
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa
File: e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa (raw, json)
Hash identifier: 9o9+uMhvujOxeTdrfUiP6qoL3FrV55i6MSgv4SR4CCw=
Subject key identifier: CA:E1:4A:C4:98:83:64:70:7E:0B:65:52:3E:CF:7C:41:35:F1:0A:29
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7CAADA8A5B81FD16B7D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 32526
IP address blocks: 2001:470:210::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:ca:ad:a8:a5:b8:1f:d1:6b:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=4f5fed08-304d-4d25-b98b-75fb1ea6b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:4e:dc:69:cd:df:ea:a4:6f:1a:26:ae:39:
51:c5:79:b7:89:9d:87:76:9a:72:68:da:68:49:32:
de:14:b5:e9:6a:0c:db:b4:61:0b:1c:7a:24:76:2c:
83:7d:6b:41:39:1f:50:3d:f8:e4:0d:8d:d4:55:a4:
a8:05:b4:4f:2a:67:2f:15:90:41:33:b3:4a:bc:b6:
b4:fc:da:5e:c3:98:6d:f2:7a:39:4b:08:70:2d:70:
2d:4f:1e:05:11:35:d0:8f:97:42:d1:e1:a9:d1:cc:
b0:78:bb:99:7d:2b:5e:6e:d2:6b:c1:a6:46:09:90:
69:b0:b6:b2:c3:0d:4e:5d:f5:3f:08:bb:e4:7a:66:
c0:f2:76:e4:50:24:f3:f2:bc:ac:41:93:4d:ce:27:
a1:7a:72:d3:ce:47:68:7e:1d:bc:4a:04:a9:98:46:
2c:c7:2b:b5:9a:35:84:3c:84:4e:0d:a1:57:5f:5f:
86:60:15:d5:64:d0:23:0e:e1:16:00:79:e1:52:9b:
c2:8e:be:24:7b:8d:0d:ba:18:17:10:55:00:d0:ee:
d0:70:69:ba:e5:25:ae:96:9c:8d:d9:e3:16:5e:1a:
fa:5f:d0:58:da:1a:bb:d9:4a:b2:e4:bc:b0:ba:36:
14:d4:62:3d:73:86:4b:45:71:04:bb:a3:e6:a8:b0:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:4A:C4:98:83:64:70:7E:0B:65:52:3E:CF:7C:41:35:F1:0A:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:210::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:30:b5:3f:5e:96:e1:28:97:b3:b9:da:0a:24:7c:42:39:47:
bf:e5:9e:82:99:8d:dc:66:0b:15:94:bc:e8:0d:83:63:0c:c4:
32:19:88:dc:6b:81:fe:70:71:65:d3:1b:ed:8e:2c:f4:b3:16:
2b:e5:12:1b:6f:a1:75:45:a3:41:5a:c0:6a:c5:a5:d2:74:98:
fb:bf:08:39:c7:7a:7f:34:97:55:8a:37:66:54:f4:4d:a7:94:
b5:e1:ff:c0:6a:37:72:6c:39:4a:25:d1:5b:96:e8:bf:8a:b9:
f6:3d:dc:00:44:be:e9:89:f1:f8:78:f1:91:00:05:62:f7:ba:
0c:fd:84:bb:22:6e:56:eb:c3:7e:c0:0f:22:12:3f:b5:72:58:
3a:36:52:a9:78:09:7d:40:8a:08:2a:b4:87:da:66:41:81:86:
b8:ed:e9:3a:21:17:aa:05:8b:be:c5:eb:b3:a0:4b:f1:d7:82:
37:38:a4:4a:4b:dd:3c:60:eb:ae:92:d3:5f:77:3e:78:de:9e:
9e:e5:ae:06:1f:8b:08:ed:21:5f:fe:46:eb:c3:fb:69:46:c0:
da:a9:8c:bb:97:58:7d:98:c3:d6:4c:99:ea:83:5c:14:1c:49:
6b:2e:c9:01:47:65:ae:e4:ac:e4:81:a5:f4:72:b4:a6:67:ef:
50:2a:16:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18qtqKW4H9FrfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NGY1ZmVkMDgtMzA0ZC00ZDI1LWI5OGItNzVmYjFlYTZiNTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7BO3GnN3+qkbxomrjlRxXm3iZ2HdppyaNpo
STLeFLXpagzbtGELHHokdiyDfWtBOR9QPfjkDY3UVaSoBbRPKmcvFZBBM7NKvLa0
/Npew5ht8no5SwhwLXAtTx4FETXQj5dC0eGp0cyweLuZfStebtJrwaZGCZBpsLay
ww1OXfU/CLvkembA8nbkUCTz8rysQZNNziehenLTzkdofh28SgSpmEYsxyu1mjWE
PIRODaFXX1+GYBXVZNAjDuEWAHnhUpvCjr4ke40NuhgXEFUA0O7QcGm65SWulpyN
2eMWXhr6X9BY2hq72Uqy5LywujYU1GI9c4ZLRXEEu6PmqLDuGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMrhSsSYg2RwfgtlUj7PfEE18QopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTFhMTE5OGItYjM2Yy0z
NTk0LWI4NGItYjJhODU0MWE5YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHUwtT9eluEol7O52gokfEI5R7/lnoKZjdxmCxWUvOgNg2MMxDIZ
iNxrgf5wcWXTG+2OLPSzFivlEhtvoXVFo0FawGrFpdJ0mPu/CDnHen80l1WKN2ZU
9E2nlLXh/8BqN3JsOUol0VuW6L+KufY93ABEvumJ8fh48ZEABWL3ugz9hLsiblbr
w37ADyISP7VyWDo2Uql4CX1AiggqtIfaZkGBhrjt6TohF6oFi77F67OgS/HXgjc4
pEpL3Txg666S0193Pnjenp7lrgYfiwjtIV/+RuvD+2lGwNqpjLuXWH2Yw9ZMmeqD
XBQcSWsuyQFHZa7krOSBpfRytKZn71AqFqA=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:29:05 2025 by rpki-client