
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa
File: 149f19f9-ddf2-32e1-9d07-a184289910a5.roa (raw, json)
Hash identifier: K2EA/+veoVAc1LannSs3asaBtPoblyTiNyJ0e1vYQfg=
Subject key identifier: FF:2C:B6:39:F4:A1:80:5D:AF:59:B3:6E:26:F5:DF:4C:10:BF:CC:08
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584E18AEEE77DED891B7EA6FBD80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 397422
IP address blocks: 209.237.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:ae:ee:77:de:d8:91:b7:ea:6f:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=75efefd9-674b-4cbb-92d7-d3a843aaf3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:f1:67:1b:83:d0:cb:71:7b:65:86:b8:bd:
35:38:ff:a3:2a:94:ca:57:cf:c3:e4:54:1b:ae:87:
96:6e:d4:41:53:78:2b:48:75:d2:50:7e:46:15:94:
cd:7e:7b:dd:75:5c:f4:34:89:c4:d1:be:b5:22:f0:
12:d0:2d:9c:3e:f8:32:a3:dc:6d:94:a8:04:c2:53:
52:81:75:93:cb:13:da:81:d1:4f:bb:41:4f:d0:ea:
28:33:2f:df:5d:63:fb:70:39:21:68:51:a1:ca:40:
86:d2:a3:86:e4:b2:dc:50:8d:d7:78:d9:83:40:d8:
24:2d:fe:77:25:4a:65:38:15:6a:c3:83:49:53:3e:
7f:f3:b5:b1:ad:5c:a9:03:d5:3c:d9:07:ff:6f:28:
36:d5:51:6a:55:16:93:d3:33:66:30:6c:32:06:dd:
72:41:b1:e7:30:b7:88:ae:19:7f:fe:c0:b3:06:74:
b4:c6:3a:e9:69:98:6f:29:b9:5f:67:97:dd:dd:17:
9e:16:49:a8:de:6a:63:96:a8:59:37:c1:64:a0:8c:
85:a8:17:2c:d6:45:63:1e:93:49:2d:03:87:75:e4:
fa:a8:60:b6:dc:60:34:30:e0:b9:e8:ff:f9:8d:d2:
ae:b6:4d:55:b3:23:07:78:ab:3d:d9:42:eb:8b:99:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:B6:39:F4:A1:80:5D:AF:59:B3:6E:26:F5:DF:4C:10:BF:CC:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:89:76:2c:16:89:89:86:6b:3c:19:63:06:79:41:5d:96:7a:
d0:56:b7:ca:7c:52:b7:2e:17:16:2b:19:f2:ee:18:a9:78:92:
45:b5:8f:3f:4a:98:e5:4f:a4:1b:1c:d9:d7:a1:fe:41:29:5f:
d4:c3:9a:5e:8b:a9:d1:01:ff:e5:a5:65:62:9f:63:4f:9c:8d:
d2:18:ed:a9:63:91:44:9d:7c:14:f6:2e:ca:95:36:28:a9:c1:
16:93:cf:70:ec:69:e3:04:9f:e5:f4:47:b4:dc:3d:26:1c:ee:
2b:07:91:26:ee:1f:46:51:26:66:9d:ee:b6:dc:7c:d5:53:01:
a5:7f:5d:6d:3d:29:5b:97:4c:4d:65:64:04:8d:75:2b:f5:bc:
12:f8:66:2e:97:41:49:f9:5a:77:4d:7f:bc:f0:05:91:26:43:
b0:8c:e1:ca:fc:ec:d2:47:83:9b:9a:da:36:62:6c:a9:27:d8:
b1:a2:41:d0:2a:cd:51:be:58:3b:40:89:76:40:fa:5f:b2:0a:
36:fc:e0:14:ed:e0:97:0a:a9:5d:7d:5a:a3:fd:0d:e5:92:03:
b7:87:76:ce:f9:e1:20:f5:a3:7f:d1:28:9e:19:22:a0:84:fb:
54:3e:a0:b7:29:cf:04:b9:34:8c:0b:74:ee:39:98:12:ef:2b:
e0:0a:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:17:26 2026 by rpki-client