
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
File: 5b65963c-d23f-31a3-b848-4132887683b8.roa (raw, json)
Hash identifier: 7x+4j7hGVO+dcc/WjQK6pOF6Cgh/Xq4kYwhUjksIx/c=
Subject key identifier: DE:6F:03:02:51:31:6D:6F:D5:76:16:3B:24:63:A5:E2:B1:E0:40:A1
Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1
Certificate serial: 010D0C9F4328584E48248720E3016690F328B880
Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
Signing time: Wed 24 Jun 2026 21:00:12 +0000
ROA not before: Wed 24 Jun 2026 21:00:12 +0000
ROA not after: Tue 22 Sep 2026 21:00:12 +0000
asID: 395400
IP address blocks: 168.123.0.0/16 maxlen: 17
192.149.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:48:24:87:20:e3:01:66:90:f3:28:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1
Validity
Not Before: Jun 24 21:00:12 2026 GMT
Not After : Sep 22 21:00:12 2026 GMT
Subject: CN=eefddd07-6197-4ce6-81d1-601a0db7d388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fd:31:3f:78:71:4d:be:c1:4b:8b:6b:1a:68:
14:80:ee:20:3d:ae:e6:24:ec:be:ad:21:fe:d3:bd:
8f:1c:65:6c:21:ee:c1:22:bd:e8:09:7a:26:0f:7a:
41:9c:d4:30:d3:ef:b1:3b:4f:29:a4:49:eb:94:87:
19:c8:d4:c8:eb:de:c1:8b:cc:ed:5f:52:6f:6b:32:
cc:8b:f7:b6:3e:5b:76:80:85:33:29:48:8a:5b:9a:
34:a9:5c:5c:91:06:d9:84:32:0e:78:e1:92:2f:7f:
41:43:1a:58:85:3b:0d:83:fe:fb:8e:08:73:5e:7e:
c3:d1:70:e9:72:eb:f2:12:b8:0a:c2:d7:c8:bf:1f:
ed:02:1e:ac:66:d7:4c:88:2c:e6:80:e8:66:67:ad:
01:4d:f0:3c:dd:66:b5:b4:10:79:fd:c1:dd:62:6f:
79:84:f8:d4:85:18:4c:ee:7c:00:4d:08:d0:15:dc:
4c:9c:20:df:90:78:96:72:9a:6d:72:33:aa:60:90:
9a:ee:54:ce:26:a4:7b:4b:72:32:df:3c:39:2e:45:
18:c8:9d:3f:1a:9d:b5:1d:d7:30:04:08:2a:17:bc:
41:9a:8a:38:b8:bd:e2:5c:2c:0f:e2:c4:0a:27:38:
1e:d5:ad:62:c0:59:6b:c9:46:34:02:03:15:db:6a:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:03:02:51:31:6D:6F:D5:76:16:3B:24:63:A5:E2:B1:E0:40:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl
X509v3 Authority Key Identifier:
keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.123.0.0/16
192.149.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:71:99:a6:45:67:a1:a4:e7:a6:36:eb:39:f1:fd:02:a0:a1:
bf:52:f6:23:72:ca:fa:d8:85:e2:20:78:23:a5:a3:84:b2:66:
b9:f7:89:ca:ff:fe:db:d3:89:f2:a0:50:14:82:b0:61:87:88:
bb:32:16:60:7b:5b:00:2a:f2:85:b5:52:ee:0f:cb:26:a6:fc:
a7:b0:b9:8e:b0:da:0e:8b:11:9d:97:c5:ca:6d:ea:a6:49:fb:
06:66:6c:7b:b6:3d:f6:bc:f9:11:f9:b2:1b:dd:cc:4e:7d:3f:
35:27:5b:55:81:d3:db:0d:e8:5f:57:f6:e4:51:b0:4e:b0:c6:
11:e6:4f:98:0c:3c:69:b7:00:b5:47:ff:72:3a:28:6b:e9:81:
9b:27:9b:cd:5f:ea:b2:ad:32:eb:8e:af:f5:80:ae:22:38:67:
03:dc:63:5b:25:30:6d:91:a6:ea:54:cb:59:1e:c4:ab:64:27:
55:f3:b0:c5:36:1a:3b:1e:8e:1c:9b:cd:02:62:c3:eb:6a:4d:
74:d1:ea:fe:b7:99:0b:66:9e:a3:43:e3:a2:5b:03:b7:b4:92:
bc:fc:32:0f:a6:73:bd:88:fe:11:94:70:7c:26:69:b3:67:1d:
2e:21:6e:37:ed:38:72:ac:cb:27:92:78:5b:d0:52:0f:85:3f:
e2:d3:cd:ae
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE5IJIcg4wFmkPMouIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm
NGYxMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZWVmZGRkMDctNjE5Ny00Y2U2LTgxZDEtNjAxYTBkYjdkMzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP0xP3hxTb7BS4trGmgUgO4gPa7mJOy+rSH+
072PHGVsIe7BIr3oCXomD3pBnNQw0++xO08ppEnrlIcZyNTI697Bi8ztX1JvazLM
i/e2Plt2gIUzKUiKW5o0qVxckQbZhDIOeOGSL39BQxpYhTsNg/77jghzXn7D0XDp
cuvyErgKwtfIvx/tAh6sZtdMiCzmgOhmZ60BTfA83Wa1tBB5/cHdYm95hPjUhRhM
7nwATQjQFdxMnCDfkHiWcpptcjOqYJCa7lTOJqR7S3Iy3zw5LkUYyJ0/Gp21Hdcw
BAgqF7xBmoo4uL3iXCwP4sQKJzge1a1iwFlryUY0AgMV22o3wQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFN5vAwJRMW1v1XYWOyRjpeKx4EChMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2
ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvNWI2NTk2M2MtZDIzZi0z
MWEzLWI4NDgtNDEzMjg4NzY4M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj
ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl
ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx
NjhiZWY0ZjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAqHsDBADA
lcowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAZHGZpkVnoaTnpjbrOfH9AqChv1L2I3LK+tiF4iB4I6WjhLJm
ufeJyv/+29OJ8qBQFIKwYYeIuzIWYHtbACryhbVS7g/LJqb8p7C5jrDaDosRnZfF
ym3qpkn7BmZse7Y99rz5EfmyG93MTn0/NSdbVYHT2w3oX1f25FGwTrDGEeZPmAw8
abcAtUf/cjooa+mBmyebzV/qsq0y646v9YCuIjhnA9xjWyUwbZGm6lTLWR7Eq2Qn
VfOwxTYaOx6OHJvNAmLD62pNdNHq/reZC2aeo0PjolsDt7SSvPwyD6ZzvYj+EZRw
fCZps2cdLiFuN+04cqzLJ5J4W9BSD4U/4tPNrg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:17:49 2026 by rpki-client