
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
File: b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa (raw, json)
Hash identifier: gI1QRDzMatt4SCYObtismwDoVIZjoIq1xZbQnwSivow=
Subject key identifier: 0E:7F:82:1B:6A:1B:F1:C2:C8:32:BC:35:A2:93:23:C2:AC:23:4A:E7
Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial: 010D0C9F4328584F4975611D557322AFB61FC380
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 4185
IP address blocks: 2620:10f:b000::/48 maxlen: 48
2620:10f:b070::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:61:1d:55:73:22:af:b6:1f:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a2db21f6-1e81-49b8-bf9c-6e0b8a6b1c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:7e:98:63:ca:04:df:a3:d4:9e:5e:ab:8d:
4b:0b:9a:14:9b:d0:3d:d7:ea:77:c2:00:2b:7b:12:
cb:28:1c:0a:15:c8:11:9c:9a:a8:2d:65:35:42:87:
2a:86:5c:76:77:ed:27:b8:01:2b:fa:55:f3:0a:90:
a4:db:75:ee:12:b1:9c:d0:55:ea:02:6c:ef:08:72:
6c:64:de:a4:ed:1c:c4:e3:be:ce:91:b6:cc:31:32:
ca:5f:ff:e2:13:17:da:1c:91:05:8c:b4:db:56:73:
17:56:dd:f0:72:46:9a:14:ea:d0:f5:4f:da:20:43:
7d:e1:a6:8e:9d:6d:73:60:62:21:eb:05:d8:9e:b6:
1a:a7:ea:8b:2c:7a:79:76:c5:54:5c:94:09:17:73:
ac:12:f3:fe:66:10:c7:2a:59:4d:5c:97:2d:8b:dc:
32:54:56:9e:5c:31:09:8a:01:f3:e9:d9:33:5b:6c:
20:23:6e:0b:2a:9d:d8:25:b4:66:7b:92:ab:bb:80:
ce:59:30:1c:88:a9:38:0c:1e:b3:73:fb:5c:12:7c:
51:14:ff:9e:80:e6:44:b4:e7:7f:06:0b:31:ee:df:
b2:e5:d5:ee:15:5f:6b:69:83:74:b8:e7:5a:12:84:
e6:c1:76:31:76:34:55:d5:e9:fb:e1:cf:3e:7b:5d:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7F:82:1B:6A:1B:F1:C2:C8:32:BC:35:A2:93:23:C2:AC:23:4A:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
X509v3 Authority Key Identifier:
keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:b000::/48
2620:10f:b070::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:2c:19:1e:30:e8:56:82:e8:fe:77:fa:14:d8:2f:12:49:9a:
bf:b8:ea:1b:d0:2d:6c:44:9e:61:43:fe:cd:09:c6:bb:37:5e:
19:01:2f:ca:12:f3:ad:06:26:73:48:45:3f:6e:17:30:a9:b2:
5b:0e:f0:96:55:ea:9e:02:6e:3c:13:ba:11:f8:eb:ac:76:4d:
11:a0:e8:7f:ea:9a:a9:69:09:f7:f0:11:74:b2:74:45:4d:51:
44:7c:6b:ff:04:40:a3:ca:33:d7:59:3b:c5:4f:af:77:2d:41:
04:4a:48:67:7f:36:77:40:d8:db:4b:f9:e8:30:bc:36:9e:11:
77:95:7c:d2:e7:51:7d:fa:68:8f:af:13:42:64:43:24:ee:e0:
5c:88:5d:25:29:c9:1e:57:b7:31:10:23:c0:68:e9:fd:5b:37:
4f:53:4f:cb:c9:21:18:d1:8c:28:75:c5:8c:39:17:e8:f4:81:
e9:8d:91:c0:b6:9e:d3:f9:f8:a2:e3:e3:b5:87:af:3b:11:f0:
98:eb:ff:d4:67:9e:5b:d1:3f:16:96:9f:a2:b6:3e:b8:8f:1b:
86:1c:55:85:f2:28:2f:59:8d:08:59:8e:0b:66:1e:92:82:0a:
50:e9:e2:72:d1:52:f0:ab:9f:ea:59:3d:92:76:b7:3f:0d:2b:
d5:cc:a5:71
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JdWEdVXMir7Yfw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz
ZjBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTJkYjIxZjYtMWU4MS00OWI4LWJmOWMtNmUwYjhhNmIxYzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ix+mGPKBN+j1J5eq41LC5oUm9A91+p3wgAr
exLLKBwKFcgRnJqoLWU1Qocqhlx2d+0nuAEr+lXzCpCk23XuErGc0FXqAmzvCHJs
ZN6k7RzE477OkbbMMTLKX//iExfaHJEFjLTbVnMXVt3wckaaFOrQ9U/aIEN94aaO
nW1zYGIh6wXYnrYap+qLLHp5dsVUXJQJF3OsEvP+ZhDHKllNXJcti9wyVFaeXDEJ
igHz6dkzW2wgI24LKp3YJbRme5Kru4DOWTAciKk4DB6zc/tcEnxRFP+egOZEtOd/
Bgsx7t+y5dXuFV9raYN0uOdaEoTmwXYxdjRV1en74c8+e10M9QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFA5/ghtqG/HCyDK8NaKTI8KsI0rnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw
NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvYjU4YzNlMTMtNGNjYy0z
Y2FiLWJkODAtZmMyNDEyN2Q5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm
M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1
M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz
MzQ0NTNmMGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJiABD7AA
AwcAJiABD7BwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGAsGR4w6FaC6P53+hTYLxJJmr+46hvQLWxEnmFD
/s0Jxrs3XhkBL8oS860GJnNIRT9uFzCpslsO8JZV6p4CbjwTuhH466x2TRGg6H/q
mqlpCffwEXSydEVNUUR8a/8EQKPKM9dZO8VPr3ctQQRKSGd/NndA2NtL+egwvDae
EXeVfNLnUX36aI+vE0JkQyTu4FyIXSUpyR5XtzEQI8Bo6f1bN09TT8vJIRjRjCh1
xYw5F+j0gemNkcC2ntP5+KLj47WHrzsR8Jjr/9RnnlvRPxaWn6K2PriPG4YcVYXy
KC9ZjQhZjgtmHpKCClDp4nLRUvCrn+pZPZJ2tz8NK9XMpXE=
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:01:07 2026 by rpki-client