
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
File: b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa (raw, json)
Hash identifier: yHkwUO3QV35zJLlvZzCyxuW9p8Js8HS5fUc3SSg6y8U=
Subject key identifier: 0B:09:44:D2:86:8C:C1:A8:7E:38:E9:B1:BE:B3:76:B3:3A:72:D5:A2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F7E7E00B1242FD1272B51F680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
Signing time: Wed 14 Oct 2026 01:00:13 +0000
ROA not before: Wed 14 Oct 2026 01:00:13 +0000
ROA not after: Tue 12 Jan 2027 02:00:13 +0000
asID: 1492
IP address blocks: 216.66.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7e:7e:00:b1:24:2f:d1:27:2b:51:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 14 01:00:13 2026 GMT
Not After : Jan 12 02:00:13 2027 GMT
Subject: CN=2b047a2f-cd74-448e-bc29-6f52c7dc67c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:d5:b2:27:c4:f9:9e:0b:e7:d9:d8:78:21:
a6:c9:b6:ef:cb:bb:38:e0:e7:3d:f8:ae:62:ca:45:
c5:5e:22:43:66:4a:00:4e:d8:e0:7b:dc:c0:c9:f4:
6e:f9:7b:fb:00:48:95:36:ad:39:63:c2:4d:fd:41:
91:fd:18:17:6b:79:70:9f:e9:65:cb:a4:ff:12:5a:
48:49:00:f2:53:7f:66:90:e3:45:a8:a4:ce:40:10:
27:88:99:41:34:bf:f2:5f:9e:f0:18:84:8c:69:4b:
90:9f:90:93:10:9b:eb:11:52:05:d8:39:ad:c7:93:
96:37:6a:49:f5:c4:05:41:bc:99:8b:3d:10:7d:d7:
3b:40:93:0f:38:63:29:90:a9:2b:95:90:f1:0a:e9:
79:a9:53:ad:85:b6:22:c9:45:f4:1d:03:79:45:6a:
59:4a:6d:13:10:e2:bd:d3:3c:d8:4c:c8:09:c8:3f:
4d:74:62:e4:92:3f:b9:0a:47:2c:e7:a7:3b:7c:fd:
a7:d9:34:95:97:6e:5c:ff:b3:ab:98:0b:6b:87:7c:
ad:6d:0c:6a:07:bf:3b:af:3d:93:68:61:73:c6:7e:
a0:fe:b3:d3:3d:f8:48:8f:ba:a8:0e:83:73:d4:6b:
06:17:01:1e:e1:16:d8:f5:5b:e4:4c:87:76:c5:38:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:44:D2:86:8C:C1:A8:7E:38:E9:B1:BE:B3:76:B3:3A:72:D5:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:00:64:98:40:5b:a0:37:95:13:94:fd:dc:80:88:8d:56:11:
aa:cf:86:4e:66:1a:d3:02:56:c2:60:cc:84:4d:0b:62:fe:96:
50:61:94:2f:70:a8:56:52:91:f1:60:8f:4b:8d:dd:cf:2c:d0:
8a:37:97:e3:bf:fe:74:50:95:59:0d:27:e9:ca:d7:94:3f:39:
fc:12:2b:ad:d3:8d:4d:32:94:a0:c9:06:07:cf:63:32:6a:1f:
91:d1:35:99:75:5b:9c:6f:8a:08:21:7f:52:79:20:6a:8a:6a:
67:30:6d:69:85:22:38:13:a8:7d:3f:80:ab:88:23:9a:4d:22:
b3:86:a8:dd:d3:ef:16:ef:c8:f8:0d:4c:52:01:69:aa:e4:ae:
ae:2c:08:5b:ca:8a:54:d0:ab:8c:e2:d4:fc:ac:d8:17:21:77:
45:31:32:02:7a:ca:37:74:7f:98:a1:30:67:a3:56:9b:cc:c0:
d7:bc:c7:2e:98:c1:19:fb:10:e1:6b:2f:27:a5:d6:26:ff:8c:
66:ff:f4:3c:ec:82:7e:da:12:8f:55:81:2c:c8:27:f0:75:d9:
6d:5f:f0:03:55:65:24:88:e2:14:bc:06:f5:1e:91:75:29:90:
9f:6c:8a:b4:c9:10:f4:60:a2:4a:5a:c2:ba:f1:ac:d1:19:90:
bd:cd:aa:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fgCxJC/RJytR9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MmIwNDdhMmYtY2Q3NC00NDhlLWJjMjktNmY1MmM3ZGM2N2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYLVsifE+Z4L59nYeCGmybbvy7s44Oc9+K5i
ykXFXiJDZkoATtjge9zAyfRu+Xv7AEiVNq05Y8JN/UGR/RgXa3lwn+lly6T/ElpI
SQDyU39mkONFqKTOQBAniJlBNL/yX57wGISMaUuQn5CTEJvrEVIF2Dmtx5OWN2pJ
9cQFQbyZiz0Qfdc7QJMPOGMpkKkrlZDxCul5qVOthbYiyUX0HQN5RWpZSm0TEOK9
0zzYTMgJyD9NdGLkkj+5Ckcs56c7fP2n2TSVl25c/7OrmAtrh3ytbQxqB787rz2T
aGFzxn6g/rPTPfhIj7qoDoNz1GsGFwEe4RbY9VvkTId2xTgNZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsJRNKGjMGofjjpsb6zdrM6ctWiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjU5ZmQzZWYtOWM0Yi0z
ZDU4LWJiNGEtYzUzOTM2YmM2NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8AZJhAW6A3lROU/dyAiI1WEarPhk5mGtMCVsJgzIRNC2L+llBhlC9w
qFZSkfFgj0uN3c8s0Io3l+O//nRQlVkNJ+nK15Q/OfwSK63TjU0ylKDJBgfPYzJq
H5HRNZl1W5xvigghf1J5IGqKamcwbWmFIjgTqH0/gKuII5pNIrOGqN3T7xbvyPgN
TFIBaarkrq4sCFvKilTQq4zi1Pys2Bchd0UxMgJ6yjd0f5ihMGejVpvMwNe8xy6Y
wRn7EOFrLyel1ib/jGb/9Dzsgn7aEo9VgSzIJ/B12W1f8ANVZSSI4hS8BvUekXUp
kJ9sirTJEPRgokpawrrxrNEZkL3Nqlk=
-----END CERTIFICATE-----
Generated at Mon Nov 2 09:10:27 2026 by rpki-client