
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa
File: d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa (raw, json)
Hash identifier: mkfmIX9+bUzu5rPaTASvexnqJWuEe59RQOTSDvgRWpI=
Subject key identifier: E5:29:A2:C3:A5:85:DC:3E:56:46:55:EA:26:8D:5B:6E:A2:82:EF:C3
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584F1CC79792C77A16B73FFCAF80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 16839
IP address blocks: 149.96.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:97:92:c7:7a:16:b7:3f:fc:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=2af580d6-a222-46a9-be9e-519f04f1b79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:8f:3f:0c:18:9e:e1:1b:2e:60:e5:25:14:
f5:b5:84:62:f0:ce:f6:92:d6:d0:c9:c1:29:c7:89:
ff:a1:b8:03:7e:d8:54:11:eb:fb:9a:41:35:30:9e:
a7:b2:fd:c9:26:b5:73:c9:47:4f:82:fc:42:02:e4:
8b:c0:36:01:0e:79:7d:ab:1b:a9:f8:6a:a4:02:a1:
3b:2d:aa:a4:9f:5a:c2:8e:69:d7:e4:d2:a3:d5:e5:
4b:7e:c6:8a:1e:23:a7:e7:05:47:4d:24:e1:ee:7f:
62:b9:cb:62:89:df:da:e1:0f:dc:bd:e3:9f:1e:c0:
3d:96:3e:9a:c1:97:c9:73:16:d3:65:44:ea:36:6a:
6e:46:0f:6a:f7:9b:a3:06:68:5d:54:25:0c:6e:82:
3e:58:4f:5d:9f:7c:cc:fc:3f:7c:cb:de:5d:12:23:
84:b8:68:25:27:23:8f:c1:86:0a:ab:d0:5c:0d:5b:
f5:66:40:8a:de:f2:56:0c:6e:e9:f4:33:00:cb:11:
01:7e:0e:3a:c7:b5:0d:18:c0:46:36:05:5b:68:7e:
ae:f8:5d:bd:2a:bf:16:72:aa:5d:88:1b:d2:63:fd:
33:0e:3d:ab:a7:5a:b8:38:30:8d:db:a2:33:79:ec:
f6:d5:18:0b:a3:ca:af:21:4a:fb:20:52:6c:c0:77:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:29:A2:C3:A5:85:DC:3E:56:46:55:EA:26:8D:5B:6E:A2:82:EF:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d39d9f1b-0c09-3eb5-bf45-e551cba67165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:91:75:90:b7:49:46:ae:14:06:b1:0f:ed:6c:da:cf:d0:20:
25:0a:ca:fe:b6:40:dc:34:8f:b9:1a:48:0d:57:88:00:0e:a1:
1b:95:43:03:16:cb:31:63:fe:43:fa:21:af:10:5b:f1:14:3a:
7f:d1:a8:a7:97:ed:a7:d5:04:fe:27:92:19:83:1f:41:a8:f5:
19:0a:b2:f1:25:8a:69:be:a7:23:09:9d:cd:7c:ea:ee:05:d1:
7e:00:ef:97:ad:91:d4:2c:f6:5e:83:99:c9:2e:cc:6d:15:d3:
e5:52:e8:0f:a8:a7:be:07:5e:9a:5e:c8:b3:ee:51:be:16:32:
8e:0c:4c:f2:ad:0e:76:2d:6e:82:d2:33:7f:9c:5f:f8:18:03:
18:ec:56:aa:06:40:1c:b7:d3:9c:ee:62:b5:f4:0f:dd:7a:89:
a3:c1:e4:2b:3e:15:35:ad:ca:ae:86:e6:c3:eb:08:c2:92:b2:
5e:d5:3e:5b:ef:50:7d:9f:05:ce:de:23:a2:dd:7a:74:99:0d:
5e:bb:ae:c3:3b:4d:81:24:bc:a4:7c:da:47:73:25:37:a4:3c:
6d:3b:7d:17:d0:3b:e8:71:c7:27:88:ff:77:2f:66:f0:78:ee:
49:f6:65:90:66:a5:a3:8b:57:b8:72:f0:f8:58:2d:a5:0d:4d:
ab:e6:84:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5eSx3oWtz/8r4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
MmFmNTgwZDYtYTIyMi00NmE5LWJlOWUtNTE5ZjA0ZjFiNzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqePPwwYnuEbLmDlJRT1tYRi8M72ktbQycEp
x4n/obgDfthUEev7mkE1MJ6nsv3JJrVzyUdPgvxCAuSLwDYBDnl9qxup+GqkAqE7
Laqkn1rCjmnX5NKj1eVLfsaKHiOn5wVHTSTh7n9iuctiid/a4Q/cveOfHsA9lj6a
wZfJcxbTZUTqNmpuRg9q95ujBmhdVCUMboI+WE9dn3zM/D98y95dEiOEuGglJyOP
wYYKq9BcDVv1ZkCK3vJWDG7p9DMAyxEBfg46x7UNGMBGNgVbaH6u+F29Kr8Wcqpd
iBvSY/0zDj2rp1q4ODCN26Izeez21RgLo8qvIUr7IFJswHdn5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUposOlhdw+VkZV6iaNW26igu/DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDM5ZDlmMWItMGMwOS0z
ZWI1LWJmNDUtZTU1MWNiYTY3MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlWCMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKRdZC3SUauFAaxD+1s2s/QICUKyv62QNw0j7kaSA1XiAAOoRuVQwMW
yzFj/kP6Ia8QW/EUOn/RqKeX7afVBP4nkhmDH0Go9RkKsvElimm+pyMJnc186u4F
0X4A75etkdQs9l6DmckuzG0V0+VS6A+op74HXppeyLPuUb4WMo4MTPKtDnYtboLS
M3+cX/gYAxjsVqoGQBy305zuYrX0D916iaPB5Cs+FTWtyq6G5sPrCMKSsl7VPlvv
UH2fBc7eI6LdenSZDV67rsM7TYEkvKR82kdzJTekPG07fRfQO+hxxyeI/3cvZvB4
7kn2ZZBmpaOLV7hy8PhYLaUNTavmhFc=
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:34:06 2026 by rpki-client