
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf/cbb1a5db-5d5e-39d6-8037-c2b8146a0f95.roa
File: cbb1a5db-5d5e-39d6-8037-c2b8146a0f95.roa (raw, json)
Hash identifier: e+mcc4HX4lQcXl/xGMAa1uxO8elchRxVyhwu0FahI9I=
Subject key identifier: 5F:AA:E7:EC:00:C7:DA:8E:3A:AF:56:26:B9:E3:54:42:5E:D1:DE:ED
Certificate issuer: /CN=07041b1d-f451-4b9c-b05c-65f2ffd468bf
Certificate serial: 010D0C9F4328584DD2FC50677705E44142779700
Authority key identifier: 99:E1:BC:44:6E:20:57:12:F4:74:17:66:1D:EE:DE:23:5F:8F:DC:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf/cbb1a5db-5d5e-39d6-8037-c2b8146a0f95.roa
Signing time: Wed 13 May 2026 21:49:43 +0000
ROA not before: Wed 13 May 2026 21:49:43 +0000
ROA not after: Tue 11 Aug 2026 21:49:43 +0000
asID: 13857
IP address blocks: 69.168.112.0/20 maxlen: 24
199.66.196.0/22 maxlen: 24
206.212.224.0/20 maxlen: 24
208.83.192.0/21 maxlen: 24
208.85.232.0/21 maxlen: 24
2604:be40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf/07041b1d-f451-4b9c-b05c-65f2ffd468bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf/07041b1d-f451-4b9c-b05c-65f2ffd468bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d2:fc:50:67:77:05:e4:41:42:77:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07041b1d-f451-4b9c-b05c-65f2ffd468bf
Validity
Not Before: May 13 21:49:43 2026 GMT
Not After : Aug 11 21:49:43 2026 GMT
Subject: CN=f633e17e-57c8-4372-b9ed-174b1e97abdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:69:73:64:19:79:3a:93:22:dc:be:e0:6e:
ae:d5:fe:ec:a4:97:af:b0:91:e9:71:c3:09:9d:5e:
8e:2e:5e:4f:e1:ef:96:95:c2:ac:de:91:b8:81:47:
62:f7:c0:55:fc:24:d0:e3:39:96:ce:dc:ca:41:f9:
b2:77:77:e0:3e:7e:81:b6:74:18:15:6a:03:cb:55:
48:9e:8b:d6:73:b8:cc:b7:f6:e2:3f:a6:f4:4d:c2:
8f:b7:d5:74:a6:d5:05:6c:84:11:a8:9d:9b:eb:c4:
b6:f2:1d:04:65:5d:76:df:f4:9d:b5:9a:4a:51:f7:
33:6e:0c:76:79:37:a4:d0:b6:80:fd:0e:bd:32:2b:
be:5b:fd:80:fa:df:07:7a:68:f1:25:4c:46:d8:8e:
8e:84:cc:95:94:ba:53:a6:05:60:0b:9f:f9:39:be:
b1:17:b1:f1:45:be:fb:98:f7:83:22:b7:ec:21:4c:
c4:00:cd:a3:00:83:c4:e9:8f:1e:05:54:cd:83:90:
42:d2:c8:de:7d:25:85:ee:61:d9:04:d2:d7:e7:51:
e2:1d:0c:96:1d:38:c0:78:22:7f:64:4e:bf:34:02:
40:d2:fc:db:5d:2b:b9:f8:92:d0:89:06:e0:ab:2e:
d4:87:ba:ca:7d:49:d4:80:c7:13:9b:b4:b8:63:61:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:E7:EC:00:C7:DA:8E:3A:AF:56:26:B9:E3:54:42:5E:D1:DE:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf/cbb1a5db-5d5e-39d6-8037-c2b8146a0f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf/07041b1d-f451-4b9c-b05c-65f2ffd468bf.crl
X509v3 Authority Key Identifier:
keyid:99:E1:BC:44:6E:20:57:12:F4:74:17:66:1D:EE:DE:23:5F:8F:DC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07041b1d-f451-4b9c-b05c-65f2ffd468bf.cer
sbgp-ipAddrBlock: critical
IPv4:
