
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa
File: d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa (raw, json)
Hash identifier: 3ckNcsb7EEzQHenDikniNyXVooH1zp7RhWx+QAAi5xc=
Subject key identifier: AA:26:EB:BB:CB:B3:0E:A6:25:22:AE:9E:7E:C0:2C:4D:CE:99:6F:3F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584EDC924245257AA417B00D3AA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 400228
IP address blocks: 2001:470:2f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:42:45:25:7a:a4:17:b0:0d:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=42c592fb-6146-4ad5-8023-99d053a0420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:68:8e:1e:6d:81:99:e1:79:7c:5f:e6:d1:
d5:ef:96:2f:22:21:a7:4d:1a:6c:cb:d4:94:eb:7e:
e8:a7:c5:2c:5f:f3:57:ec:60:52:82:73:54:cb:76:
c0:ef:a3:db:37:17:7d:15:c5:36:b9:a7:f0:99:38:
ec:75:6c:ca:0d:c1:19:9d:a3:20:51:17:f2:7b:d4:
61:53:90:f4:89:37:2d:42:49:30:4e:3d:bb:1f:a9:
32:36:87:bb:1e:d3:b1:d5:55:10:fc:2b:c8:1a:dd:
95:e3:60:b4:88:92:73:64:bb:8f:b8:aa:c4:1d:71:
3d:1c:88:c1:46:e5:9b:5d:76:23:93:f8:e6:1d:7f:
eb:18:fd:40:fe:f1:55:22:b3:31:93:81:15:8c:04:
c4:8c:52:07:e4:b5:6b:9a:f7:ff:bf:45:05:1b:fc:
2f:2f:de:ff:63:68:81:b7:26:52:63:e1:ec:38:92:
a8:d2:09:09:c4:93:d2:bd:90:09:0f:b1:f5:7c:02:
46:f7:2f:6c:fd:d4:9f:8a:ab:e3:89:8a:71:09:73:
c3:0d:55:8d:ed:0a:df:d6:7d:a4:4b:57:78:d1:08:
e5:e1:f1:84:e3:16:de:84:1a:87:60:45:17:db:ee:
8e:f8:89:0d:72:9b:80:f1:80:33:c2:43:9d:1b:95:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:EB:BB:CB:B3:0E:A6:25:22:AE:9E:7E:C0:2C:4D:CE:99:6F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d36f8611-c8a6-332a-9a0a-5b39bfa167f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2f1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e4:0a:06:09:59:3d:92:d2:e2:57:84:64:47:25:b2:f1:82:
d7:fd:09:42:0a:44:c4:61:ad:35:65:54:18:f8:2a:18:32:ef:
6a:c4:ee:06:cc:41:43:30:21:88:53:ec:e6:5c:07:70:c6:8c:
39:8f:cd:4e:57:a8:91:90:d8:d1:ad:c5:9e:fa:5f:f3:21:f7:
2e:33:52:10:50:0d:19:39:34:17:7c:79:af:3a:1a:fb:52:53:
25:21:07:65:2a:12:18:8c:5e:2f:2a:48:42:b2:7c:31:d6:e8:
6d:8d:fa:00:a5:9c:96:0a:0d:1e:62:6a:7a:c6:f6:76:23:3e:
d7:8a:9c:1c:85:b7:ca:48:8c:48:f4:8c:4e:90:3b:39:6f:94:
18:21:b9:a8:d0:e9:1d:ba:f3:15:1a:0d:8a:74:19:d0:e0:da:
37:8f:16:28:04:47:52:1e:a6:ba:91:c8:eb:03:5e:8e:5c:76:
88:91:f9:75:20:00:a6:b3:e9:c8:a8:fb:42:4c:12:5d:03:2a:
e5:0b:34:50:a1:5f:43:b5:54:d2:44:c4:be:ee:86:ee:f3:4e:
99:08:ce:12:28:56:ba:82:60:45:fd:29:69:94:34:66:f0:58:
51:a4:93:99:8b:01:bd:89:3d:65:f6:22:fb:81:45:85:af:9c:
79:f2:a9:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckkJFJXqkF7ANOqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NDJjNTkyZmItNjE0Ni00YWQ1LTgwMjMtOTlkMDUzYTA0MjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUJojh5tgZnheXxf5tHV75YvIiGnTRpsy9SU
637op8UsX/NX7GBSgnNUy3bA76PbNxd9FcU2uafwmTjsdWzKDcEZnaMgURfye9Rh
U5D0iTctQkkwTj27H6kyNoe7HtOx1VUQ/CvIGt2V42C0iJJzZLuPuKrEHXE9HIjB
RuWbXXYjk/jmHX/rGP1A/vFVIrMxk4EVjATEjFIH5LVrmvf/v0UFG/wvL97/Y2iB
tyZSY+HsOJKo0gkJxJPSvZAJD7H1fAJG9y9s/dSfiqvjiYpxCXPDDVWN7Qrf1n2k
S1d40Qjl4fGE4xbehBqHYEUX2+6O+IkNcpuA8YAzwkOdG5V4jwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKom67vLsw6mJSKunn7ALE3OmW8/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDM2Zjg2MTEtYzhhNi0z
MzJhLTlhMGEtNWIzOWJmYTE2N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFnkCgYJWT2S0uJXhGRHJbLxgtf9CUIKRMRhrTVlVBj4Khgy72rE
7gbMQUMwIYhT7OZcB3DGjDmPzU5XqJGQ2NGtxZ76X/Mh9y4zUhBQDRk5NBd8ea86
GvtSUyUhB2UqEhiMXi8qSEKyfDHW6G2N+gClnJYKDR5ianrG9nYjPteKnByFt8pI
jEj0jE6QOzlvlBghuajQ6R268xUaDYp0GdDg2jePFigER1IeprqRyOsDXo5cdoiR
+XUgAKaz6cio+0JMEl0DKuULNFChX0O1VNJExL7uhu7zTpkIzhIoVrqCYEX9KWmU
NGbwWFGkk5mLAb2JPWX2IvuBRYWvnHnyqbM=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:54 2026 by rpki-client