
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/174b3b8c-672a-3340-9ebc-0177fc1da385.roa
File: 174b3b8c-672a-3340-9ebc-0177fc1da385.roa (raw, json)
Hash identifier: C1wtkm8yJOCTFK6aOcp5rq9pxqWplpuHlGNzY0rfCkA=
Subject key identifier: 52:F6:DC:77:2E:E9:C1:7C:05:DC:66:AD:F1:41:A9:12:8A:BF:C6:62
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D0EB64EC8E06607FD19D9E400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/174b3b8c-672a-3340-9ebc-0177fc1da385.roa
Signing time: Wed 04 Mar 2026 14:30:13 +0000
ROA not before: Wed 04 Mar 2026 14:30:13 +0000
ROA not after: Tue 02 Jun 2026 13:30:13 +0000
asID: 213648
IP address blocks: 2001:470:509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:b6:4e:c8:e0:66:07:fd:19:d9:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 4 14:30:13 2026 GMT
Not After : Jun 2 13:30:13 2026 GMT
Subject: CN=429b32f1-b46c-49b0-a293-3a46041675e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:f5:1e:d4:86:05:1c:53:54:44:ea:df:9a:
32:ac:63:52:ca:26:28:e7:bd:a0:9b:77:23:12:aa:
8c:45:ea:91:db:b0:cc:80:1c:f5:42:18:4a:4d:6a:
f8:67:ee:5b:15:d9:a2:7b:fe:1a:f4:4f:96:95:8b:
68:9a:1c:c1:c7:41:10:86:eb:0e:e8:51:05:0d:3a:
a7:3c:23:4f:bc:36:fc:4f:2d:df:53:a4:51:95:57:
f8:54:ba:ad:d0:07:1e:00:7b:20:39:24:ed:8d:2e:
58:f3:ac:d9:c9:a4:e0:91:fb:d7:1e:3d:62:c0:67:
ea:40:e8:54:f1:ed:9c:f5:4c:9f:c3:cc:69:10:77:
de:c7:f2:3a:b2:c1:31:2d:21:15:01:d3:f7:7f:0c:
32:26:20:80:0d:66:13:18:0a:08:90:77:47:ee:8b:
8f:0d:e6:f1:76:ec:73:75:16:2d:f9:30:61:07:2e:
d4:4b:0a:0d:54:39:76:c3:4c:fc:ad:9a:d1:83:34:
8d:83:0e:53:9d:cb:c5:f3:8f:cc:4b:e8:65:7d:23:
28:27:1c:6e:c3:af:04:c2:93:2e:2b:6e:d2:35:b5:
da:fa:05:64:04:2e:c3:c3:ee:46:9e:d3:5d:5a:6c:
57:9a:cc:c8:dc:c6:f6:71:fa:85:e5:cd:6d:4e:cd:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:DC:77:2E:E9:C1:7C:05:DC:66:AD:F1:41:A9:12:8A:BF:C6:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/174b3b8c-672a-3340-9ebc-0177fc1da385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:509::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:e3:6e:a8:72:63:4b:c3:57:12:88:e0:82:c7:cb:7e:04:c3:
5f:f6:17:ed:ad:75:0e:c7:6d:48:84:a9:44:43:db:f8:38:61:
67:b0:41:34:4f:4a:b0:93:14:7b:f4:b6:75:9c:3e:17:1a:ad:
18:24:67:8f:74:35:29:20:e8:01:db:23:72:bc:20:58:df:3d:
77:43:45:71:bd:bc:d2:f2:33:30:d4:4c:de:11:8b:19:41:f6:
8d:61:dc:eb:f9:03:ca:4f:82:99:91:78:5e:18:0e:35:d9:a4:
8c:f8:ff:89:b4:a2:a3:5b:55:3c:f2:4e:28:ae:87:73:e9:a9:
9c:80:9f:4b:a4:db:c7:bc:a6:89:b6:78:4e:3d:92:df:89:6a:
23:5f:1e:13:a6:1a:90:20:3e:1f:dc:91:4d:37:2e:5a:4e:c4:
96:75:09:00:39:d8:b6:86:5c:cd:01:bc:45:10:29:72:59:5a:
ed:09:f7:cc:63:dd:22:9e:b7:bc:c0:34:e9:e8:7a:11:b0:d5:
14:e5:4d:64:8e:cc:1a:38:b9:75:78:37:eb:e8:c7:5a:f5:9c:
fb:8c:42:26:cf:a5:7f:f4:8f:12:b2:cf:db:1e:54:a0:1e:17:
1c:86:30:e5:cb:e4:27:fa:2a:ad:ff:6a:71:23:91:00:5d:b9:
13:c5:3f:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Otk7I4GYH/RnZ5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMwNDE0MzAxM1oXDTI2MDYwMjEzMzAxM1owLzEtMCsGA1UEAxMk
NDI5YjMyZjEtYjQ2Yy00OWIwLWEyOTMtM2E0NjA0MTY3NWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ71HtSGBRxTVETq35oyrGNSyiYo572gm3cj
EqqMReqR27DMgBz1QhhKTWr4Z+5bFdmie/4a9E+WlYtomhzBx0EQhusO6FEFDTqn
PCNPvDb8Ty3fU6RRlVf4VLqt0AceAHsgOSTtjS5Y86zZyaTgkfvXHj1iwGfqQOhU
8e2c9Uyfw8xpEHfex/I6ssExLSEVAdP3fwwyJiCADWYTGAoIkHdH7ouPDebxduxz
dRYt+TBhBy7USwoNVDl2w0z8rZrRgzSNgw5TncvF84/MS+hlfSMoJxxuw68EwpMu
K27SNbXa+gVkBC7Dw+5GntNdWmxXmszI3Mb2cfqF5c1tTs3iTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFL23Hcu6cF8BdxmrfFBqRKKv8ZiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTc0YjNiOGMtNjcyYS0z
MzQwLTllYmMtMDE3N2ZjMWRhMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEPjbqhyY0vDVxKI4ILHy34Ew1/2F+2tdQ7HbUiEqURD2/g4YWew
QTRPSrCTFHv0tnWcPhcarRgkZ490NSkg6AHbI3K8IFjfPXdDRXG9vNLyMzDUTN4R
ixlB9o1h3Ov5A8pPgpmReF4YDjXZpIz4/4m0oqNbVTzyTiiuh3PpqZyAn0uk28e8
pom2eE49kt+JaiNfHhOmGpAgPh/ckU03LlpOxJZ1CQA52LaGXM0BvEUQKXJZWu0J
98xj3SKet7zANOnoehGw1RTlTWSOzBo4uXV4N+vox1r1nPuMQibPpX/0jxKyz9se
VKAeFxyGMOXL5Cf6Kq3/anEjkQBduRPFP2E=
-----END CERTIFICATE-----
Generated at Sat Mar 21 18:14:09 2026 by rpki-client