
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3c63619-0663-302b-a5d0-9538d77b81f1.roa
File: d3c63619-0663-302b-a5d0-9538d77b81f1.roa (raw, json)
Hash identifier: mz+qKfMDjOWCNlzc4GUeff4tzsO8iJHsddW8u4OX3Kk=
Subject key identifier: 9D:08:E1:E0:CE:2E:5D:2F:BB:6D:28:23:D4:59:DD:DA:24:ED:AD:17
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F00DCD224E35569EFBEFDE3B8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3c63619-0663-302b-a5d0-9538d77b81f1.roa
Signing time: Sun 30 Aug 2026 01:00:12 +0000
ROA not before: Sun 30 Aug 2026 01:00:12 +0000
ROA not after: Sat 28 Nov 2026 02:00:12 +0000
asID: 21488
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:00:dc:d2:24:e3:55:69:ef:be:fd:e3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 30 01:00:12 2026 GMT
Not After : Nov 28 02:00:12 2026 GMT
Subject: CN=5b52d1ca-388e-4535-968d-7e045281c358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:f1:2b:89:0f:29:c8:3a:b5:93:ef:81:4c:
14:58:57:f6:a0:d9:c3:02:dc:9b:da:87:e3:dd:f4:
b4:ee:d0:61:e6:74:fd:9a:81:ff:ee:70:2b:51:e5:
82:69:8c:52:16:91:c6:cb:a4:3f:95:85:84:67:07:
9b:2a:5c:ed:a6:c6:53:dc:bb:8e:f6:01:87:3f:9d:
35:17:51:0b:01:8d:65:95:24:74:7f:75:ea:a5:3e:
d2:25:89:52:6a:4a:4a:34:91:f4:9d:1a:16:4b:f4:
7d:a7:30:fc:18:13:21:f3:ea:60:02:f3:14:18:4f:
11:72:bd:a1:80:35:e7:3b:ab:ed:4f:fa:21:30:3b:
e0:c0:a9:ae:28:50:a0:ea:d6:17:1c:00:f3:05:de:
2c:b5:22:6e:39:99:27:ba:64:99:f9:33:42:3f:75:
bd:5a:40:67:44:c0:b8:7a:a5:e5:da:df:66:25:b1:
40:b1:25:a5:d6:b8:db:af:08:91:31:17:8e:02:01:
1e:0f:ce:91:8c:3f:80:4c:4a:44:2a:ce:48:b7:b0:
61:9e:b9:7e:f4:d1:f2:fe:de:96:3e:4b:17:05:cd:
e8:49:01:a3:05:a1:72:0e:75:3e:d4:08:8c:9d:75:
5b:7c:cc:15:28:27:08:54:8d:76:bf:b5:15:fd:3a:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:E1:E0:CE:2E:5D:2F:BB:6D:28:23:D4:59:DD:DA:24:ED:AD:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3c63619-0663-302b-a5d0-9538d77b81f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ff:ce:3c:79:17:97:c8:97:ed:a1:c4:63:c9:78:c8:89:41:
c1:c6:83:fe:f1:5d:85:df:a7:94:f3:8f:33:76:37:af:29:b9:
42:04:d0:d3:ee:2d:da:6a:b9:06:b1:89:58:25:54:a7:1c:1f:
f9:c4:05:d6:2d:2b:12:3a:cf:18:1c:04:41:ce:f0:91:f2:44:
f0:d3:2a:0f:f0:a4:6c:76:ec:07:e2:95:2a:13:4b:cf:2f:1a:
ba:6c:49:94:9f:4d:0e:f4:61:56:f9:9d:05:46:f7:a0:dc:3e:
ed:01:77:c6:cd:9a:98:6e:ba:aa:c1:14:7a:01:7d:65:b8:fd:
5b:26:4b:fb:52:ea:5a:86:c3:62:a9:1c:8c:16:d2:8a:7a:98:
20:66:71:a8:29:22:33:51:e3:94:9a:ef:84:e2:f2:4e:3d:5b:
87:bc:c4:c5:3b:46:5e:d6:a5:58:60:8c:4e:ba:d7:88:ac:48:
a5:dc:a8:8d:b9:d8:7f:27:aa:e6:37:20:c8:17:fd:e6:df:18:
1d:3c:af:da:da:47:56:62:2a:bf:06:18:9c:72:38:61:55:34:
fa:79:b6:12:28:cc:ac:10:2c:d0:22:db:3c:ca:5c:c6:b7:c0:
b1:58:ff:82:37:98:c2:06:9b:9d:33:06:bd:62:a4:ee:8d:f1:
3b:90:6e:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8A3NIk41Vp777947gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
NWI1MmQxY2EtMzg4ZS00NTM1LTk2OGQtN2UwNDUyODFjMzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgDxK4kPKcg6tZPvgUwUWFf2oNnDAtyb2ofj
3fS07tBh5nT9moH/7nArUeWCaYxSFpHGy6Q/lYWEZwebKlztpsZT3LuO9gGHP501
F1ELAY1llSR0f3XqpT7SJYlSakpKNJH0nRoWS/R9pzD8GBMh8+pgAvMUGE8Rcr2h
gDXnO6vtT/ohMDvgwKmuKFCg6tYXHADzBd4stSJuOZknumSZ+TNCP3W9WkBnRMC4
eqXl2t9mJbFAsSWl1rjbrwiRMReOAgEeD86RjD+ATEpEKs5It7Bhnrl+9NHy/t6W
PksXBc3oSQGjBaFyDnU+1AiMnXVbfMwVKCcIVI12v7UV/TrRNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ0I4eDOLl0vu20oI9RZ3dok7a0XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDNjNjM2MTktMDY2My0z
MDJiLWE1ZDAtOTUzOGQ3N2I4MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFz/zjx5F5fIl+2hxGPJeMiJQcHGg/7xXYXfp5TzjzN2N68puUIE
0NPuLdpquQaxiVglVKccH/nEBdYtKxI6zxgcBEHO8JHyRPDTKg/wpGx27AfilSoT
S88vGrpsSZSfTQ70YVb5nQVG96DcPu0Bd8bNmphuuqrBFHoBfWW4/VsmS/tS6lqG
w2KpHIwW0op6mCBmcagpIjNR45Sa74Ti8k49W4e8xMU7Rl7WpVhgjE6614isSKXc
qI252H8nquY3IMgX/ebfGB08r9raR1ZiKr8GGJxyOGFVNPp5thIozKwQLNAi2zzK
XMa3wLFY/4I3mMIGm50zBr1ipO6N8TuQbk8=
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:48:58 2026 by rpki-client