:4a:31:
33:1c:a7:95:18:24:f2:1d:5d:9f:c6:2b:5a:6f:21:
ca:af:a8:fb:25:2f:e2:e7:2e:57:97:e7:d3:1c:c4:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:49:80:08:93:BA:53:D5:67:7D:7F:AB:83:DC:09:38:C7:A4:17:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/89497639-b474-3049-bf36-ec4bc0d6f185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl
X509v3 Authority Key Identifier:
keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
sbgp-ipAddrBlock: critical
IPv4:
192.225.156.20/31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:04:0c:a7:78:21:e8:3d:09:4e:2c:3c:b0:8e:27:73:5b:b3:
93:08:a7:e6:c2:ec:ac:5a:0c:ea:aa:0a:b5:b3:c0:40:9e:55:
93:af:e1:ef:73:78:a9:8b:61:8a:0a:3a:94:ce:55:62:2b:75:
a2:69:09:e1:c5:28:8c:3e:cd:13:c9:2a:13:d1:01:f7:9a:8d:
62:8f:df:cb:f2:63:f1:83:3b:a3:0e:41:24:51:8d:4b:9f:1c:
a8:56:54:7a:c3:99:bc:ae:b9:37:f7:c4:bf:74:fe:88:d5:22:
b7:12:51:60:11:31:e1:8a:c5:d1:7a:4d:9d:08:cc:38:b5:51:
c5:77:5c:9d:5c:13:9c:5f:6b:66:7c:e3:ea:4a:f3:88:3e:c6:
57:d7:5b:eb:aa:82:7a:a7:4c:ba:08:08:01:28:7d:1d:0f:33:
52:e0:85:f0:2f:02:9f:9b:3c:a6:1f:e5:b7:7c:80:e2:e5:f0:
94:5d:94:97:98:4c:50:f4:d1:59:a9:bc:b2:53:f5:73:73:8a:
c1:a9:2f:c6:7d:d9:b5:e4:1c:a7:6a:60:89:b5:25:d5:22:2c:
5e:bf:2a:56:04:af:90:ce:a1:c1:b4:19:76:f5:7a:7d:81:0d:
56:d7:53:14:01:1d:0d:04:ea:d4:14:70:87:f9:86:9d:ff:e2:
39:68:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:36 2026 by rpki-client