
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa
File: d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa (raw, json)
Hash identifier: 4YOKq9lH9HHXRbM9ec/ZaNdzM9KALaYV1gqHSUEYEYc=
Subject key identifier: E2:5D:B6:55:FD:C5:92:54:10:4E:01:F2:D3:A0:E3:D8:88:FD:EA:5D
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584D80FFFA1F208CC5D58EF8E600
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 16839
IP address blocks: 149.96.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:80:ff:fa:1f:20:8c:c5:d5:8e:f8:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=795abc78-09e2-419a-9701-f776f9c6f53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:a8:58:d6:9b:1e:31:1b:bc:b1:4e:c7:af:
c1:ab:da:bc:d1:52:fe:3b:e0:b6:8b:09:86:fc:7e:
6e:d8:2f:ba:9b:32:5d:aa:df:a4:64:69:10:dd:96:
2b:53:72:1b:b5:9e:a4:19:4c:65:c8:2e:2a:38:85:
59:c0:e6:b7:b8:54:01:65:f3:4c:36:2e:50:c6:00:
bb:34:7b:2f:25:b7:da:52:e3:05:cb:37:ee:0e:21:
36:95:3b:ca:d6:4b:0f:6d:67:71:6d:59:a2:96:37:
2a:dd:9d:d2:04:0c:1d:66:ae:f9:b5:ec:3f:a2:18:
3b:95:52:c4:a3:23:6f:59:68:8d:2b:05:2e:b2:65:
6e:b8:8d:e4:e9:64:6e:99:be:6b:fa:20:0e:70:5e:
c9:e5:58:85:53:f1:1b:39:1d:49:23:a4:c6:a3:0a:
a4:d3:13:93:3a:19:33:1a:36:53:99:c8:76:f4:22:
a3:93:0b:b5:de:82:3b:32:be:3f:53:b4:cf:f5:5d:
f9:f4:f1:52:b2:dc:17:4e:b3:9d:71:85:2f:95:4c:
75:a5:a0:d8:49:2d:81:cc:da:ed:47:de:1d:18:88:
78:31:53:a5:a1:df:b0:29:0e:73:ba:ec:ce:fc:af:
90:9b:0c:14:46:2c:dc:e1:7e:c3:f1:4c:74:0d:4d:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:B6:55:FD:C5:92:54:10:4E:01:F2:D3:A0:E3:D8:88:FD:EA:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d2bab1f8-25ca-3d07-ae9b-8f85c4c5aa22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:17:1e:25:5f:19:6d:42:8c:22:2b:69:79:0d:33:b9:39:e7:
9b:95:81:d1:e5:58:b5:fe:bd:11:2f:66:cb:d1:58:33:84:65:
aa:05:25:fa:67:e3:91:1c:12:23:dd:41:34:f2:6b:55:30:45:
87:4b:5d:9a:9a:bf:50:86:53:5e:46:5c:9d:fe:33:a4:fe:f1:
b1:2f:d7:55:41:f3:cb:cd:da:21:0f:b1:4a:c5:04:ac:9b:b3:
ee:cc:18:1c:5e:10:63:f0:7f:db:dc:69:1f:1f:23:19:9c:b7:
59:0d:2a:73:1f:1b:86:4d:e1:85:36:80:24:a4:ed:95:0b:b9:
7e:3b:8c:60:36:29:b5:81:ed:8b:50:e5:70:7d:21:9c:c4:08:
fd:d3:69:9a:17:ac:00:71:e0:68:6c:85:39:9f:64:73:70:46:
af:97:02:02:06:cf:30:43:30:58:f6:d0:fc:1e:63:6c:07:60:
f0:92:3c:c1:52:78:9f:91:b9:fe:43:28:74:79:34:d4:37:45:
4e:06:da:86:c7:c0:2e:b7:5c:9c:17:23:92:a3:94:4c:16:a8:
9f:16:54:32:c4:55:79:57:00:e0:50:7f:0d:3c:ef:d4:61:7e:
a1:aa:84:a3:42:10:d3:cd:1b:ea:43:e1:8f:29:f6:83:4d:e1:
c4:21:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:38 2026 by rpki-client