
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1d7ddbc-cdb1-37ea-8f18-6ccaa4f7d51d.roa
File: c1d7ddbc-cdb1-37ea-8f18-6ccaa4f7d51d.roa (raw, json)
Hash identifier: +UZzeghsFIZbpNhQsHVr7vCTcEoGUkD9Xgi6hv4UujA=
Subject key identifier: E0:0E:31:B3:AA:67:48:20:F5:63:61:DA:CE:01:3A:79:A8:85:BD:36
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584CB551C1E9681808D9E5DC3700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1d7ddbc-cdb1-37ea-8f18-6ccaa4f7d51d.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 30524
IP address blocks: 2001:470:50d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:c1:e9:68:18:08:d9:e5:dc:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=a247c0d9-2d60-4cfd-8b9b-db99d307bd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:2f:dd:42:8b:43:8a:55:35:21:83:c0:72:
db:30:22:84:b6:0c:7e:11:6b:90:0a:b6:4d:90:82:
6d:76:49:ff:2b:5f:57:d2:f0:93:91:da:75:4b:c3:
b1:ac:a9:64:c6:1d:05:14:e5:16:a3:62:d1:08:67:
92:fe:08:4d:f5:64:6e:79:52:ab:b6:18:03:0c:e5:
b4:a4:5b:24:2e:9f:55:1a:57:b6:ab:74:c3:30:f7:
01:38:b0:9a:0a:bc:81:41:c5:1e:5d:67:32:4a:08:
95:bb:bf:87:fc:9f:f2:67:fe:aa:e7:81:94:ea:c9:
46:eb:db:9e:0c:97:3f:0b:79:e8:ac:3f:e1:3c:11:
6f:64:30:d2:35:4f:47:7a:f1:c0:6a:11:6f:82:81:
9a:73:bf:cd:5a:d3:ed:8c:56:0f:93:60:b6:18:fd:
ce:ba:52:ff:0a:b0:81:b1:5a:7d:24:34:08:6f:9c:
49:ad:e4:ae:09:f9:4e:bc:94:fb:37:e9:38:a0:29:
c5:87:86:0f:37:eb:2b:f2:90:79:95:ad:4a:10:25:
41:9b:f3:b8:4f:50:99:56:3f:ac:7a:34:5f:99:8d:
28:64:c9:7c:98:ea:03:7f:1c:74:74:40:e0:59:98:
b1:57:e5:92:1d:04:da:6c:c6:fc:9b:58:6c:e1:c3:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0E:31:B3:AA:67:48:20:F5:63:61:DA:CE:01:3A:79:A8:85:BD:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1d7ddbc-cdb1-37ea-8f18-6ccaa4f7d51d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:50d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:85:ba:d4:f6:9f:95:8b:4c:cf:d5:50:68:4b:64:c0:91:48:
98:dd:4b:9a:40:60:15:ad:d8:12:f9:e7:f5:68:6b:3b:31:67:
7b:ec:b7:69:84:44:d4:b9:c2:d5:41:27:3d:50:8a:3b:68:ce:
02:32:30:b3:72:b5:21:32:65:4a:d0:d7:78:60:88:1c:5c:bc:
b4:19:37:87:82:03:0d:a9:96:4a:ad:42:a6:4f:21:55:81:1d:
5c:40:29:74:85:5f:04:da:42:d9:ea:99:33:d7:5c:fd:50:b1:
fc:ae:83:22:2b:7f:83:a6:d1:9d:d8:2b:06:c6:85:1f:49:4d:
5b:92:23:84:a0:0d:5a:d8:a9:02:02:1c:59:40:2f:cc:8d:79:
24:a7:03:23:48:c6:1a:ec:28:c8:77:e0:aa:02:f2:78:c4:dd:
f6:b8:7c:fc:f2:92:a5:d6:b6:ae:48:90:15:da:b7:3d:71:80:
21:78:63:89:74:b2:f7:12:30:52:96:97:63:3f:45:c7:f7:56:
66:91:b5:7b:a0:58:85:c1:e5:09:58:07:7d:2b:62:7c:c8:5f:
10:c1:f0:08:c3:b0:11:65:ea:93:8b:3e:23:fd:91:8c:0f:fe:
77:62:ef:35:65:5d:b7:cc:f0:21:a6:12:57:36:13:7d:aa:39:
33:d5:3c:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy1UcHpaBgI2eXcNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
YTI0N2MwZDktMmQ2MC00Y2ZkLThiOWItZGI5OWQzMDdiZDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aEv3UKLQ4pVNSGDwHLbMCKEtgx+EWuQCrZN
kIJtdkn/K19X0vCTkdp1S8OxrKlkxh0FFOUWo2LRCGeS/ghN9WRueVKrthgDDOW0
pFskLp9VGle2q3TDMPcBOLCaCryBQcUeXWcySgiVu7+H/J/yZ/6q54GU6slG69ue
DJc/C3norD/hPBFvZDDSNU9HevHAahFvgoGac7/NWtPtjFYPk2C2GP3OulL/CrCB
sVp9JDQIb5xJreSuCflOvJT7N+k4oCnFh4YPN+sr8pB5la1KECVBm/O4T1CZVj+s
ejRfmY0oZMl8mOoDfxx0dEDgWZixV+WSHQTabMb8m1hs4cNGLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOAOMbOqZ0gg9WNh2s4BOnmohb02MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzFkN2RkYmMtY2RiMS0z
N2VhLThmMTgtNmNjYWE0ZjdkNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALSFutT2n5WLTM/VUGhLZMCRSJjdS5pAYBWt2BL55/VoazsxZ3vs
t2mERNS5wtVBJz1QijtozgIyMLNytSEyZUrQ13hgiBxcvLQZN4eCAw2plkqtQqZP
IVWBHVxAKXSFXwTaQtnqmTPXXP1QsfyugyIrf4Om0Z3YKwbGhR9JTVuSI4SgDVrY
qQICHFlAL8yNeSSnAyNIxhrsKMh34KoC8njE3fa4fPzykqXWtq5IkBXatz1xgCF4
Y4l0svcSMFKWl2M/Rcf3VmaRtXugWIXB5QlYB30rYnzIXxDB8AjDsBFl6pOLPiP9
kYwP/ndi7zVlXbfM8CGmElc2E32qOTPVPL8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:33 2026 by rpki-client