
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/348c76b8-ac1e-337b-ad26-d5caf73a137d.roa
File: 348c76b8-ac1e-337b-ad26-d5caf73a137d.roa (raw, json)
Hash identifier: GHmlZKcXRfADPUeqUVycj9Y19Dva6xREdHhFlv1DObQ=
Subject key identifier: BA:93:36:A8:BE:10:94:90:19:8B:B2:08:11:B0:21:7C:57:1B:B1:34
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584DA6B02B8E068918F01FFE95B8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/348c76b8-ac1e-337b-ad26-d5caf73a137d.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 399558
IP address blocks: 2001:470:3e9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:2b:8e:06:89:18:f0:1f:fe:95:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=94c3ddc0-4c88-4dc8-8df7-3f932c145930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:0f:88:94:bf:11:e9:f1:ec:18:4c:88:9a:
82:9e:5c:c0:5c:e7:cf:e1:70:00:03:a0:57:82:26:
90:7d:57:3c:c9:78:cb:ac:f4:f2:f8:92:81:a5:7d:
56:29:65:e2:44:cd:d3:4f:36:28:b3:5a:4a:bb:b5:
36:ef:4d:fb:a9:5e:af:3f:00:38:c7:54:d9:70:78:
58:22:0f:7e:9a:05:9d:0f:be:a6:45:a0:3b:8a:78:
09:d5:3f:bd:e3:71:da:85:58:64:3a:0c:f9:39:c0:
9e:bb:fd:b6:9e:d8:e9:16:06:6f:9c:f6:3a:2a:e1:
c2:12:20:6d:78:d8:46:fe:c8:ed:d6:3d:a3:1b:e4:
9a:c2:15:bb:12:31:fe:8d:b0:fb:0f:2c:21:79:dd:
17:c5:23:dd:e1:22:0a:50:3d:45:95:36:ca:c6:a8:
85:4e:c5:52:20:35:2f:e4:69:30:3f:bf:00:ee:fb:
bc:09:fd:8a:83:e6:b7:f5:03:fe:be:d9:ca:96:1d:
00:07:97:67:81:cf:9d:c6:16:6e:b9:4f:9f:59:95:
ea:47:f6:d1:82:c9:fc:f0:ef:8e:52:ee:0a:1b:a3:
f6:d4:0a:10:96:e4:17:54:81:15:96:13:90:5a:c8:
7a:55:25:1c:8d:d9:bd:14:c4:e9:7a:dd:23:1c:a0:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:36:A8:BE:10:94:90:19:8B:B2:08:11:B0:21:7C:57:1B:B1:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/348c76b8-ac1e-337b-ad26-d5caf73a137d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3e9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:32:40:50:30:5e:3c:72:74:19:96:7a:47:6b:f5:5f:e6:cb:
04:9b:4f:e6:40:61:39:ab:7f:4b:88:7c:72:12:a7:56:e8:4d:
5c:58:6f:3f:e6:b2:c6:1c:22:84:72:66:d1:c4:56:44:36:d4:
11:b2:98:2c:82:bc:02:e3:53:6d:a2:34:8b:bb:02:45:29:18:
23:db:58:e3:8d:6a:4f:2f:b9:95:96:69:f6:32:09:56:73:ef:
ba:e6:5a:d6:80:12:5c:91:91:42:0d:c6:45:7a:02:f4:59:13:
25:31:c2:a0:a7:1d:ab:e5:00:2f:0c:31:0b:5d:16:89:a5:09:
2c:b9:d8:6a:36:d3:b6:f9:59:b2:57:08:70:aa:2a:08:38:3b:
fa:db:61:96:e9:9d:3f:48:e0:e1:6d:57:21:1d:be:57:07:28:
76:fb:d6:83:91:40:39:ee:ff:21:53:44:0f:ba:d9:1b:dc:55:
8b:5c:6c:cd:6e:08:45:11:3b:98:73:95:e0:b3:da:42:42:b6:
48:78:43:ab:5c:2a:13:8f:57:5d:23:a6:86:ed:87:54:5f:a7:
51:0d:82:6a:85:57:86:29:ed:bd:cf:20:6c:fc:45:15:a8:8f:
ba:57:2c:ab:ff:8e:11:24:aa:98:d6:51:a7:e3:dc:6f:ec:73:
e2:d4:7f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:01:32 2026 by rpki-client