
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
File: afe4b7b2-223b-38b1-8752-565def625b63.roa (raw, json)
Hash identifier: c1Eh/4yI5yFAFCxAxz1/mgTZlrKOcY3+qeEeVy8NGPI=
Subject key identifier: DF:91:D4:F2:4B:1F:B7:44:C4:25:DD:49:00:0F:87:32:90:AC:60:F2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EA8E626832BB8B54132C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 132046
IP address blocks: 2001:470:25e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:8e:62:68:32:bb:8b:54:13:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=af88aa9c-1971-44b1-8c03-1704a0b39ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:36:4f:35:bd:8b:7c:96:36:73:0a:cb:e7:
5c:54:4a:94:d9:17:a9:43:41:0d:09:a2:f8:00:f8:
ce:49:c9:3e:42:7e:42:e7:7d:ca:65:af:02:5d:dc:
4d:5e:df:a2:85:f6:b0:c2:49:bb:44:81:4d:05:ec:
7d:87:67:86:35:63:bf:ea:5e:96:66:35:ed:38:07:
42:9b:24:9e:2f:d7:60:7c:ce:fe:cc:dc:b0:69:ab:
40:ba:4e:21:8b:4a:aa:8b:45:28:52:9c:ff:77:4e:
9d:c6:3f:16:6e:32:67:e2:91:f1:31:52:61:ff:c0:
1e:96:d3:ed:70:37:2b:e5:25:55:d0:36:ec:53:0a:
50:5f:2f:5d:bb:18:87:88:c4:e7:c0:35:55:22:a9:
da:5d:ab:d7:3f:1c:58:f4:20:5f:5e:01:6e:18:09:
0a:8b:ea:8e:f7:dc:de:52:a1:96:51:f3:ab:6e:e9:
43:9b:5d:f3:46:55:66:94:3c:84:6e:23:97:e8:89:
fe:ea:93:4e:3f:68:e0:d2:2c:2d:7b:6b:fa:37:10:
aa:78:f8:bb:3d:65:4f:58:f3:a6:b0:da:4c:6f:ad:
9b:02:f1:5f:48:00:ae:7e:1e:5e:fc:5a:e1:f5:80:
b3:70:0d:58:e8:81:a1:3d:ef:3d:ca:de:70:a8:75:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:D4:F2:4B:1F:B7:44:C4:25:DD:49:00:0F:87:32:90:AC:60:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:25e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:52:cf:a6:8e:41:71:7a:3f:2c:08:49:88:e0:9d:e6:5a:05:
0b:18:72:3f:0c:01:03:c0:a3:99:75:5b:ac:03:b5:fd:5b:00:
48:26:9f:50:36:3c:fe:31:36:6b:7b:42:7f:0c:b7:e5:29:61:
65:c6:e8:53:28:5f:90:ab:c9:24:70:ff:80:49:fa:af:39:bf:
dd:20:b0:d4:eb:80:9c:cd:39:e5:a3:9a:75:2b:2a:f5:ca:f3:
6c:51:f4:d0:97:3a:46:41:84:7f:8a:52:0f:fb:7d:fd:a0:61:
9f:4b:0a:ff:e2:b1:58:02:f9:a9:67:94:36:7f:37:d9:6a:1d:
80:a7:8f:ff:36:bf:74:42:52:c3:9a:9b:c4:6b:13:60:d5:6f:
7d:26:65:70:8a:c8:3c:ce:31:c4:de:23:5c:9b:ae:84:02:a4:
ae:7a:24:d9:0e:60:26:a6:01:1c:89:f5:db:ce:ea:8f:ba:01:
fd:e4:8f:8a:51:e5:9e:5d:a6:e4:44:41:fe:85:0b:c9:76:df:
20:42:89:68:c1:b2:0f:15:3a:cc:a4:03:5a:25:67:3a:08:3d:
36:87:b2:41:0c:40:30:1a:55:e3:41:99:4a:6e:b5:cb:d5:03:
64:67:1d:08:4c:a4:d2:5b:ba:81:52:0e:fb:d6:b7:8a:bc:03:
f5:a9:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:03 2026 by rpki-client