
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
File: b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa (raw, json)
Hash identifier: lcV3cptkg+EalN82MuPaLdww19x0DziRoVR/whdbGXw=
Subject key identifier: 7A:6D:D4:C5:BF:42:9E:11:55:AC:40:04:30:A9:5B:B0:75:0E:E9:1E
Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial: 010D0C9F4328584E0005DE7C02025B7DBA6058B0
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 4185
IP address blocks: 2620:10f:b000::/48 maxlen: 48
2620:10f:b070::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:05:de:7c:02:02:5b:7d:ba:60:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=32ae9cd5-cf43-4e02-87fb-4beab376ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:92:b5:bf:c4:94:29:ac:9c:eb:be:52:c4:62:
6b:93:c1:2f:55:62:7e:d2:d3:47:f3:b9:d4:56:11:
98:40:45:19:9c:2b:38:0c:78:1f:3a:fc:f9:c6:17:
e3:47:d4:28:d7:c0:23:7b:e5:ed:82:88:dc:7d:57:
50:aa:da:bc:0b:7f:ac:2f:bb:9f:61:35:84:69:08:
25:51:6b:ef:61:47:c2:c8:de:10:e5:8c:4b:50:01:
71:bf:0b:df:4c:5b:b4:47:06:2d:d7:09:f2:56:37:
fc:95:72:bc:6f:3e:d6:9a:10:f7:c0:d1:ca:cb:3d:
e0:97:b4:fa:21:f5:8f:56:b4:47:59:f0:9f:43:a2:
6b:a3:75:9f:95:0b:c1:73:83:ce:51:52:55:7e:c3:
07:3d:6d:bb:ba:8f:10:20:94:df:86:6a:d3:3c:9b:
95:1c:aa:5b:22:8c:83:07:d8:ce:3b:45:77:56:a0:
e9:e0:f7:4c:46:8f:f2:57:7d:72:ff:1e:de:19:88:
fd:37:2c:61:ff:78:c0:7a:70:87:fe:44:d3:7b:81:
b0:61:2c:97:8b:9b:56:c7:87:00:34:cc:ef:02:58:
41:40:7e:b6:53:7b:5a:2c:58:5f:7e:10:74:74:90:
ae:cc:fe:4a:6b:8f:89:f0:27:30:63:b9:a6:39:f0:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:D4:C5:BF:42:9E:11:55:AC:40:04:30:A9:5B:B0:75:0E:E9:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
X509v3 Authority Key Identifier:
keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:b000::/48
2620:10f:b070::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:31:3e:1d:cf:f0:25:14:5d:d9:ec:1f:87:71:c1:37:69:df:
33:66:c7:90:ae:3f:71:ae:b5:8a:3f:85:85:13:40:02:3b:c9:
94:59:02:96:a7:fe:19:fd:94:2c:5e:df:f0:e2:2b:43:9f:87:
61:f8:2c:29:b7:59:9a:55:89:59:91:19:dc:18:0f:9a:f4:af:
dd:52:0f:62:9b:bd:dc:19:24:98:14:ed:76:90:96:b1:05:48:
48:67:36:fe:47:a0:e3:3b:70:b8:76:0d:3d:03:04:1c:2f:48:
b6:60:0f:f0:47:a0:41:56:80:b0:af:b1:fe:df:77:31:48:78:
ea:37:20:2e:14:1f:93:67:d9:b7:db:8a:0f:c0:64:dd:e1:4c:
de:83:6d:ce:17:36:be:b7:b8:87:91:af:15:9b:36:c9:b8:63:
6b:31:83:76:b2:5d:7d:b8:fe:41:ae:08:53:67:83:35:d5:2f:
f4:17:a9:4b:4a:84:70:bc:1a:d7:d0:27:8b:59:4e:6b:e9:9b:
9d:d0:ea:45:9d:53:e8:d9:b2:14:13:16:51:ab:e2:5f:7a:a4:
54:61:6c:8e:33:93:42:ea:39:84:8d:36:bf:af:67:41:8a:9b:
34:c1:23:cd:64:9d:1b:9d:0e:bb:28:35:c7:e5:8e:e0:5e:69:
8d:f5:14:08
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE4ABd58AgJbfbpgWLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz
ZjBkMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
MzJhZTljZDUtY2Y0My00ZTAyLTg3ZmItNGJlYWIzNzZiYTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95K1v8SUKayc675SxGJrk8EvVWJ+0tNH87nU
VhGYQEUZnCs4DHgfOvz5xhfjR9Qo18Aje+XtgojcfVdQqtq8C3+sL7ufYTWEaQgl
UWvvYUfCyN4Q5YxLUAFxvwvfTFu0RwYt1wnyVjf8lXK8bz7WmhD3wNHKyz3gl7T6
IfWPVrRHWfCfQ6Jro3WflQvBc4POUVJVfsMHPW27uo8QIJTfhmrTPJuVHKpbIoyD
B9jOO0V3VqDp4PdMRo/yV31y/x7eGYj9Nyxh/3jAenCH/kTTe4GwYSyXi5tWx4cA
NMzvAlhBQH62U3taLFhffhB0dJCuzP5Ka4+J8CcwY7mmOfAIfwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHpt1MW/Qp4RVaxABDCpW7B1DukeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw
NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvYjU4YzNlMTMtNGNjYy0z
Y2FiLWJkODAtZmMyNDEyN2Q5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm
M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1
M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz
MzQ0NTNmMGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJiABD7AA
AwcAJiABD7BwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADMxPh3P8CUUXdnsH4dxwTdp3zNmx5CuP3GutYo/
hYUTQAI7yZRZApan/hn9lCxe3/DiK0Ofh2H4LCm3WZpViVmRGdwYD5r0r91SD2Kb
vdwZJJgU7XaQlrEFSEhnNv5HoOM7cLh2DT0DBBwvSLZgD/BHoEFWgLCvsf7fdzFI
eOo3IC4UH5Nn2bfbig/AZN3hTN6Dbc4XNr63uIeRrxWbNsm4Y2sxg3ayXX24/kGu
CFNngzXVL/QXqUtKhHC8GtfQJ4tZTmvpm53Q6kWdU+jZshQTFlGr4l96pFRhbI4z
k0LqOYSNNr+vZ0GKmzTBI81knRudDrsoNcfljuBeaY31FAg=
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:42:07 2026 by rpki-client