
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa
File: 02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa (raw, json)
Hash identifier: uPg4mfnE7SzYUtJ9K/O5pNlyYNtVehqGQDmf/LO4dts=
Subject key identifier: B8:FB:84:99:42:DF:6C:AC:31:50:CD:78:F2:4A:F2:F9:F1:80:C7:23
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D91BFFDF047191527DDE86640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 206186
IP address blocks: 2001:470:427::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:bf:fd:f0:47:19:15:27:dd:e8:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=197a9aa1-42c2-43eb-8690-8e05d309c1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:90:3e:24:bb:9f:3c:a9:b7:55:27:28:04:
2e:58:2c:ab:fe:90:6b:2a:1d:48:6d:d9:60:a4:2c:
93:0e:65:a3:e0:d0:ce:a6:6f:15:4e:3b:e5:1f:5c:
eb:80:eb:a7:14:1f:18:ee:38:ea:3b:56:00:66:ae:
71:82:6e:b5:c1:c9:32:6b:a4:b8:d2:a2:2b:fe:ab:
b9:f5:47:d2:83:55:14:17:93:9f:c7:55:de:cb:36:
ee:6a:59:32:8a:74:16:9a:1b:ab:40:f2:29:3b:12:
c1:3d:7e:f4:dd:21:3e:e7:c6:1b:54:70:08:8e:3e:
62:13:22:f0:95:ef:e7:c6:c3:aa:90:96:93:a3:75:
22:7b:a0:4f:4f:df:cc:77:81:a3:90:e9:85:f2:6b:
b0:67:12:2b:9c:c0:f2:67:d8:66:8f:92:74:85:9a:
33:d3:12:f8:0a:d6:84:f8:65:7b:45:fb:87:81:e6:
3d:0e:3a:b1:51:ee:5d:6d:0a:62:5d:38:f5:3f:ea:
b8:ff:7d:c5:34:3e:c2:60:45:8c:c5:82:cf:e4:6b:
46:0f:eb:4f:c1:aa:ef:8f:a6:75:7a:1c:e7:3f:fd:
3d:96:f4:c5:ef:b4:8b:cf:69:55:0d:26:68:2f:73:
69:d7:1e:2b:31:2d:38:43:6f:fe:de:09:26:42:69:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:84:99:42:DF:6C:AC:31:50:CD:78:F2:4A:F2:F9:F1:80:C7:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:427::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f3:81:aa:d1:f0:74:a3:d2:a8:09:37:59:84:2e:d2:8e:51:
b8:91:25:61:f4:e1:5b:94:a4:31:cd:39:aa:41:b5:0c:7c:36:
a7:d5:9c:c5:16:4c:90:21:25:3f:c2:c7:60:ed:d8:33:27:4b:
51:26:d1:ea:c5:52:d8:00:c9:7f:17:22:24:1b:78:e4:34:64:
9f:a1:e7:f3:9e:4c:63:d6:a1:36:d3:c0:69:c1:1f:71:d1:91:
c2:7d:30:08:03:6f:58:77:64:64:7d:2e:f9:52:64:c5:6e:8f:
23:71:7e:40:39:53:71:bc:98:30:a5:dd:6a:d4:bf:5f:27:32:
c2:90:21:d1:f1:96:08:43:e4:80:d6:97:c3:75:66:5d:ef:43:
bf:42:bc:83:95:fb:84:e3:41:99:53:a9:df:c0:e7:5a:00:53:
72:f3:34:c3:51:7d:7b:c1:b7:f5:e4:d4:80:d5:07:a0:42:36:
0b:30:b4:5c:52:79:61:7c:1a:68:74:12:89:f9:d0:94:c4:79:
9d:44:41:28:0f:8f:81:4a:26:de:a7:62:91:4b:d0:53:aa:6d:
89:08:9b:76:fc:e3:be:a1:6c:d4:b1:71:17:19:e8:a1:47:fe:
48:05:f0:76:c2:89:23:22:a9:67:9a:05:8b:f2:9d:d4:61:31:
74:5e:72:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/3wRxkVJ93oZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
MTk3YTlhYTEtNDJjMi00M2ViLTg2OTAtOGUwNWQzMDljMWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkuQPiS7nzypt1UnKAQuWCyr/pBrKh1Ibdlg
pCyTDmWj4NDOpm8VTjvlH1zrgOunFB8Y7jjqO1YAZq5xgm61wckya6S40qIr/qu5
9UfSg1UUF5Ofx1XeyzbualkyinQWmhurQPIpOxLBPX703SE+58YbVHAIjj5iEyLw
le/nxsOqkJaTo3Uie6BPT9/Md4GjkOmF8muwZxIrnMDyZ9hmj5J0hZoz0xL4CtaE
+GV7RfuHgeY9DjqxUe5dbQpiXTj1P+q4/33FND7CYEWMxYLP5GtGD+tPwarvj6Z1
ehznP/09lvTF77SLz2lVDSZoL3Np1x4rMS04Q2/+3gkmQml0iwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLj7hJlC32ysMVDNePJK8vnxgMcjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDJmYTU2MGYtYTJlZC0z
YjZmLWE1YTctNjdkOGI4ZTVjMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJzzgarR8HSj0qgJN1mELtKOUbiRJWH04VuUpDHNOapBtQx8NqfV
nMUWTJAhJT/Cx2Dt2DMnS1Em0erFUtgAyX8XIiQbeOQ0ZJ+h5/OeTGPWoTbTwGnB
H3HRkcJ9MAgDb1h3ZGR9LvlSZMVujyNxfkA5U3G8mDCl3WrUv18nMsKQIdHxlghD
5IDWl8N1Zl3vQ79CvIOV+4TjQZlTqd/A51oAU3LzNMNRfXvBt/Xk1IDVB6BCNgsw
tFxSeWF8Gmh0Eon50JTEeZ1EQSgPj4FKJt6nYpFL0FOqbYkIm3b8476hbNSxcRcZ
6KFH/kgF8HbCiSMiqWeaBYvyndRhMXReci4=
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:34 2026 by rpki-client