
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa
File: 5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa (raw, json)
Hash identifier: CdvVORro9BumIPN2xMN/RITl4/O/m8+SdMmiXk4/Hms=
Subject key identifier: 43:4E:2B:C2:5D:F5:B9:E5:C9:DA:4B:1E:61:C0:F3:B3:E3:5D:8B:58
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EA899D94387113B138D300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 20318
IP address blocks: 2001:470:168::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:89:9d:94:38:71:13:b1:38:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=af8b5772-3f47-4305-9d50-d4ee8191175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:d9:25:a0:54:cc:ab:ce:ae:01:be:f1:38:
f1:16:1f:f4:6b:81:87:f7:9a:26:da:11:57:9e:9e:
fc:e4:42:10:f6:1c:08:da:cc:87:60:e9:e8:d9:f8:
cf:fa:ec:68:f4:29:45:3e:b8:67:86:31:0c:ec:1f:
75:38:06:3c:fd:56:2d:7e:ec:c9:76:23:08:62:e7:
16:30:a6:ab:17:f7:2a:7a:5f:a5:1f:ea:ff:57:d1:
9a:97:73:fa:e7:41:b7:31:2f:82:db:3a:30:16:47:
8c:96:80:3d:d1:a7:80:a2:2b:d2:0c:ac:80:99:06:
8a:87:4c:c6:29:a6:b7:9f:61:e2:eb:cb:c1:a3:4c:
9e:db:aa:35:7e:74:d9:32:18:76:61:e9:a5:7d:e2:
19:c9:93:5d:c2:b8:44:48:eb:a9:5c:56:63:63:17:
df:91:4f:59:e8:cb:0a:ad:b8:c5:16:2c:7f:24:4c:
22:3a:a6:b4:d1:dd:11:36:d8:b9:da:ac:c0:57:57:
e0:4e:ac:cd:2d:91:30:f9:a1:6c:ee:2b:ae:b5:a2:
e2:98:97:4d:df:ef:66:9d:48:d4:e6:56:8f:de:c9:
6f:53:44:4a:d1:75:ae:17:f5:51:59:9e:c3:ea:a3:
da:dd:a2:9a:b8:3a:e3:3e:23:54:79:6d:ca:da:0b:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:2B:C2:5D:F5:B9:E5:C9:DA:4B:1E:61:C0:F3:B3:E3:5D:8B:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5bd12cb1-5a18-398c-88d3-05a2e9a19f8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:168::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:40:f1:75:41:67:5d:77:6a:89:6a:51:10:2f:3b:17:a6:d3:
5e:e9:6f:1d:ed:83:28:88:f1:6a:dd:da:fb:25:1a:d8:fe:48:
98:f6:b5:20:c0:78:f9:68:58:56:6d:f3:e3:f6:38:4f:b8:7f:
5b:41:40:7f:7e:29:3c:1f:01:2a:b5:20:af:65:f8:22:af:62:
79:c4:a7:08:bb:27:ec:06:4a:65:15:13:df:23:cc:f5:e9:56:
d1:53:d1:39:66:5d:cf:65:5c:0a:3e:76:b2:1e:49:37:46:7b:
84:1c:91:bc:4e:b5:c4:a1:d0:13:00:5e:ab:73:2f:c4:d0:31:
37:9d:47:c7:0d:94:ab:76:a5:fd:82:1b:4c:ac:03:24:f2:e4:
7e:6d:d3:a7:8e:cb:67:68:b4:3b:13:a5:7d:e9:4f:0b:1c:b9:
ec:50:a9:ac:78:70:d3:31:91:b7:66:29:cd:f7:91:5c:75:0f:
b7:be:95:03:64:a3:e8:7b:15:b4:7b:bb:11:06:ba:0b:61:81:
7f:eb:d2:98:eb:dc:f3:96:8d:d2:ff:cb:0d:9c:2b:db:28:9a:
9b:73:8c:67:70:d1:86:8d:88:0e:31:48:32:7c:c0:35:8c:ef:
f7:16:b1:42:15:7f:e3:b7:2f:9a:22:11:5b:6f:85:32:1e:99:
08:0f:4b:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6omdlDhxE7E40wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
YWY4YjU3NzItM2Y0Ny00MzA1LTlkNTAtZDRlZTgxOTExNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhLZJaBUzKvOrgG+8TjxFh/0a4GH95om2hFX
np785EIQ9hwI2syHYOno2fjP+uxo9ClFPrhnhjEM7B91OAY8/VYtfuzJdiMIYucW
MKarF/cqel+lH+r/V9Gal3P650G3MS+C2zowFkeMloA90aeAoivSDKyAmQaKh0zG
Kaa3n2Hi68vBo0ye26o1fnTZMhh2YemlfeIZyZNdwrhESOupXFZjYxffkU9Z6MsK
rbjFFix/JEwiOqa00d0RNti52qzAV1fgTqzNLZEw+aFs7iuutaLimJdN3+9mnUjU
5laP3slvU0RK0XWuF/VRWZ7D6qPa3aKauDrjPiNUeW3K2gu46QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFENOK8Jd9bnlydpLHmHA87PjXYtYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWJkMTJjYjEtNWExOC0z
OThjLTg4ZDMtMDVhMmU5YTE5ZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF1A8XVBZ113aolqURAvOxem017pbx3tgyiI8Wrd2vslGtj+SJj2
tSDAePloWFZt8+P2OE+4f1tBQH9+KTwfASq1IK9l+CKvYnnEpwi7J+wGSmUVE98j
zPXpVtFT0TlmXc9lXAo+drIeSTdGe4QckbxOtcSh0BMAXqtzL8TQMTedR8cNlKt2
pf2CG0ysAyTy5H5t06eOy2dotDsTpX3pTwscuexQqax4cNMxkbdmKc33kVx1D7e+
lQNko+h7FbR7uxEGugthgX/r0pjr3POWjdL/yw2cK9somptzjGdw0YaNiA4xSDJ8
wDWM7/cWsUIVf+O3L5oiEVtvhTIemQgPS9I=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:37 2026 by rpki-client