
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa
File: 36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa (raw, json)
Hash identifier: xnJgu4HaTUhFffIj6035PQGYYxwL1MtofR7/XfWPDbk=
Subject key identifier: 2F:58:6B:BC:78:01:0E:3E:D0:D6:D9:EE:3F:0B:DB:93:A1:8E:E0:C3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584DEDE0B4010F05795CC2716080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa
Signing time: Sat 23 May 2026 13:00:31 +0000
ROA not before: Sat 23 May 2026 13:00:31 +0000
ROA not after: Fri 21 Aug 2026 13:00:31 +0000
asID: 401337
IP address blocks: 2001:470:bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 30 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ed:e0:b4:01:0f:05:79:5c:c2:71:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 23 13:00:31 2026 GMT
Not After : Aug 21 13:00:31 2026 GMT
Subject: CN=741919e4-dadc-4b1a-af62-873ba86e0479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:a6:eb:a5:96:57:bb:0f:7d:ed:4a:5e:94:
17:d1:ae:fb:38:c1:23:ae:b7:aa:cb:4b:07:c5:df:
5a:d3:47:54:57:cf:2f:e9:2f:ca:8b:ca:be:0f:eb:
3b:46:81:84:bc:ee:2a:04:e4:87:e1:38:dd:d2:35:
48:d6:32:f6:dd:53:52:f0:d5:fa:94:7c:26:0c:1f:
58:ae:1b:17:23:fb:56:1f:3f:7c:bc:2b:85:67:59:
5c:b2:70:67:08:66:42:31:4a:66:e2:d6:18:78:35:
79:17:1a:f8:12:bd:69:d7:3f:0f:c6:12:fc:1e:62:
c8:91:2f:c8:f0:a5:8b:c9:0f:d8:ca:9f:4c:12:dc:
b4:03:62:a4:eb:dc:e2:50:fd:40:b5:07:52:d5:bc:
1b:7d:fc:dc:89:6f:0e:18:cf:a1:ff:55:c0:af:61:
5e:41:78:b4:08:5e:2a:60:17:b9:c1:4f:d0:b7:1c:
61:4c:66:ee:08:3a:f1:e2:6d:0a:1a:59:18:4d:bb:
1f:21:16:6a:d3:35:ce:e5:09:b9:26:03:12:fb:68:
5b:1d:5c:e3:70:c6:8e:55:b6:dc:3c:13:63:26:f6:
86:ae:36:ab:bb:59:4c:e0:86:9f:49:e5:24:d1:c2:
7b:3b:09:42:d0:d7:c3:40:19:2c:13:a6:63:af:bd:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:58:6B:BC:78:01:0E:3E:D0:D6:D9:EE:3F:0B:DB:93:A1:8E:E0:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:bf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:2c:9e:90:7d:f3:e9:2c:69:d7:52:2f:36:f1:0a:89:c7:f4:
3e:fa:01:5f:cf:d9:2a:8d:e2:da:1f:b6:11:ba:2a:6c:a1:e8:
dc:06:3b:11:ed:77:9c:d0:19:a8:30:1a:b7:1f:eb:b9:fc:f3:
1e:c5:7c:02:95:f4:fc:97:1a:db:a3:5c:c7:b1:16:2a:f7:ee:
25:0f:c1:68:fb:53:3f:ed:5d:27:0d:32:27:42:6a:4e:84:c7:
79:8c:36:aa:1d:2d:2a:41:c5:1b:a7:4b:b3:43:3a:c3:0c:95:
2a:05:f5:89:48:ee:79:36:91:e4:7b:45:bb:31:9d:ac:24:49:
4a:db:db:6a:c8:60:1e:78:96:d6:fe:40:c2:eb:25:eb:f8:b1:
dc:4e:3a:cc:c9:77:d4:59:05:31:47:88:be:3e:21:2b:ff:e2:
3a:74:3a:d5:29:9d:3c:d1:40:e9:b9:95:32:4f:5f:1a:02:87:
39:88:7f:a7:78:7a:20:ee:85:ed:04:75:4f:06:4f:ab:35:b3:
bd:33:80:72:bf:d9:b5:ab:85:63:6d:7e:a6:e8:7f:31:b7:8f:
a2:6c:6e:95:42:10:c1:2b:63:0c:8f:32:38:4d:df:00:3b:4e:
56:b1:a4:9a:c7:70:11:3c:25:f0:91:80:42:63:bc:a9:78:e9:
7f:7f:d5:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4LQBDwV5XMJxYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
NzQxOTE5ZTQtZGFkYy00YjFhLWFmNjItODczYmE4NmUwNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK6m66WWV7sPfe1KXpQX0a77OMEjrreqy0sH
xd9a00dUV88v6S/Ki8q+D+s7RoGEvO4qBOSH4Tjd0jVI1jL23VNS8NX6lHwmDB9Y
rhsXI/tWHz98vCuFZ1lcsnBnCGZCMUpm4tYYeDV5Fxr4Er1p1z8PxhL8HmLIkS/I
8KWLyQ/Yyp9MEty0A2Kk69ziUP1AtQdS1bwbffzciW8OGM+h/1XAr2FeQXi0CF4q
YBe5wU/QtxxhTGbuCDrx4m0KGlkYTbsfIRZq0zXO5Qm5JgMS+2hbHVzjcMaOVbbc
PBNjJvaGrjaru1lM4IafSeUk0cJ7OwlC0NfDQBksE6Zjr70RXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC9Ya7x4AQ4+0NbZ7j8L25OhjuDDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzZmNDFiMjUtY2RkMy0z
YWM5LTgyYjktOTFkYzQxMmU0YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAEsnpB98+ksaddSLzbxConH9D76AV/P2SqN4tofthG6Kmyh6NwG
OxHtd5zQGagwGrcf67n88x7FfAKV9PyXGtujXMexFir37iUPwWj7Uz/tXScNMidC
ak6Ex3mMNqodLSpBxRunS7NDOsMMlSoF9YlI7nk2keR7RbsxnawkSUrb22rIYB54
ltb+QMLrJev4sdxOOszJd9RZBTFHiL4+ISv/4jp0OtUpnTzRQOm5lTJPXxoChzmI
f6d4eiDuhe0EdU8GT6s1s70zgHK/2bWrhWNtfqbofzG3j6JsbpVCEMErYwyPMjhN
3wA7TlaxpJrHcBE8JfCRgEJjvKl46X9/1SI=
-----END CERTIFICATE-----
Generated at Fri May 29 15:06:15 2026 by rpki-client