
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa
File: 2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa (raw, json)
Hash identifier: zKlEnzX1rNfKMoBVKSBmZ7+w4y9+0h8FGQf+bAfSDdg=
Subject key identifier: DF:A0:FD:B1:62:DC:E9:2A:D1:50:44:40:8B:3C:97:0C:A4:7D:CA:4A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584E709F77EE499082EED4AA6CC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa
Signing time: Thu 09 Jul 2026 09:00:13 +0000
ROA not before: Thu 09 Jul 2026 09:00:13 +0000
ROA not after: Wed 07 Oct 2026 09:00:13 +0000
asID: 15577
IP address blocks: 2001:470:4bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:70:9f:77:ee:49:90:82:ee:d4:aa:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 9 09:00:13 2026 GMT
Not After : Oct 7 09:00:13 2026 GMT
Subject: CN=f908d585-999e-4b4a-8bf4-ccc872e97b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:ce:2a:8d:e3:7e:81:a5:46:03:06:a8:be:
99:24:ef:cc:45:79:01:dd:6a:87:74:3c:f8:82:06:
cd:5c:9b:a6:2b:04:31:a0:c3:c9:b7:b1:ee:92:48:
e6:9d:7a:4e:d6:ef:49:01:4b:fa:4b:bf:0c:9a:3c:
a1:17:ea:f6:42:de:f4:63:f2:0b:07:6f:2b:e2:64:
e8:da:80:29:2b:b6:3a:34:54:10:ae:1e:9b:ce:d1:
35:d4:35:7c:cd:2b:09:55:60:38:d1:e2:05:32:ad:
c4:55:83:0e:66:25:af:b6:93:23:c2:99:35:d7:21:
94:ca:4d:b6:dc:df:5f:1f:c2:2f:cf:fe:7d:4a:2f:
c4:05:30:36:82:e1:6f:97:7a:86:96:48:2c:3f:87:
67:38:a8:07:ca:90:d3:b6:72:71:19:1b:f7:b7:7c:
fb:0a:a5:c7:9a:c5:ba:4f:bb:44:ff:50:61:13:1d:
88:07:b4:d4:b2:07:61:91:5d:29:26:ab:25:64:20:
af:cb:ca:59:e2:78:2a:23:7a:ca:20:61:26:5f:f6:
7f:3f:fa:63:4d:47:df:5f:f2:24:89:6f:d9:1d:81:
de:c6:cc:b2:17:9b:00:c2:6e:ee:7e:b0:6e:96:24:
5c:50:1d:54:65:06:92:92:34:68:41:15:65:26:4d:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A0:FD:B1:62:DC:E9:2A:D1:50:44:40:8B:3C:97:0C:A4:7D:CA:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f89d8d5-d6e8-32ce-81f8-094238b4124d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:4bd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:16:eb:2c:f5:67:00:7b:7d:9f:91:73:cd:4e:4f:5c:e1:09:
ce:e0:da:c1:7b:72:91:55:f2:ab:5d:fe:3a:67:df:be:b9:3b:
5c:9f:84:ca:5b:6a:ad:89:0b:fc:b4:eb:9e:25:9e:60:68:32:
2e:be:3e:b4:e0:28:4c:d0:06:47:bb:dc:b9:b0:c2:1a:d4:9e:
d4:f2:65:52:fb:cb:de:6c:16:fc:b4:1c:79:d7:ce:5c:c5:ed:
d6:90:d0:81:a2:15:ce:8f:d7:2c:0c:ab:18:82:28:b8:28:a4:
0d:77:db:58:99:59:4c:12:27:16:2a:3f:92:eb:0e:30:1e:6a:
ae:af:da:80:0f:18:d3:01:e6:73:20:cd:3b:2d:ea:5f:ec:30:
c3:a7:af:42:ea:60:fb:51:08:19:ba:e6:fa:da:2c:50:cd:1f:
a5:de:8b:c6:a5:71:26:9b:25:73:05:7c:7d:50:1f:5e:65:3b:
4c:d4:13:c0:de:91:38:97:63:10:7d:00:6c:1f:ae:a6:a2:9d:
8e:b4:25:46:01:40:26:60:dc:d8:f1:d9:fd:5a:aa:9b:41:ff:
66:af:68:23:8c:25:ee:68:7a:2b:7f:5b:bd:e4:69:c3:12:7d:
d0:68:66:8e:58:0a:41:bb:18:33:05:6c:b9:2d:8f:b7:d0:ff:
2a:72:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:31 2026 by rpki-client