
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9233b721-c5c6-3ffc-9840-1bff13d1a5c4.roa
File: 9233b721-c5c6-3ffc-9840-1bff13d1a5c4.roa (raw, json)
Hash identifier: JAqnjKa+SoD6PuWrK/TYINMJG8BKRszB4oXpYzQbk1s=
Subject key identifier: 9E:34:FF:B5:95:A7:2E:CB:7E:EC:FF:25:7A:4E:AE:B2:FF:97:C7:B6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EA907031E02B77979856D8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9233b721-c5c6-3ffc-9840-1bff13d1a5c4.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 395341
IP address blocks: 2001:470:29e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:90:70:31:e0:2b:77:97:98:56:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=262ee177-4b12-4ae1-a2e2-eb261e060052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:50:57:7c:bd:76:63:86:e5:27:35:0d:00:
46:78:36:d6:cf:47:28:65:5d:97:c5:8a:1d:17:ff:
ad:2a:84:96:1b:11:40:56:f1:83:83:bd:ea:99:92:
d6:47:48:d5:75:10:18:fc:60:e1:84:a5:9f:15:d1:
99:7c:4f:5d:1a:1a:eb:e8:00:e5:ca:60:c3:45:84:
01:59:eb:47:2e:82:b4:75:82:c7:b0:d6:dd:8a:1c:
a0:53:64:25:f2:fd:65:b4:bd:87:ca:62:c3:ea:8c:
81:f9:6c:bd:fd:e7:62:46:d3:86:77:3f:81:f0:1a:
5a:1b:9f:fc:be:19:be:c6:3b:b7:70:84:b5:aa:52:
2c:7d:2f:69:76:aa:61:13:4d:44:ea:7a:af:f0:e4:
35:df:7c:1b:81:94:67:e2:b7:b5:f5:39:ee:b8:2e:
71:d7:4e:2d:b8:e5:61:0b:56:e3:23:b8:4f:c0:53:
ff:8d:8d:8b:3b:3f:5f:b4:66:a2:f0:ca:93:61:e0:
1c:e6:12:f3:39:3c:ae:2f:c1:62:b3:6f:af:1a:93:
89:05:32:9e:bf:24:1f:79:14:02:0b:ce:45:9c:6d:
28:db:5a:f5:21:8b:ff:51:0c:1a:38:cf:f9:c8:48:
bd:cc:d0:4d:1d:93:c7:64:79:44:b4:55:bf:a4:33:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:34:FF:B5:95:A7:2E:CB:7E:EC:FF:25:7A:4E:AE:B2:FF:97:C7:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9233b721-c5c6-3ffc-9840-1bff13d1a5c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:29e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:69:ab:7e:17:16:10:d4:78:e2:d5:18:9b:fc:e1:6e:8d:79:
fe:28:4d:2f:4c:d4:63:3c:9f:9a:2f:96:31:c3:8e:13:63:43:
96:53:2d:f7:d0:17:92:f2:56:5a:12:6b:ee:13:04:1e:20:06:
38:0b:6f:69:64:7b:22:0f:c8:c3:26:49:a4:a4:f9:77:55:39:
89:92:73:e5:c8:16:e9:9c:78:90:5b:4e:f4:aa:81:02:c5:14:
bb:af:08:81:68:5b:14:72:ca:ea:65:9a:83:96:83:13:e0:51:
99:e2:52:7f:e2:88:34:aa:2a:ef:40:f4:31:a0:2d:1e:a4:80:
a9:02:7f:22:0f:0c:0f:24:7c:be:8d:43:98:95:19:d2:c2:c8:
5f:59:94:79:61:d1:b1:5a:3d:d1:cf:20:09:9f:06:0a:9d:dd:
e6:2d:c0:71:d5:8a:f0:95:5e:ae:30:3a:f1:bb:af:c3:79:ff:
94:18:0c:f4:49:da:e9:14:28:8a:8b:c0:98:5d:f5:08:c7:f7:
47:54:9a:d2:a5:23:78:d4:a9:8e:43:e3:ba:63:9a:ca:a2:54:
ed:1b:4c:87:f9:02:a6:02:c0:d6:d0:7e:57:68:be:32:be:18:
34:92:31:8e:24:2d:29:ff:7b:14:6e:34:1f:37:99:c5:74:51:
57:8c:c5:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6pBwMeArd5eYVtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MjYyZWUxNzctNGIxMi00YWUxLWEyZTItZWIyNjFlMDYwMDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz1QV3y9dmOG5Sc1DQBGeDbWz0coZV2XxYod
F/+tKoSWGxFAVvGDg73qmZLWR0jVdRAY/GDhhKWfFdGZfE9dGhrr6ADlymDDRYQB
WetHLoK0dYLHsNbdihygU2Ql8v1ltL2HymLD6oyB+Wy9/ediRtOGdz+B8BpaG5/8
vhm+xju3cIS1qlIsfS9pdqphE01E6nqv8OQ133wbgZRn4re19TnuuC5x104tuOVh
C1bjI7hPwFP/jY2LOz9ftGai8MqTYeAc5hLzOTyuL8Fis2+vGpOJBTKevyQfeRQC
C85FnG0o21r1IYv/UQwaOM/5yEi9zNBNHZPHZHlEtFW/pDM3MQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ40/7WVpy7Lfuz/JXpOrrL/l8e2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTIzM2I3MjEtYzVjNi0z
ZmZjLTk4NDAtMWJmZjEzZDFhNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKdpq34XFhDUeOLVGJv84W6Nef4oTS9M1GM8n5ovljHDjhNjQ5ZT
LffQF5LyVloSa+4TBB4gBjgLb2lkeyIPyMMmSaSk+XdVOYmSc+XIFumceJBbTvSq
gQLFFLuvCIFoWxRyyuplmoOWgxPgUZniUn/iiDSqKu9A9DGgLR6kgKkCfyIPDA8k
fL6NQ5iVGdLCyF9ZlHlh0bFaPdHPIAmfBgqd3eYtwHHVivCVXq4wOvG7r8N5/5QY
DPRJ2ukUKIqLwJhd9QjH90dUmtKlI3jUqY5D47pjmsqiVO0bTIf5AqYCwNbQfldo
vjK+GDSSMY4kLSn/exRuNB83mcV0UVeMxZA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:17 2026 by rpki-client