
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa
File: 5e6b3956-f389-30ac-a866-34bb38831507.roa (raw, json)
Hash identifier: PUBHSWchH4gqYPjkrHP2o0Ltc0EFDTJSqeIaOoPu1t8=
Subject key identifier: 95:15:E4:C3:BB:43:6B:E9:71:28:E5:6C:97:4E:A6:85:DD:43:37:7E
Certificate issuer: /CN=ebf567a0-4cf8-429d-82b3-3d284a246421
Certificate serial: 010D0C9F4328584ED9C764E498BB6C5B2F91F200
Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 1421
IP address blocks: 66.39.192.0/20 maxlen: 24
66.220.58.0/24 maxlen: 24
69.64.240.0/20 maxlen: 24
162.211.176.0/22 maxlen: 24
162.216.96.0/23 maxlen: 24
162.216.100.0/22 maxlen: 24
199.38.232.0/22 maxlen: 24
199.101.92.0/22 maxlen: 24
2001:4848::/32 maxlen: 48
2605:dc80::/32 maxlen: 48
2606:9100::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:64:e4:98:bb:6c:5b:2f:91:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=c89b9884-e2f6-4fe0-9626-7d122c7e521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:19:89:00:b5:26:8d:d2:d5:04:4c:e2:dc:
28:d0:60:84:7c:ef:57:13:21:05:ed:ac:6f:71:cd:
fb:7b:d4:ea:51:95:53:0a:68:61:a0:ec:b9:e5:38:
4d:69:b3:08:7e:6d:0b:db:0b:7f:9a:db:48:a0:7b:
31:b9:5f:92:10:03:a6:2e:4e:b8:9b:dc:b6:02:55:
94:c9:96:e1:a1:75:3e:d2:13:9e:0d:c6:f7:85:05:
55:40:62:5a:d0:d4:cc:95:92:7e:b4:07:ae:70:94:
44:54:34:a2:b9:ae:58:5c:76:10:c7:7f:0a:ca:fc:
12:2d:e9:73:1d:3a:dd:df:23:d6:e7:6d:07:b0:d0:
52:0b:31:57:bf:bb:7c:00:3e:8a:bf:10:a9:0a:c0:
01:24:29:d3:f5:70:de:81:ce:bf:1f:40:1b:a2:b9:
bb:e7:3c:76:05:d3:57:df:51:43:9a:a4:70:c6:62:
34:0a:c0:b7:23:e8:23:d8:a1:a6:f0:08:73:a4:7f:
4b:4e:fd:83:0b:f6:fc:4d:bc:6e:ef:d7:07:8a:0d:
0e:51:a8:3b:59:d0:73:fb:43:e3:b0:05:0e:82:d8:
bb:3b:8e:bf:53:66:98:c6:40:38:e1:0f:54:47:70:
4f:81:c3:73:fd:bc:16:b7:e8:a5:fa:ed:82:ad:0d:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:E4:C3:BB:43:6B:E9:71:28:E5:6C:97:4E:A6:85:DD:43:37:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl
X509v3 Authority Key Identifier:
keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
sbgp-ipAddrBlock: critical
IPv4:
66.39.192.0/20
66.220.58.0/24
69.64.240.0/20
162.211.176.0/22
162.216.96.0/23
162.216.100.0/22
199.38.232.0/22
199.101.92.0/22
IPv6:
2001:4848::/32
2605:dc80::/32
2606:9100::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:9b:31:f4:f8:13:91:6f:ca:32:c5:16:b4:47:75:e9:17:cc:
9e:6d:70:e2:75:48:3b:9c:ed:11:96:94:a7:2c:b2:58:ad:94:
6b:d0:12:d1:6a:37:89:ba:81:0b:aa:e4:d3:c4:6e:42:8d:c3:
