
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa
File: 8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa (raw, json)
Hash identifier: Hxn2f1P4GpUK/7AC2vnBfYJ5B16Mw26zsZXH0jit/Es=
Subject key identifier: 81:FC:3F:EE:62:B6:AD:41:4F:DE:64:73:8A:7A:5B:EE:D1:7E:51:99
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584CC6121ED36F1E1E59938454F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 399055
IP address blocks: 2001:470:42a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:12:1e:d3:6f:1e:1e:59:93:84:54:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=4c0c2bf8-6ccc-453f-bfe9-f8eb923c16f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:1f:9b:1f:24:34:c7:3f:a2:28:b9:38:3c:
bf:cb:99:27:b6:3f:04:8d:07:ca:c8:ce:e5:84:3e:
03:db:5f:f6:0d:39:95:5a:c5:a5:97:8a:55:42:b6:
eb:bf:2c:f5:bd:9a:78:fd:86:b6:7b:82:0b:8b:ab:
3c:71:37:1b:f8:e4:df:97:ce:ab:f6:d4:92:29:27:
e8:f6:23:a0:58:3c:d5:b0:71:a1:dd:d2:6a:5e:35:
1f:ea:1b:83:10:00:6b:d3:7a:c4:f7:f6:4a:2f:d2:
39:92:28:da:4c:5e:fa:9c:58:64:cd:38:31:f2:2f:
2b:ed:e0:14:c0:18:b9:3f:d4:be:23:b9:7e:6c:70:
ce:35:59:23:2b:a3:07:ca:dc:6c:8a:81:ff:67:94:
98:1c:07:51:4e:83:1b:33:87:fe:f2:b7:0c:6f:c9:
45:05:24:bf:da:ae:98:16:24:80:88:f8:c2:58:f6:
24:c8:4c:d0:17:ba:14:39:f0:8c:af:08:e2:74:0d:
cb:fc:d9:11:9b:1c:39:28:0f:ec:38:cd:6e:cf:eb:
76:a3:17:a1:0d:0b:27:25:c2:92:53:12:95:c6:1b:
7d:50:22:a5:23:72:00:b2:ec:b6:2d:19:18:a9:e0:
2e:e7:b9:3e:04:92:5d:ed:c8:94:ab:a2:d2:cf:e5:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FC:3F:EE:62:B6:AD:41:4F:DE:64:73:8A:7A:5B:EE:D1:7E:51:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:42a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:72:c1:e8:8d:59:67:ac:6b:48:58:b3:0f:31:db:6a:54:fb:
c8:83:2d:05:49:1c:af:66:32:5e:e0:13:21:9f:bb:70:59:5b:
2d:3d:9f:c2:67:11:f8:3d:d5:9f:32:52:49:fc:67:e7:60:74:
64:6a:b1:8b:fe:2e:ca:53:6e:16:18:07:d6:2e:bc:95:f9:68:
b4:51:41:56:4b:6a:97:07:f0:34:83:52:77:a5:cd:3d:e4:9c:
97:a7:84:93:c6:9f:79:1e:d4:a0:c2:fa:bf:9c:6b:ee:ec:8f:
14:53:6f:19:96:81:97:8e:0d:cd:de:20:2f:a7:e1:dc:53:4b:
ed:cb:90:25:35:6d:aa:7a:5c:52:c0:56:ec:87:77:8f:5b:b0:
15:de:81:3b:1c:b8:90:e0:f4:06:7f:c8:62:24:1b:2c:0b:b7:
13:c2:01:a5:6b:f7:86:4b:a6:cc:a1:35:ed:a7:03:be:0f:09:
0b:4c:6d:03:a5:86:4d:52:06:52:48:35:90:5e:5d:e6:d0:95:
d5:6c:99:e9:26:0d:0c:87:00:5e:1c:e6:ab:6e:38:86:b2:29:
a5:0b:21:83:32:b4:83:cf:12:84:f0:8d:7f:bb:26:9d:c8:28:
59:ca:c8:bd:4e:b8:67:8d:49:f0:63:3c:a7:b5:22:c7:4d:93:
c8:f1:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:48 2026 by rpki-client