
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa
File: bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa (raw, json)
Hash identifier: Q14na3h7tKgaV48IXmPV8pkDVCH2yHNE/XcQ321LRR0=
Subject key identifier: 4C:95:65:29:A2:32:6F:0A:CA:CC:91:50:A0:D4:DC:45:91:2E:0C:54
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F4328584EC371CA8FC2DDE1A9DE8FE200
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 293
IP address blocks: 192.124.52.0/24 maxlen: 24
192.124.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:71:ca:8f:c2:dd:e1:a9:de:8f:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=6f36a05b-0fd8-485e-90f5-8b70568da5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:67:88:18:cd:3a:b2:c9:c4:bf:71:58:de:37:
c5:7b:55:bd:42:ea:ea:46:c7:0c:20:07:4e:ea:e7:
78:6b:57:2d:be:43:d9:d8:68:4b:b3:9e:fd:25:57:
03:0c:e8:90:49:00:1c:a9:d2:bf:86:1f:2c:ad:a4:
6c:c1:3f:ee:1c:e8:ad:53:6d:ef:2a:bf:6f:63:52:
73:41:57:9b:55:cd:7b:83:de:7b:87:ca:71:3e:e5:
dc:33:c9:ee:46:d1:09:19:36:40:9c:82:1c:05:66:
d5:75:39:31:cc:80:af:d6:c4:87:f9:54:2b:23:c7:
1f:26:3a:48:13:60:f6:f7:04:47:b5:d1:7f:27:a3:
81:e4:a5:2b:eb:b8:10:de:c7:fc:75:ca:b1:3a:c3:
2e:27:52:25:45:c8:4d:28:50:7a:7d:c5:aa:6e:bf:
57:d0:c3:60:a0:5b:97:fb:17:88:b7:4a:ec:20:28:
4f:d5:fa:5c:7d:a7:2e:c0:d2:04:6a:9e:8d:2b:50:
e7:a0:ee:ef:e5:c1:48:a7:fd:c1:93:bf:fb:9e:d8:
b4:fb:46:5a:a1:55:9a:06:b3:77:eb:aa:e1:d0:39:
ab:49:d9:11:f7:f9:d4:77:2a:23:c4:b6:b8:5f:7e:
08:f1:07:a2:4b:f9:be:44:45:9b:ae:59:ab:c9:9b:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:65:29:A2:32:6F:0A:CA:CC:91:50:A0:D4:DC:45:91:2E:0C:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/bb536837-5070-3d5a-a0e5-e98a4b36ac9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.124.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:67:3d:83:34:40:03:06:9f:28:94:93:a6:8f:09:8a:c9:3c:
d3:1a:7f:a4:34:f3:0f:51:0d:7c:ff:40:f6:b6:7c:90:0b:02:
0b:00:28:63:f6:1c:fd:bc:7f:15:cc:c0:c1:4b:a3:26:c1:a4:
e9:80:87:56:f7:95:b3:4a:d4:79:60:3c:9a:ed:84:96:1a:38:
c9:c5:33:29:88:f4:3a:8b:59:3e:76:16:6e:d5:34:3d:81:02:
1a:dd:53:c8:10:d6:26:c9:53:82:18:a9:49:84:4b:e7:5b:30:
9b:db:9f:f1:77:5c:b7:74:6a:bf:80:fd:c7:ae:aa:a6:65:d3:
c5:3b:80:6a:7d:ec:20:5f:51:24:4a:83:85:35:da:05:f7:26:
4b:e8:97:4f:bd:53:be:81:48:78:e5:e5:42:81:7c:af:2b:6f:
22:b9:1e:a4:f4:73:fc:cf:f0:f3:58:f4:27:6e:f6:9e:ef:68:
18:52:a7:ca:85:78:e8:8f:99:31:ab:2a:f6:29:7d:74:b2:a3:
4f:d6:12:0f:4e:5f:dc:ab:4f:cd:5a:5b:06:1c:c4:0e:6f:49:
79:90:e3:de:78:50:0d:4b:e6:1e:47:2e:f5:10:bd:03:d9:b4:
a3:ea:87:aa:ff:2d:8e:4b:7c:b7:4f:f5:9c:42:30:69:4c:9a:
0d:d0:e7:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccqPwt3hqd6P4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz
ZmM1MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
NmYzNmEwNWItMGZkOC00ODVlLTkwZjUtOGI3MDU2OGRhNWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGeIGM06ssnEv3FY3jfFe1W9QurqRscMIAdO
6ud4a1ctvkPZ2GhLs579JVcDDOiQSQAcqdK/hh8sraRswT/uHOitU23vKr9vY1Jz
QVebVc17g957h8pxPuXcM8nuRtEJGTZAnIIcBWbVdTkxzICv1sSH+VQrI8cfJjpI
E2D29wRHtdF/J6OB5KUr67gQ3sf8dcqxOsMuJ1IlRchNKFB6fcWqbr9X0MNgoFuX
+xeIt0rsIChP1fpcfacuwNIEap6NK1DnoO7v5cFIp/3Bk7/7nti0+0ZaoVWaBrN3
66rh0DmrSdkR9/nUdyojxLa4X34I8QeiS/m+REWbrlmryZve+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyVZSmiMm8KysyRUKDU3EWRLgxUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2
ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvYmI1MzY4MzctNTA3MC0z
ZDVhLWEwZTUtZTk4YTRiMzZhYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl
MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2
MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHw0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZnPYM0QAMGnyiUk6aPCYrJPNMaf6Q08w9RDXz/QPa2fJALAgsAKGP2
HP28fxXMwMFLoybBpOmAh1b3lbNK1HlgPJrthJYaOMnFMymI9DqLWT52Fm7VND2B
AhrdU8gQ1ibJU4IYqUmES+dbMJvbn/F3XLd0ar+A/ceuqqZl08U7gGp97CBfUSRK
g4U12gX3Jkvol0+9U76BSHjl5UKBfK8rbyK5HqT0c/zP8PNY9Cdu9p7vaBhSp8qF
eOiPmTGrKvYpfXSyo0/WEg9OX9yrT81aWwYcxA5vSXmQ4954UA1L5h5HLvUQvQPZ
tKPqh6r/LY5LfLdP9ZxCMGlMmg3Q5zo=
-----END CERTIFICATE-----
Generated at Thu Aug 13 23:30:21 2026 by rpki-client