
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa
File: c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa (raw, json)
Hash identifier: U2wvkZ7IPMOcolwAcoJeGHf6QVetOH0OkNF2nQD7dns=
Subject key identifier: 41:6B:0A:78:86:9A:A9:E4:91:5F:24:F5:1C:54:1F:F2:90:32:97:13
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EA8B8AE6E30D3253E72800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 394256
IP address blocks: 2001:470:1bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:8b:8a:e6:e3:0d:32:53:e7:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=b9e512ba-06fa-4fbe-a7b0-7dc4af1e6cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:11:08:c2:1e:d3:d9:8b:ad:de:a9:91:7b:
26:bc:7c:e2:2a:72:a6:1f:88:6e:88:a8:52:9b:96:
91:81:3b:cb:ab:cb:de:e0:04:16:3b:7f:93:3d:ca:
98:05:ea:e4:13:2b:d1:a6:92:9b:bb:1b:d6:b7:fa:
d5:0a:68:3b:84:3e:7e:6e:99:f8:b9:a2:26:54:dd:
35:34:d2:f1:4f:bb:5e:85:a0:f2:1f:77:af:a5:49:
4a:67:81:11:ba:72:33:c7:e5:dd:31:fb:cc:60:c5:
cc:21:37:6b:90:48:45:95:c8:c5:9a:c6:e7:ba:20:
55:e4:9a:bf:ba:33:3d:b9:c2:ff:3b:73:ce:19:f7:
0a:52:81:04:67:f1:54:58:99:aa:da:7b:73:4d:06:
0a:4c:93:81:49:27:0e:c7:5b:1a:95:d5:cb:01:2d:
cf:44:7a:5f:9e:ac:74:f0:27:03:f6:13:12:24:5c:
e3:08:b6:b3:f8:f8:52:cd:db:b1:b6:4d:23:3f:44:
d3:cd:8b:10:e3:7b:66:b3:96:d6:09:93:88:09:7f:
43:7f:0f:6a:ce:70:4c:85:bd:e0:a2:2e:0a:60:1f:
22:25:40:9a:e6:12:f1:6b:8a:f4:20:8c:42:b2:30:
6a:0f:e7:58:3b:e0:d0:a1:86:ac:4e:8d:be:9f:2e:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:0A:78:86:9A:A9:E4:91:5F:24:F5:1C:54:1F:F2:90:32:97:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c88f61c3-7cdb-34de-8d58-1cd9cacdf7d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1bf::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:1d:59:78:e4:5f:bc:ed:38:28:6e:1d:84:bc:72:8f:f8:a3:
a4:d4:ca:39:5f:0d:29:6b:7d:e5:6a:1b:df:b3:62:c8:82:fa:
bb:5b:aa:1e:dd:3a:1b:59:03:6a:54:97:a8:2a:99:34:7d:97:
4d:55:a9:66:0e:e1:4a:77:c7:28:1e:4b:e1:01:94:c8:10:52:
e7:96:9c:78:97:14:a8:31:81:94:05:e5:70:ca:02:79:19:92:
b5:67:8e:a5:c3:52:ce:39:c7:14:db:28:59:d3:65:4c:4d:a6:
74:4f:de:93:bb:fc:17:e7:9f:80:4a:08:e7:ab:55:c6:31:80:
d6:d1:4d:51:c5:17:71:5f:25:c5:1d:34:80:7c:27:b8:22:e5:
d2:18:bf:9e:82:6a:d9:bb:91:7a:5a:f6:9b:a6:f9:aa:29:bd:
41:9b:53:e6:93:d2:f1:6e:e2:dd:f5:ee:08:06:08:7f:44:32:
23:6e:c0:20:a1:72:32:18:04:e6:cd:1c:63:7d:2b:cc:da:83:
1e:07:24:e8:a5:3d:66:00:13:6a:ee:50:03:fe:ec:ad:10:b7:
4b:56:de:4d:87:c3:c3:61:26:91:b3:d5:73:41:5a:ec:5d:80:
0e:27:05:e5:92:7f:cc:d2:92:b9:c3:62:40:ac:99:63:75:59:
c9:98:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:32 2026 by rpki-client