
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/b65b0236-6a52-3153-bfa5-a447c74c7db5.roa
File: b65b0236-6a52-3153-bfa5-a447c74c7db5.roa (raw, json)
Hash identifier: dBqokSn/qZe92Yxu6OTe5vFCiFil050Sd3RBleb1kVo=
Subject key identifier: 42:2F:05:50:C1:34:54:B9:A1:89:7C:C4:9D:B6:0A:1B:DC:3A:57:B3
Certificate issuer: /CN=c8735afd-0489-4381-a272-01f568cf031c
Certificate serial: 010D0C9F4328584D9A201A8C382B6FC73AF6DC00
Authority key identifier: 1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/b65b0236-6a52-3153-bfa5-a447c74c7db5.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 36786
IP address blocks: 2620:0:1af0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:1a:8c:38:2b:6f:c7:3a:f6:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8735afd-0489-4381-a272-01f568cf031c
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=a1a02239-fc68-4b8c-9f53-63c2a9281358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:09:a6:cd:37:1f:e9:be:42:96:57:96:75:
b3:72:39:99:6e:9c:2c:32:f8:ab:d6:a4:6d:51:34:
a3:b3:0f:a9:fe:fa:ac:24:56:06:8f:82:5a:12:4b:
99:3e:49:99:39:fd:b4:dd:ce:a9:19:04:5a:2e:fc:
0b:8e:77:d2:63:fa:a2:8d:7e:86:10:a8:08:f6:8a:
7d:19:c4:ae:92:77:2b:8e:2b:24:43:5f:7b:a4:5f:
40:7a:04:93:3d:4d:c0:37:8b:f9:e2:4f:e7:dd:9d:
a4:95:b4:b9:8d:27:f1:47:de:93:06:73:2c:40:c9:
b3:8e:24:d7:7a:7c:0d:ca:76:7d:c8:96:c8:d9:53:
54:f7:4c:18:09:a9:77:26:cd:f2:b9:e2:29:61:e6:
12:e3:aa:a5:94:42:f7:6a:b2:98:f3:f1:2b:a5:fc:
ba:5d:39:59:90:94:19:f7:be:e9:23:72:e1:7a:3a:
e8:10:45:13:d1:3d:96:2a:21:6e:8e:8c:0b:9b:25:
73:fe:ba:45:a3:5c:d3:8e:27:29:10:78:a2:c2:23:
9e:e6:eb:a2:c8:28:4e:77:79:95:64:1c:fa:df:00:
27:3b:56:5c:5d:82:9f:17:62:e4:ee:2a:b2:87:f9:
67:fe:21:0f:d4:8e:b7:db:4d:dd:6b:a8:22:a5:7f:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:05:50:C1:34:54:B9:A1:89:7C:C4:9D:B6:0A:1B:DC:3A:57:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/b65b0236-6a52-3153-bfa5-a447c74c7db5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.crl
X509v3 Authority Key Identifier:
keyid:1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:1af0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:80:a4:50:6b:3f:54:50:89:3e:c3:b8:e0:f0:eb:13:6d:6c:
04:dc:6b:fc:c2:5d:31:42:89:9c:40:ce:60:f4:17:fa:6f:31:
a8:f8:de:a6:00:49:e7:12:79:97:98:5a:ce:87:26:43:0d:fb:
6f:c5:98:0c:bf:55:a1:05:ac:b3:82:1b:6d:c5:68:e3:5b:20:
a0:99:b7:71:9e:f3:6b:57:d5:04:ba:62:01:1e:7a:38:9f:97:
66:d2:a3:85:51:1f:e4:94:c3:fc:dc:e7:f6:14:f5:0f:0e:4d:
84:6c:7f:ef:f5:f9:6a:1b:c4:28:86:f2:ba:2e:7f:6b:ff:78:
0a:b4:8c:19:9f:2e:30:4d:43:97:e3:d8:9d:1b:f5:6b:70:79:
dd:a7:fe:06:c0:14:77:1d:fc:68:e8:ce:b3:55:69:f8:21:d2:
2b:9c:29:3c:8f:a0:b1:9f:27:77:dc:0a:84:52:74:17:7d:93:
6b:d8:43:96:7e:a1:3d:db:d5:a7:d5:57:96:84:b2:21:78:5d:
e3:45:10:37:b1:ef:df:1a:50:b9:14:3a:b3:05:83:95:95:ec:
61:59:93:6a:dd:8c:0a:b4:49:65:a1:79:ee:1c:96:25:b6:14:
32:59:fb:16:79:09:27:9c:ed:ec:c2:9f:8d:e0:37:53:8e:33:
37:1d:6e:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aIBqMOCtvxzr23AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg3MzVhZmQtMDQ4OS00MzgxLWEyNzItMDFmNTY4Y2Yw
MzFjMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
YTFhMDIyMzktZmM2OC00YjhjLTlmNTMtNjNjMmE5MjgxMzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwkJps03H+m+QpZXlnWzcjmZbpwsMvir1qRt
UTSjsw+p/vqsJFYGj4JaEkuZPkmZOf203c6pGQRaLvwLjnfSY/qijX6GEKgI9op9
GcSukncrjiskQ197pF9AegSTPU3AN4v54k/n3Z2klbS5jSfxR96TBnMsQMmzjiTX
enwNynZ9yJbI2VNU90wYCal3Js3yueIpYeYS46qllEL3arKY8/Erpfy6XTlZkJQZ
977pI3LhejroEEUT0T2WKiFujowLmyVz/rpFo1zTjicpEHiiwiOe5uuiyChOd3mV
ZBz63wAnO1ZcXYKfF2Lk7iqyh/ln/iEP1I63203da6gipX8zTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEIvBVDBNFS5oYl8xJ22ChvcOlezMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODcz
NWFmZC0wNDg5LTQzODEtYTI3Mi0wMWY1NjhjZjAzMWMvYjY1YjAyMzYtNmE1Mi0z
MTUzLWJmYTUtYTQ0N2M3NGM3ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg3MzVhZmQtMDQ4OS00MzgxLWEy
NzItMDFmNTY4Y2YwMzFjL2M4NzM1YWZkLTA0ODktNDM4MS1hMjcyLTAxZjU2OGNm
MDMxYy5jcmwwHwYDVR0jBBgwFoAUH1wWDbBiNrpckwK/4Ms0/UTSl3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jODczNWFmZC0wNDg5LTQzODEtYTI3Mi0wMWY1
NjhjZjAzMWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAABrw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACyApFBrP1RQiT7DuODw6xNtbATca/zCXTFCiZxAzmD0F/pvMaj4
3qYASecSeZeYWs6HJkMN+2/FmAy/VaEFrLOCG23FaONbIKCZt3Ge82tX1QS6YgEe
ejifl2bSo4VRH+SUw/zc5/YU9Q8OTYRsf+/1+WobxCiG8rouf2v/eAq0jBmfLjBN
Q5fj2J0b9Wtwed2n/gbAFHcd/GjozrNVafgh0iucKTyPoLGfJ3fcCoRSdBd9k2vY
Q5Z+oT3b1afVV5aEsiF4XeNFEDex798aULkUOrMFg5WV7GFZk2rdjAq0SWWhee4c
liW2FDJZ+xZ5CSec7ezCn43gN1OOMzcdbqE=
-----END CERTIFICATE-----
Generated at Wed May 13 15:25:26 2026 by rpki-client