69.168.112.0/20
199.66.196.0/22
206.212.224.0/20
208.83.192.0/21
208.85.232.0/21
IPv6:
2604:be40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ba:39:62:ce:52:9d:e6:10:99:9f:eb:01:56:5d:9c:b9:6e:
5e:ac:2d:b7:25:60:b0:68:84:ff:c2:d8:25:f4:e9:a4:5d:e0:
e8:e3:74:e4:15:c5:bb:b9:af:28:66:44:75:22:4d:cb:56:a0:
f7:5a:09:84:3b:b4:c4:3a:29:79:76:0a:30:f1:39:4b:71:de:
8c:e9:f2:de:b9:75:71:d2:54:11:3f:84:21:61:96:b2:35:ec:
12:62:f7:36:38:6b:e6:fa:e2:8c:d1:09:f5:04:6a:1a:d7:63:
6f:5a:1f:62:e0:41:fd:32:13:69:ad:59:e6:00:cf:65:bf:85:
57:13:3d:f5:4e:d0:80:9c:87:77:fe:3a:8d:a0:48:81:0c:9f:
2f:21:67:74:0c:38:06:b5:32:e2:e0:1c:6a:51:c1:26:85:64:
39:a6:d5:7a:58:bb:8c:fe:c5:88:f6:bd:25:ea:65:4b:ca:5c:
1d:a1:80:79:6d:fc:01:0d:b8:d3:f9:28:76:89:94:40:a1:96:
ed:64:52:01:87:2b:a7:55:06:2c:59:f1:ef:81:ed:3a:e4:5d:
d3:a2:a6:80:ce:ef:8b:94:7c:a7:01:7a:41:06:84:20:0b:d2:
8f:45:8c:f3:3d:34:04:86:31:86:58:15:ed:d8:59:b8:b0:0d:
b9:cd:ba:e5
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE3S/FBndwXkQUJ3lwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDcwNDFiMWQtZjQ1MS00YjljLWIwNWMtNjVmMmZmZDQ2
OGJmMB4XDTI2MDUxMzIxNDk0M1oXDTI2MDgxMTIxNDk0M1owLzEtMCsGA1UEAxMk
ZjYzM2UxN2UtNTdjOC00MzcyLWI5ZWQtMTc0YjFlOTdhYmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4Vpc2QZeTqTIty+4G6u1f7spJevsJHpccMJ
nV6OLl5P4e+WlcKs3pG4gUdi98BV/CTQ4zmWztzKQfmyd3fgPn6BtnQYFWoDy1VI
novWc7jMt/biP6b0TcKPt9V0ptUFbIQRqJ2b68S28h0EZV123/SdtZpKUfczbgx2
eTek0LaA/Q69Miu+W/2A+t8HemjxJUxG2I6OhMyVlLpTpgVgC5/5Ob6xF7HxRb77
mPeDIrfsIUzEAM2jAIPE6Y8eBVTNg5BC0sjefSWF7mHZBNLX51HiHQyWHTjAeCJ/
ZE6/NAJA0vzbXSu5+JLQiQbgqy7Uh7rKfUnUgMcTm7S4Y2HwTwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFF+q5+wAx9qOOq9WJrnjVEJe0d7tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNzA0
MWIxZC1mNDUxLTRiOWMtYjA1Yy02NWYyZmZkNDY4YmYvY2JiMWE1ZGItNWQ1ZS0z
OWQ2LTgwMzctYzJiODE0NmEwZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDcwNDFiMWQtZjQ1MS00YjljLWIw
NWMtNjVmMmZmZDQ2OGJmLzA3MDQxYjFkLWY0NTEtNGI5Yy1iMDVjLTY1ZjJmZmQ0
NjhiZi5jcmwwHwYDVR0jBBgwFoAUmeG8RG4gVxL0dBdmHe7eI1+P3JIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8wNzA0MWIxZC1mNDUxLTRiOWMtYjA1Yy02NWYy
ZmZkNDY4YmYuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQERahwAwQC
x0LEAwQEztTgAwQD0FPAAwQD0FXoMA0EAgACMAcDBQAmBL5AMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEi6
OWLOUp3mEJmf6wFWXZy5bl6sLbclYLBohP/C2CX06aRd4OjjdOQVxbu5ryhmRHUi
TctWoPdaCYQ7tMQ6KXl2CjDxOUtx3ozp8t65dXHSVBE/hCFhlrI17BJi9zY4a+b6
4ozRCfUEahrXY29aH2LgQf0yE2mtWeYAz2W/hVcTPfVO0ICch3f+Oo2gSIEMny8h
Z3QMOAa1MuLgHGpRwSaFZDmm1XpYu4z+xYj2vSXqZUvKXB2hgHlt/AENuNP5KHaJ
lEChlu1kUgGHK6dVBixZ8e+B7TrkXdOipoDO74uUfKcBekEGhCAL0o9FjPM9NASG
MYZYFe3YWbiwDbnNuuU=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:05:52 2026 by rpki-client