
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f491cc0c-6406-3d62-91f5-9ba427432eb7.roa
File: f491cc0c-6406-3d62-91f5-9ba427432eb7.roa (raw, json)
Hash identifier: OxmTHXxjD7kneKGabqwIJ713uhZOjm5cb6VXjwAf3VA=
Subject key identifier: 79:41:E4:53:7B:68:3D:67:77:C8:EE:59:47:21:06:46:9F:30:56:D9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EA853603FB5B1762F72400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f491cc0c-6406-3d62-91f5-9ba427432eb7.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 7500
IP address blocks: 2001:470:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Apr 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:85:36:03:fb:5b:17:62:f7:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=c41ad29d-2fad-4721-b40c-f80e8c8531ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:08:7b:2b:ec:cc:e5:b4:1d:cf:d1:a8:cf:43:
4f:cf:48:6a:a4:72:ab:b3:07:2c:a5:b1:ac:1d:d7:
c1:f4:35:4b:90:28:25:5f:2c:a6:54:1b:a3:db:dd:
74:93:71:0a:78:05:e4:ab:26:bb:79:cd:fa:47:e6:
86:72:c3:4f:45:18:e6:90:01:9b:90:8b:79:b5:54:
8b:2b:3b:31:f4:dc:c4:b5:a2:df:16:46:e4:d4:7d:
07:38:35:88:f2:d8:9a:4c:88:db:7b:65:cb:42:6e:
64:07:02:98:19:d9:85:2c:1c:6d:7c:cf:b5:00:10:
f5:83:aa:12:10:f5:c7:a0:42:9f:d3:28:d4:25:29:
4e:e6:47:b4:14:ea:9d:f2:67:93:9c:11:a9:3c:16:
34:4b:da:06:0b:61:cb:16:3c:af:df:7f:93:23:ca:
11:b7:ed:b9:48:b5:b5:07:f7:3a:9a:ec:fe:93:6b:
4e:69:73:3c:e1:c9:c3:20:23:77:71:49:fe:cf:00:
ef:aa:8a:f6:1e:ce:92:a3:d0:25:f2:cd:e6:3d:03:
c8:c0:81:31:1d:d5:6e:75:f6:e7:8e:29:88:1d:2c:
0c:f2:8a:e9:b8:7a:6f:62:6a:bf:cc:5f:ed:62:dd:
e0:ef:f3:0c:b3:84:53:63:d4:41:b0:8b:e9:2e:36:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:E4:53:7B:68:3D:67:77:C8:EE:59:47:21:06:46:9F:30:56:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f491cc0c-6406-3d62-91f5-9ba427432eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:123::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:eb:76:f3:7e:00:99:a5:d3:8c:6e:b6:b1:5a:58:1d:32:a6:
42:d2:11:c9:9d:d6:b7:3c:b0:0b:7b:db:05:d3:85:6c:8f:e5:
92:d6:74:e9:0d:73:3d:d7:45:38:59:83:14:1e:18:42:1e:1c:
b5:ff:6e:da:e0:2b:ca:e9:1d:6e:46:f5:9a:b0:47:ce:36:e2:
94:25:e0:62:99:c4:55:1e:73:6b:f2:01:99:66:24:27:3c:a2:
f8:2f:28:05:85:a3:f0:ed:61:55:46:5e:3e:cf:74:b2:cd:b9:
73:41:5d:cf:27:53:0b:58:63:34:7d:20:c0:c9:36:69:ba:f0:
ee:da:4a:23:01:c3:6e:e5:53:7d:82:5d:40:cf:b5:0e:0a:4e:
4b:81:b5:0e:7c:9e:41:07:1c:fd:d0:11:65:f0:ac:56:58:d9:
4c:f0:2c:3d:41:b4:68:4a:28:37:ad:44:d3:d1:a7:00:6b:90:
a3:cd:83:21:07:2e:c0:f6:11:97:00:9f:2c:67:89:26:0f:68:
4a:e3:16:38:54:c7:a2:05:a3:ce:35:f7:a3:f8:4f:d8:0f:ab:
0f:d8:c9:96:43:0c:e8:df:ad:03:5a:94:24:4b:bb:b1:7d:76:
39:ef:c2:74:e0:5b:ab:64:09:f7:e5:f4:cb:04:db:3e:5d:e1:
f3:7e:30:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6oU2A/tbF2L3JAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
YzQxYWQyOWQtMmZhZC00NzIxLWI0MGMtZjgwZThjODUzMWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQh7K+zM5bQdz9Goz0NPz0hqpHKrswcspbGs
HdfB9DVLkCglXyymVBuj2910k3EKeAXkqya7ec36R+aGcsNPRRjmkAGbkIt5tVSL
Kzsx9NzEtaLfFkbk1H0HODWI8tiaTIjbe2XLQm5kBwKYGdmFLBxtfM+1ABD1g6oS
EPXHoEKf0yjUJSlO5ke0FOqd8meTnBGpPBY0S9oGC2HLFjyv33+TI8oRt+25SLW1
B/c6muz+k2tOaXM84cnDICN3cUn+zwDvqor2Hs6So9Al8s3mPQPIwIExHdVudfbn
jimIHSwM8orpuHpvYmq/zF/tYt3g7/MMs4RTY9RBsIvpLjb7ZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHlB5FN7aD1nd8juWUchBkafMFbZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjQ5MWNjMGMtNjQwNi0z
ZDYyLTkxZjUtOWJhNDI3NDMyZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD3rdvN+AJml04xutrFaWB0ypkLSEcmd1rc8sAt72wXThWyP5ZLW
dOkNcz3XRThZgxQeGEIeHLX/btrgK8rpHW5G9ZqwR8424pQl4GKZxFUec2vyAZlm
JCc8ovgvKAWFo/DtYVVGXj7PdLLNuXNBXc8nUwtYYzR9IMDJNmm68O7aSiMBw27l
U32CXUDPtQ4KTkuBtQ58nkEHHP3QEWXwrFZY2UzwLD1BtGhKKDetRNPRpwBrkKPN
gyEHLsD2EZcAnyxniSYPaErjFjhUx6IFo84196P4T9gPqw/YyZZDDOjfrQNalCRL
u7F9djnvwnTgW6tkCffl9MsE2z5d4fN+ME0=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:46:19 2026 by rpki-client