
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a52313a-3bcc-336e-89e8-437e2520d8e0.roa
File: 5a52313a-3bcc-336e-89e8-437e2520d8e0.roa (raw, json)
Hash identifier: CVQOxUyyXOzUs03IA6jQzVu9pTcyPoHkm2x12ouYqno=
Subject key identifier: 75:1F:BC:78:26:36:30:30:AF:FA:9B:EE:E5:C9:65:09:FE:35:53:91
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F13022F9501A65F7F6EB5E500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a52313a-3bcc-336e-89e8-437e2520d8e0.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 31452
IP address blocks: 2001:470:5e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:2f:95:01:a6:5f:7f:6e:b5:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=ec562d9f-2e5b-411c-aabf-2162fe889897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:79:98:33:35:00:49:a0:be:a9:65:87:f1:
1f:ad:61:fe:c7:5a:6d:04:95:e1:97:36:34:77:23:
bd:bc:9b:66:87:47:a6:98:71:17:96:36:95:a0:e9:
51:61:a2:51:a3:6a:bc:20:17:9b:56:a7:a9:7e:8b:
b8:31:ba:35:7e:d4:86:4b:f0:65:6e:54:04:e3:80:
1d:08:29:c7:33:53:0b:44:34:bc:08:f8:f3:2e:3c:
79:10:98:89:aa:f5:f1:3c:ac:03:5d:32:e7:e9:fa:
c8:9d:13:f9:53:40:ad:40:79:bb:81:4e:4d:95:8a:
1d:69:32:e6:da:e5:2a:6f:ec:b6:1c:ee:71:4e:91:
7b:18:d1:7b:7f:36:a2:76:c5:2e:e9:27:2b:92:fa:
a8:20:8a:99:c5:d0:a8:8a:20:8a:1c:b0:26:e7:cb:
45:95:df:6e:87:f2:d0:9e:0f:1f:5e:aa:16:74:78:
42:9f:22:e6:34:d1:d2:8f:88:8e:90:f8:d1:55:94:
ec:f2:fd:55:13:b7:49:84:c7:72:54:36:68:4f:fc:
9d:ef:55:82:75:2b:3c:8f:33:63:80:5a:0c:d6:fd:
17:ce:bf:42:f4:bb:25:53:2d:47:34:bd:55:04:71:
fd:26:90:3d:ef:6e:66:fd:f9:39:b0:03:77:7d:1f:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:BC:78:26:36:30:30:AF:FA:9B:EE:E5:C9:65:09:FE:35:53:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a52313a-3bcc-336e-89e8-437e2520d8e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:5e1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:09:09:86:95:68:01:65:d6:e2:0f:d9:c3:b6:c6:51:42:d9:
02:2d:76:e6:df:e2:5c:7d:bb:40:d5:0a:a4:03:c3:04:43:16:
50:29:64:7d:e7:10:ad:96:97:9b:89:04:d5:83:d0:31:4b:b7:
ed:30:cd:64:c1:8e:95:06:23:36:3a:c5:10:9e:bb:46:5c:9a:
a2:2a:64:46:de:27:c0:dd:b1:b6:a3:e3:fa:05:f5:2d:3e:9d:
40:dc:19:02:ad:d4:2c:c6:c5:a0:01:8f:55:ce:a4:4d:dc:8d:
5d:68:b6:a9:7d:3d:45:71:76:83:7c:b4:7c:fc:63:20:2a:48:
8a:96:ae:60:c2:40:81:ab:cd:06:c2:5b:ce:e2:69:b5:ee:e5:
7a:42:20:42:ab:27:56:af:a4:d6:ae:a7:c4:97:38:3d:d4:01:
a6:0b:af:61:a3:6e:36:80:de:83:7e:bf:74:ce:c2:fc:ac:73:
a8:21:55:c5:92:64:8d:67:cc:99:80:e7:cb:20:03:8a:a3:5b:
f2:05:2b:24:53:94:24:90:ba:34:01:97:5f:d6:e9:9f:fb:9f:
86:aa:93:a5:11:48:f6:ad:ca:03:11:2c:0e:51:c9:21:91:c7:
5d:f5:d6:bc:62:55:3a:81:d6:4a:9a:69:e1:f4:63:52:bd:8a:
70:44:81:d6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAi+VAaZff2615QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZWM1NjJkOWYtMmU1Yi00MTFjLWFhYmYtMjE2MmZlODg5ODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcd5mDM1AEmgvqllh/EfrWH+x1ptBJXhlzY0
dyO9vJtmh0emmHEXljaVoOlRYaJRo2q8IBebVqepfou4Mbo1ftSGS/BlblQE44Ad
CCnHM1MLRDS8CPjzLjx5EJiJqvXxPKwDXTLn6frInRP5U0CtQHm7gU5NlYodaTLm
2uUqb+y2HO5xTpF7GNF7fzaidsUu6ScrkvqoIIqZxdCoiiCKHLAm58tFld9uh/LQ
ng8fXqoWdHhCnyLmNNHSj4iOkPjRVZTs8v1VE7dJhMdyVDZoT/yd71WCdSs8jzNj
gFoM1v0Xzr9C9LslUy1HNL1VBHH9JpA9725m/fk5sAN3fR9vUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHUfvHgmNjAwr/qb7uXJZQn+NVORMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWE1MjMxM2EtM2JjYy0z
MzZlLTg5ZTgtNDM3ZTI1MjBkOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAXh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABAJCYaVaAFl1uIP2cO2xlFC2QItdubf4lx9u0DVCqQDwwRDFlAp
ZH3nEK2Wl5uJBNWD0DFLt+0wzWTBjpUGIzY6xRCeu0ZcmqIqZEbeJ8Ddsbaj4/oF
9S0+nUDcGQKt1CzGxaABj1XOpE3cjV1otql9PUVxdoN8tHz8YyAqSIqWrmDCQIGr
zQbCW87iabXu5XpCIEKrJ1avpNaup8SXOD3UAaYLr2GjbjaA3oN+v3TOwvysc6gh
VcWSZI1nzJmA58sgA4qjW/IFKyRTlCSQujQBl1/W6Z/7n4aqk6URSPatygMRLA5R
ySGRx1311rxiVTqB1kqaaeH0Y1K9inBEgdY=
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:56:05 2026 by rpki-client