
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa
File: 94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa (raw, json)
Hash identifier: aRXaIq/x3iay9z8ir/Q4DKDI035KR0OllfzzlAFIJu4=
Subject key identifier: 6B:F2:FC:11:35:F1:F3:5A:14:A3:6F:46:14:0D:1E:A7:B6:AA:53:C5
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584EDC92219547CC71230EEB3520
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 399668
IP address blocks: 2001:470:176::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:21:95:47:cc:71:23:0e:eb:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=7d5ae1a0-ab95-4aaa-bf4a-ccdb4c0b65c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:57:59:ff:78:b6:fc:cf:b0:e4:ec:f9:b7:
c8:ed:05:3b:1f:dc:cc:2f:93:6a:d5:4a:1f:05:4a:
ea:7b:f3:cf:ed:ad:f7:c5:6f:35:85:fd:45:a3:06:
67:d6:72:ff:78:16:52:f9:f9:f7:52:68:be:e4:0e:
75:d9:c6:1b:15:81:c8:40:3f:5b:d1:92:a9:bd:d5:
91:dd:21:7e:a3:e6:09:ad:ac:b5:af:66:36:de:24:
9e:3a:3f:5d:e3:d1:7a:75:8a:fe:5a:b3:50:93:bb:
de:84:63:15:c8:d9:e8:8a:bc:72:7f:ab:16:64:5f:
11:34:6b:74:2d:53:11:1b:e3:79:bf:83:38:11:e2:
9b:fc:33:38:26:a2:32:39:e3:86:94:6a:ca:e3:fe:
0f:51:47:32:f0:e3:7b:ac:51:bf:1d:ce:33:4c:29:
d2:2d:65:e4:cb:f1:4e:2d:cb:e5:3b:7e:bd:54:ac:
0f:cb:ee:02:17:2f:ee:91:8e:7b:5a:a0:f6:04:13:
d2:bd:a9:2f:19:6b:5c:44:48:50:a1:4f:58:b4:68:
af:de:e8:93:22:44:72:07:06:66:bb:71:6e:00:3b:
3a:75:62:ea:b6:a9:9a:e3:a9:e5:f8:8f:5d:9e:bb:
7c:93:6d:6a:8e:08:32:74:b2:60:fd:b3:fd:1f:cb:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:FC:11:35:F1:F3:5A:14:A3:6F:46:14:0D:1E:A7:B6:AA:53:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94a44e79-a21e-386f-a3b2-3e5059aaf7dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:176::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:a3:ce:72:e0:e2:ef:31:ea:b3:bf:52:cb:3c:96:a5:52:61:
98:56:76:4f:83:97:8a:ee:9a:48:97:6a:10:81:ea:b0:55:42:
eb:7a:cd:90:b2:de:6a:60:cf:bb:c5:9a:63:c3:07:35:10:a2:
f4:3c:15:19:84:60:30:1a:c2:07:f6:10:8e:4a:4d:17:38:a7:
21:77:e7:33:b8:ef:86:bb:e8:48:9d:79:f4:0c:1d:a9:0a:fa:
5f:21:36:fc:86:a1:ef:0d:c8:32:ec:e2:21:01:9c:0a:a2:a5:
cf:40:e1:16:49:c0:63:d9:53:63:7d:90:93:8b:fa:9a:aa:3a:
52:a7:40:61:3b:3c:31:17:5b:6f:66:a2:58:ac:bc:db:85:f3:
a7:69:51:d6:dd:94:8a:16:bc:eb:bc:a5:cf:81:2a:ad:49:cf:
38:f4:2a:e2:56:da:45:52:a0:d0:3d:dd:c9:06:ed:08:68:3d:
90:55:4b:4d:d9:2f:1c:be:1b:b2:a8:28:a2:49:e5:ea:01:c9:
0b:02:88:5b:ef:e9:13:d2:7f:d2:7d:f9:6f:95:90:af:d7:a7:
3c:f9:ea:78:af:20:4d:fa:5c:90:83:69:02:60:74:3d:d9:92:
fb:b3:71:4b:57:f3:51:ae:4c:3f:11:0f:c9:97:4f:76:ae:43:
f0:8c:3f:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiGVR8xxIw7rNSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
N2Q1YWUxYTAtYWI5NS00YWFhLWJmNGEtY2NkYjRjMGI2NWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApitXWf94tvzPsOTs+bfI7QU7H9zML5Nq1Uof
BUrqe/PP7a33xW81hf1FowZn1nL/eBZS+fn3Umi+5A512cYbFYHIQD9b0ZKpvdWR
3SF+o+YJray1r2Y23iSeOj9d49F6dYr+WrNQk7vehGMVyNnoirxyf6sWZF8RNGt0
LVMRG+N5v4M4EeKb/DM4JqIyOeOGlGrK4/4PUUcy8ON7rFG/Hc4zTCnSLWXky/FO
LcvlO369VKwPy+4CFy/ukY57WqD2BBPSvakvGWtcREhQoU9YtGiv3uiTIkRyBwZm
u3FuADs6dWLqtqma46nl+I9dnrt8k21qjggydLJg/bP9H8s5BQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGvy/BE18fNaFKNvRhQNHqe2qlPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTRhNDRlNzktYTIxZS0z
ODZmLWEzYjItM2U1MDU5YWFmN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJejznLg4u8x6rO/Uss8lqVSYZhWdk+Dl4rumkiXahCB6rBVQut6
zZCy3mpgz7vFmmPDBzUQovQ8FRmEYDAawgf2EI5KTRc4pyF35zO474a76EidefQM
HakK+l8hNvyGoe8NyDLs4iEBnAqipc9A4RZJwGPZU2N9kJOL+pqqOlKnQGE7PDEX
W29molisvNuF86dpUdbdlIoWvOu8pc+BKq1Jzzj0KuJW2kVSoNA93ckG7QhoPZBV
S03ZLxy+G7KoKKJJ5eoByQsCiFvv6RPSf9J9+W+VkK/Xpzz56nivIE36XJCDaQJg
dD3ZkvuzcUtX81GuTD8RD8mXT3auQ/CMPxM=
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:28:08 2026 by rpki-client