
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/20911aaf-874d-3057-8bbb-83d418b77574.roa
File: 20911aaf-874d-3057-8bbb-83d418b77574.roa (raw, json)
Hash identifier: JNKofFhHVXsqxJCyuWRu8IbP0VRkaEC966PRPP1sBms=
Subject key identifier: 29:99:DA:DA:20:40:37:FA:4C:C2:49:5B:B8:66:B7:9F:15:ED:8E:FC
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328584F0D91AE62F459333A6CFAE700
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/20911aaf-874d-3057-8bbb-83d418b77574.roa
Signing time: Thu 03 Sep 2026 14:14:29 +0000
ROA not before: Thu 03 Sep 2026 14:14:29 +0000
ROA not after: Wed 02 Dec 2026 15:14:29 +0000
asID: 36692
IP address blocks: 67.215.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:91:ae:62:f4:59:33:3a:6c:fa:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Sep 3 14:14:29 2026 GMT
Not After : Dec 2 15:14:29 2026 GMT
Subject: CN=322246f5-76c7-4ffd-a7e9-d4246ec8e968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:b1:e1:9b:85:28:77:0f:af:50:e0:e8:e5:
2b:ef:c1:44:18:50:9d:22:ab:ba:85:4c:9a:02:4d:
fc:7e:1d:b5:91:98:f1:91:5e:c8:ba:13:eb:29:76:
e3:bc:d8:a6:fd:90:06:dd:54:90:5a:97:fb:51:9b:
b8:6a:b2:68:55:3d:80:93:4a:5e:75:d3:10:8f:60:
20:1d:94:ff:d6:41:27:e6:bc:bb:9f:32:b4:cc:91:
05:f6:a3:66:f4:26:16:2d:7e:12:66:2b:a5:09:9c:
7a:20:63:a9:a4:c2:f2:56:e0:dc:8d:2c:e6:7c:c8:
ce:5a:d8:f9:41:12:7a:6b:23:dc:34:db:62:55:f7:
43:86:d6:e3:4b:fe:b3:54:48:f8:82:2f:d3:98:25:
ff:a9:c1:31:15:3e:b2:3c:c1:87:3e:b8:7b:94:64:
7f:81:98:77:78:01:ba:dc:3f:00:fe:e2:03:a3:b3:
dc:90:6a:cc:52:51:19:8a:e0:4a:8c:6d:59:2c:b4:
88:bf:e4:38:bf:ed:83:2c:16:f6:34:38:19:49:da:
cf:c3:5f:33:5f:54:84:f4:b3:c7:b9:ae:76:d3:b9:
c2:37:4d:89:a9:8f:03:1d:f5:9e:f7:98:b8:4f:56:
3b:03:9d:75:44:0b:d5:e8:d5:85:43:cd:96:86:c2:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:DA:DA:20:40:37:FA:4C:C2:49:5B:B8:66:B7:9F:15:ED:8E:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/20911aaf-874d-3057-8bbb-83d418b77574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:1f:f4:0e:7d:f7:ce:85:6d:64:84:34:cb:65:72:e2:5f:a8:
a1:2d:fc:fe:b4:c2:05:e6:78:14:80:c0:ae:5c:4f:07:6b:00:
a8:79:a1:f7:bf:2b:ac:da:1f:9d:b8:7c:90:e3:1a:24:ba:3f:
e3:77:53:41:5b:00:6a:8f:c6:84:54:9a:6e:86:11:85:b4:07:
bc:5d:de:3c:c4:70:51:39:68:5d:a2:6f:62:76:e1:8c:ae:ae:
d5:8b:3d:cd:3a:16:7e:0c:03:60:8e:e9:29:88:01:91:c8:59:
78:e7:fd:a3:18:71:dd:08:db:ba:da:38:ed:76:69:1d:cc:0a:
9e:e2:9a:94:86:be:12:46:d1:ca:19:bd:e4:de:bb:a2:ec:d2:
77:8e:98:72:0b:1d:83:b2:0d:32:d4:04:f0:0e:6b:b5:d7:fa:
f9:80:88:e0:58:0d:f8:1f:75:0e:4d:cb:03:38:8d:dc:a3:ee:
39:87:c9:fe:49:07:cd:8a:54:54:16:cb:d0:2b:ce:40:60:57:
12:dd:cf:75:b3:01:e0:86:05:66:f0:e1:79:2b:34:f6:06:a1:
d9:18:e8:92:c9:71:21:6b:1b:04:b8:15:76:ef:38:2d:df:37:
3e:8d:ec:a8:21:04:31:66:03:54:9a:d3:00:4d:0d:cb:26:15:
28:fe:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:28:05 2026 by rpki-client