
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/520e4953-007e-380b-bca8-88866d4faf25.roa
File: 520e4953-007e-380b-bca8-88866d4faf25.roa (raw, json)
Hash identifier: UVCCH7VUOJA93Y37aQ5FzvKgkEAgSdznmqQQS4IAf3M=
Subject key identifier: 21:C7:67:A3:E5:D9:DA:CF:F8:46:91:60:A1:4E:71:AB:39:E4:13:9C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D98BAADFDD609FCD4F0619900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/520e4953-007e-380b-bca8-88866d4faf25.roa
Signing time: Thu 23 Apr 2026 01:00:24 +0000
ROA not before: Thu 23 Apr 2026 01:00:24 +0000
ROA not after: Wed 22 Jul 2026 01:00:24 +0000
asID: 6939
IP address blocks: 65.49.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:98:ba:ad:fd:d6:09:fc:d4:f0:61:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 23 01:00:24 2026 GMT
Not After : Jul 22 01:00:24 2026 GMT
Subject: CN=ccee569a-eedb-42fb-af6b-597336ae732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:23:00:ca:db:14:29:5f:b3:ce:f6:03:bf:
7b:58:1c:bd:8e:0b:23:42:3c:d6:2d:ec:a7:92:8b:
4f:03:05:9e:74:1b:2d:d9:bf:5b:2c:e7:b7:5b:50:
f3:40:28:82:de:d4:9e:fb:cc:a2:25:b8:1c:e4:a6:
9b:4d:4f:5b:da:27:bb:c3:15:eb:32:7b:60:55:12:
9b:63:b6:df:8e:2a:83:38:14:65:42:cd:d6:07:3e:
b8:3f:9a:e9:5e:56:02:90:62:a9:19:ff:97:47:af:
65:4d:e3:76:a1:a0:53:6f:79:6a:8d:fd:23:72:1b:
f3:83:ef:1d:fd:ec:e1:84:43:9f:7d:2a:20:0e:6b:
a6:5d:9a:e1:d2:f8:f7:cb:bf:a0:46:18:e5:92:f5:
65:4b:62:46:63:0e:54:2d:63:28:d3:f1:75:d1:ce:
ae:26:45:3a:cb:83:47:fa:06:a5:1b:85:2c:36:87:
88:51:cb:15:de:8d:74:75:80:a0:b5:9c:f6:b0:9c:
1b:0f:55:6d:5d:d5:90:fc:4a:c3:06:8e:cc:59:22:
00:b4:d6:8e:c7:ad:fa:3f:f3:a5:26:9b:33:4d:ba:
2a:7f:30:bf:00:d9:d6:3c:3f:3a:4b:d2:bc:a4:41:
b7:9f:b0:d7:a3:75:4a:37:a6:db:56:4a:7e:cf:c8:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:67:A3:E5:D9:DA:CF:F8:46:91:60:A1:4E:71:AB:39:E4:13:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/520e4953-007e-380b-bca8-88866d4faf25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:3a:d3:a6:f5:9e:52:6b:3e:3c:2f:ab:6f:c1:43:a4:a0:83:
47:32:9a:a3:21:e2:a0:ba:d5:ce:1c:35:a7:a6:97:78:ac:3e:
36:c6:67:ea:7b:62:c8:19:a5:fa:d7:54:79:11:35:6f:33:03:
17:51:88:ba:81:da:6e:d7:6f:47:7b:0c:83:f9:4e:7f:a0:74:
f9:45:a8:26:0a:06:e7:6a:d4:2b:2b:ae:16:38:11:01:cb:5e:
5c:bc:0e:8f:0f:4a:93:44:9e:3b:0d:08:1e:c1:13:e6:52:46:
01:e3:68:b4:20:3e:1e:e4:52:0a:88:c4:ce:23:68:fd:93:2d:
55:49:ef:4b:d7:0a:34:11:ec:b2:f0:c7:43:ea:9d:16:95:95:
e0:2d:39:56:25:b9:80:d3:2d:c3:e2:d8:c2:d2:3f:95:30:c8:
88:f7:11:c6:ee:99:ef:a9:21:ca:dc:c7:f5:b3:5e:74:fa:39:
f2:e2:ad:e7:32:24:25:cf:00:61:10:23:56:6e:74:96:6e:ae:
e5:ac:a3:c0:36:dd:82:31:d6:e3:7e:58:5e:d4:83:87:92:5d:
e9:7a:73:2f:19:50:21:71:9c:80:74:71:45:14:06:73:9f:15:
10:b0:41:da:32:9a:27:67:25:18:c5:d0:7d:ed:5f:7d:84:92:
2c:49:1d:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yuq391gn81PBhmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk
Y2NlZTU2OWEtZWVkYi00MmZiLWFmNmItNTk3MzM2YWU3MzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHojAMrbFClfs872A797WBy9jgsjQjzWLeyn
kotPAwWedBst2b9bLOe3W1DzQCiC3tSe+8yiJbgc5KabTU9b2ie7wxXrMntgVRKb
Y7bfjiqDOBRlQs3WBz64P5rpXlYCkGKpGf+XR69lTeN2oaBTb3lqjf0jchvzg+8d
/ezhhEOffSogDmumXZrh0vj3y7+gRhjlkvVlS2JGYw5ULWMo0/F10c6uJkU6y4NH
+galG4UsNoeIUcsV3o10dYCgtZz2sJwbD1VtXdWQ/ErDBo7MWSIAtNaOx636P/Ol
JpszTboqfzC/ANnWPD86S9K8pEG3n7DXo3VKN6bbVkp+z8grwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHHZ6Pl2drP+EaRYKFOcas55BOcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTIwZTQ5NTMtMDA3ZS0z
ODBiLWJjYTgtODg4NjZkNGZhZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQTEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4606b1nlJrPjwvq2/BQ6Sgg0cymqMh4qC61c4cNaeml3isPjbGZ+p7
YsgZpfrXVHkRNW8zAxdRiLqB2m7Xb0d7DIP5Tn+gdPlFqCYKBudq1CsrrhY4EQHL
Xly8Do8PSpNEnjsNCB7BE+ZSRgHjaLQgPh7kUgqIxM4jaP2TLVVJ70vXCjQR7LLw
x0PqnRaVleAtOVYluYDTLcPi2MLSP5UwyIj3Ecbume+pIcrcx/WzXnT6OfLirecy
JCXPAGEQI1ZudJZuruWso8A23YIx1uN+WF7Ug4eSXel6cy8ZUCFxnIB0cUUUBnOf
FRCwQdoymidnJRjF0H3tX32EkixJHT4=
-----END CERTIFICATE-----
Generated at Wed May 13 11:15:48 2026 by rpki-client