
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
File: 2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa (raw, json)
Hash identifier: g/QBqjoBdCO0EPRUudGrQzq5y20xJnFlYIMRtx22sq0=
Subject key identifier: B9:B7:4E:8E:E9:4B:F1:8F:AD:66:21:71:71:C7:45:02:F1:4C:BE:8A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584C794C968B138C4BD175431500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 43525
IP address blocks: 2001:470:2a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 21 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:96:8b:13:8c:4b:d1:75:43:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=d3ee8497-a94e-4e9d-be38-c3f57e3af774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:7d:52:fa:72:08:d4:48:52:06:d1:e6:7e:
5b:d4:fb:31:7c:ed:7d:ae:94:e6:4e:7f:ff:ba:56:
69:ee:29:2d:c2:15:76:e3:46:ae:75:51:b9:73:bb:
f6:fa:57:8a:9c:35:9b:bf:61:8d:07:56:5e:a2:d2:
48:3f:9b:63:d3:cd:42:03:a3:7e:02:bd:9c:42:04:
9c:c9:bd:be:90:36:9e:50:dd:0e:79:55:72:57:20:
56:fd:2c:04:2a:e2:4f:4f:6a:7d:f0:f3:12:ce:ed:
98:98:7d:12:45:eb:67:bd:04:21:2c:0a:32:e7:ba:
9d:be:1c:9d:5b:3f:98:39:69:ed:64:66:55:ad:55:
59:97:5b:5b:6e:8e:f3:6f:46:d1:71:a0:94:04:c0:
fd:c3:97:1d:2a:ab:8b:5d:1b:b4:8b:35:9d:4c:0c:
5b:17:fd:c0:72:41:e1:dd:d6:0f:22:c2:a8:a3:3f:
13:0a:1f:97:34:86:96:cb:64:5e:b7:5e:06:b0:2d:
e5:fc:66:22:23:dd:63:c2:88:01:5c:ed:4e:94:b7:
04:7d:3a:9c:ed:22:5c:af:a8:48:b6:27:57:90:85:
36:d3:da:1f:fd:71:74:2a:ea:52:de:69:a2:3f:4f:
d3:f7:ea:4a:64:3b:2c:d1:05:04:16:9c:7b:25:01:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:4E:8E:E9:4B:F1:8F:AD:66:21:71:71:C7:45:02:F1:4C:BE:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c9:d6:11:90:97:6f:93:c6:49:90:a5:4f:79:fb:53:e8:b4:
f7:03:9d:65:86:8b:e1:9b:35:87:a9:7b:27:15:fc:a6:26:5c:
b1:45:6c:a6:3a:d8:07:50:2e:c4:f6:93:55:d0:47:29:7d:a9:
1a:e0:9a:e8:fd:9d:b5:28:9f:ad:d5:90:dd:83:45:e8:32:28:
d3:52:72:19:ec:b2:e6:7e:35:6a:82:91:13:23:5b:c5:a9:81:
c7:42:45:3e:36:dd:f1:ab:1c:53:35:c9:60:0b:d7:c4:d8:71:
09:3a:9e:50:43:bf:b6:47:43:a1:1e:82:b2:bf:ee:22:f4:25:
e1:dd:62:20:80:bc:11:4d:bf:b6:37:3c:f6:fe:7e:dc:5c:0f:
02:0a:3f:33:1b:d3:53:db:f6:ef:d6:0b:c3:ee:36:b2:1c:e4:
38:b3:0c:22:20:3b:b5:61:c3:67:65:ff:40:16:71:cd:b8:7f:
f0:f6:01:f2:69:18:39:82:b3:00:51:2d:00:60:09:77:0a:fd:
59:28:af:e5:d1:8a:27:51:ce:3a:a5:99:a7:37:0f:ce:3c:d6:
ac:ae:3e:28:4c:4d:36:87:3d:6b:f8:d6:35:a8:ef:60:0b:fc:
8c:6a:77:d9:08:f3:0e:f4:26:9d:e9:54:e6:f5:65:57:87:d1:
dd:6b:09:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5TJaLE4xL0XVDFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZDNlZTg0OTctYTk0ZS00ZTlkLWJlMzgtYzNmNTdlM2FmNzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU59UvpyCNRIUgbR5n5b1PsxfO19rpTmTn//
ulZp7iktwhV240audVG5c7v2+leKnDWbv2GNB1ZeotJIP5tj081CA6N+Ar2cQgSc
yb2+kDaeUN0OeVVyVyBW/SwEKuJPT2p98PMSzu2YmH0SRetnvQQhLAoy57qdvhyd
Wz+YOWntZGZVrVVZl1tbbo7zb0bRcaCUBMD9w5cdKquLXRu0izWdTAxbF/3AckHh
3dYPIsKooz8TCh+XNIaWy2Ret14GsC3l/GYiI91jwogBXO1OlLcEfTqc7SJcr6hI
tidXkIU209of/XF0KupS3mmiP0/T9+pKZDss0QUEFpx7JQFP4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLm3To7pS/GPrWYhcXHHRQLxTL6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNmOGVjYTAtNmM4Yi0z
NDRjLThhOTktNGI4YWQ0NDZmN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADzJ1hGQl2+TxkmQpU95+1PotPcDnWWGi+GbNYepeycV/KYmXLFF
bKY62AdQLsT2k1XQRyl9qRrgmuj9nbUon63VkN2DRegyKNNSchnssuZ+NWqCkRMj
W8WpgcdCRT423fGrHFM1yWAL18TYcQk6nlBDv7ZHQ6EegrK/7iL0JeHdYiCAvBFN
v7Y3PPb+ftxcDwIKPzMb01Pb9u/WC8PuNrIc5DizDCIgO7Vhw2dl/0AWcc24f/D2
AfJpGDmCswBRLQBgCXcK/Vkor+XRiidRzjqlmac3D8481qyuPihMTTaHPWv41jWo
72AL/Ixqd9kI8w70Jp3pVOb1ZVeH0d1rCWY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:55:15 2026 by rpki-client