
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa
File: 360a8570-a044-3855-b2da-5ae7cac1196b.roa (raw, json)
Hash identifier: DszINmBeKkO+fMRCVgwQ6LomnwM5SwUIHyIDyaIAIEA=
Subject key identifier: A0:B9:7B:9D:1B:62:43:E9:DC:85:60:66:17:15:3A:16:D5:8A:1B:C6
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584BBFA5AAF8A4D3B4D21DBA58C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa
Signing time: Tue 04 Nov 2025 14:00:39 +0000
ROA not before: Tue 04 Nov 2025 14:00:39 +0000
ROA not after: Mon 02 Feb 2026 14:00:39 +0000
asID: 16839
IP address blocks: 149.96.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:aa:f8:a4:d3:b4:d2:1d:ba:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Feb 2 14:00:39 2026 GMT
Subject: CN=f6af5ab1-5a69-410f-b700-69c0ebfbe260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:3b:46:b7:a1:35:ae:3b:34:3f:8e:1c:e6:
bb:b9:fc:b4:fc:87:99:b8:68:46:c9:7d:49:4e:b6:
d4:85:72:9a:88:05:ad:ce:a1:ee:ab:2e:91:c7:92:
dc:1e:0b:6e:0d:89:b6:59:ba:bb:80:26:a4:6a:8c:
7a:e5:b5:bf:b2:13:b8:26:34:37:8c:a2:ff:32:18:
7b:db:99:10:3f:53:bb:a2:99:f3:db:1e:ba:46:d0:
60:fb:cf:76:40:a9:b9:ec:86:7e:bb:30:3c:da:2b:
3b:de:e9:33:1c:51:e2:dc:50:fb:12:4a:2c:d0:06:
91:05:ca:a0:f2:c3:aa:a6:7e:72:b2:d6:b6:af:07:
dc:35:5c:73:c9:30:20:11:a4:c2:0f:9c:e5:ca:e9:
99:29:fd:dc:1b:ef:fa:d1:06:1e:44:cb:d6:46:30:
59:2c:69:7d:64:34:a0:15:be:03:b3:74:f0:cc:a3:
2e:75:dc:93:1a:3a:c3:41:7b:7f:d4:db:be:54:d5:
b3:a5:3e:4f:a1:ae:80:26:d0:f3:7b:dd:86:a1:b4:
e1:e2:58:7e:4b:25:34:e8:3a:13:ff:17:fd:0d:28:
e0:7e:ba:e0:b5:4f:73:b8:f8:df:34:01:c4:6a:ef:
58:ac:ea:dd:e2:48:6e:11:f0:d1:05:6f:8c:ec:20:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:7B:9D:1B:62:43:E9:DC:85:60:66:17:15:3A:16:D5:8A:1B:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b7:4d:cd:fe:74:ed:68:fd:02:b0:df:b0:4d:70:67:bb:d2:
56:ca:a8:c9:f7:1b:ae:3d:6b:f6:73:d0:75:c0:c4:1a:c3:ab:
e8:81:87:87:42:16:de:2b:87:fd:34:9d:76:c1:30:46:40:4a:
ec:bf:28:9e:62:41:36:c3:ae:e8:70:19:6d:57:b3:65:eb:a2:
68:cd:bf:49:0c:22:1e:48:43:ab:3d:4c:50:1d:38:54:b2:bd:
a6:c3:dd:6f:86:e8:d3:4d:06:2c:41:6c:e4:59:a9:eb:67:61:
d7:96:1b:46:0e:0b:9b:69:51:d4:ac:f5:85:74:40:2a:40:60:
5a:12:b9:a6:ec:25:82:7c:32:96:2b:60:ce:15:38:b1:22:af:
a0:81:eb:0f:a0:10:40:f5:f4:91:95:30:7f:06:78:16:80:15:
ae:22:17:68:80:b2:61:9e:71:01:5c:8b:a8:41:51:86:31:29:
0a:11:d3:53:29:3c:ab:4c:e9:20:cc:9d:e2:07:8f:01:03:73:
ce:7c:66:ba:70:ed:3b:0f:77:23:df:39:5e:b6:d9:de:ab:77:
e4:3c:66:8b:17:71:51:c5:2d:62:73:af:3c:dc:90:98:7d:ae:
4f:4e:c2:ae:5c:ee:0a:5c:9c:c4:df:f8:ce:73:79:a0:fa:11:
3a:73:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:53 2025 by rpki-client