cc:c8:15:b9:07:ba:96:29:40:c1:7b:5d:3f:fa:33:7f:b9:40:
ae:8d:bb:d7:32:cc:96:03:77:0b:40:ad:cb:67:2a:bc:63:49:
94:66:96:a9:d4:84:67:da:ec:c3:37:18:4e:01:95:85:da:8e:
f8:63:e8:95:c9:8a:84:df:e9:d9:71:69:47:66:e4:82:6f:05:
67:a6:b4:28:bf:7f:ae:c7:02:c1:86:cb:db:24:c8:48:f3:f5:
4f:89:92:5f:8d:34:66:98:c3:fb:50:c3:14:ca:dc:af:99:91:
16:c6:89:f3:6d:64:63:f2:ea:a1:29:d1:d9:25:4e:d2:a6:7c:
a5:e5:b9:df:19:bf:6e:2d:af:f6:98:94:b6:42:4c:f6:3f:b3:
a3:93:3e:47:94:19:65:31:60:de:b4:ed:0e:b8:b4:2a:d9:de:
6d:40:bc:1d:ca:30:26:6a:55:44:39:96:7c:4a:34:17:8b:f9:
80:3b:c6:4d:3b:7a:fd:4c:65:66:51:0b:13:f4:7b:a3:10:e1:
19:d3:ef:4b
-----BEGIN CERTIFICATE-----
MIIGijCCBXKgAwIBAgIUAQ0Mn0MoWE7Zx2TkmLtsWy+R8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJmNTY3YTAtNGNmOC00MjlkLTgyYjMtM2QyODRhMjQ2
NDIxMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
Yzg5Yjk4ODQtZTJmNi00ZmUwLTk2MjYtN2QxMjJjN2U1MjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs48ZiQC1Jo3S1QRM4two0GCEfO9XEyEF7axv
cc37e9TqUZVTCmhhoOy55ThNabMIfm0L2wt/mttIoHsxuV+SEAOmLk64m9y2AlWU
yZbhoXU+0hOeDcb3hQVVQGJa0NTMlZJ+tAeucJREVDSiua5YXHYQx38KyvwSLelz
HTrd3yPW520HsNBSCzFXv7t8AD6KvxCpCsABJCnT9XDegc6/H0Aborm75zx2BdNX
31FDmqRwxmI0CsC3I+gj2KGm8AhzpH9LTv2DC/b8Tbxu79cHig0OUag7WdBz+0Pj
sAUOgti7O46/U2aYxkA44Q9UR3BPgcNz/bwWt+il+u2CrQ0ijQIDAQABo4IDnDCC
A5gwHQYDVR0OBBYEFJUV5MO7Q2vpcSjlbJdOpoXdQzd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1
NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4NGEyNDY0MjEvNWU2YjM5NTYtZjM4OS0z
MGFjLWE4NjYtMzRiYjM4ODMxNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWJmNTY3YTAtNGNmOC00MjlkLTgy
YjMtM2QyODRhMjQ2NDIxL2ViZjU2N2EwLTRjZjgtNDI5ZC04MmIzLTNkMjg0YTI0
NjQyMS5jcmwwHwYDVR0jBBgwFoAUvNxgVjT3uQPm5V7F/U3uzGmVQTcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4
NGEyNDY0MjEuY2VyMGYGCCsGAQUFBwEHAQH/BFcwVTA2BAIAATAwAwQEQifAAwQA
Qtw6AwQERUDwAwQCotOwAwQBothgAwQCothkAwQCxyboAwQCx2VcMBsEAgACMBUD
BQAgAUhIAwUAJgXcgAMFACYGkQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbZsx9PgTkW/KMsUWtEd16RfM
nm1w4nVIO5ztEZaUpyyyWK2Ua9AS0Wo3ibqBC6rk08RuQo3DzMgVuQe6lilAwXtd
P/ozf7lAro271zLMlgN3C0Cty2cqvGNJlGaWqdSEZ9rswzcYTgGVhdqO+GPolcmK
hN/p2XFpR2bkgm8FZ6a0KL9/rscCwYbL2yTISPP1T4mSX400ZpjD+1DDFMrcr5mR
FsaJ821kY/LqoSnR2SVO0qZ8peW53xm/bi2v9piUtkJM9j+zo5M+R5QZZTFg3rTt
Dri0KtnebUC8HcowJmpVRDmWfEo0F4v5gDvGTTt6/UxlZlELE/R7oxDhGdPvSw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:48:10 2026 by rpki-client