
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa
File: 6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa (raw, json)
Hash identifier: U6FDTCHOjsR39PiicYIqWtXjNPRsk9Rk5Ney+iBTSAA=
Subject key identifier: B1:65:AE:85:36:2B:2F:A4:29:E7:70:D4:92:03:83:CD:8C:9C:F3:5F
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584DA3E55A4BEE429BCB84AADB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa
Signing time: Mon 27 Apr 2026 01:00:24 +0000
ROA not before: Mon 27 Apr 2026 01:00:24 +0000
ROA not after: Sun 26 Jul 2026 01:00:24 +0000
asID: 32953
IP address blocks: 2001:470:428::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a3:e5:5a:4b:ee:42:9b:cb:84:aa:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 27 01:00:24 2026 GMT
Not After : Jul 26 01:00:24 2026 GMT
Subject: CN=51091b2d-192e-4f39-930c-27a7f60f151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:76:65:ce:17:83:c9:c7:70:89:47:5b:08:
5e:10:31:a7:e0:ec:0a:a7:ec:ee:62:0a:bb:ee:24:
c6:ec:7c:be:c6:ce:ae:15:82:78:4c:d4:e6:e2:57:
92:9d:19:95:c2:96:80:4e:1b:26:72:f2:e2:e6:a9:
bc:44:33:fa:0d:e8:fc:3f:03:c5:01:1a:63:ee:31:
f1:9d:a3:49:77:89:0d:d8:aa:28:5e:d5:a8:0c:3d:
18:c5:a7:62:20:1d:38:f7:a6:44:0f:09:b2:7d:83:
54:f3:0f:5b:eb:b8:d8:eb:b2:d6:b9:96:f2:3f:05:
17:7a:a3:11:b9:5c:7c:a3:ee:69:3b:38:14:bc:1a:
f7:ed:e6:f1:c0:f7:90:c5:15:bc:aa:a4:66:99:a9:
93:68:7c:e4:61:08:c2:bc:6a:15:ed:42:1d:dc:b5:
a2:45:30:ce:57:5d:4d:af:15:8a:8d:df:1a:c3:9e:
65:56:af:ac:fb:52:fe:cd:e3:b6:ce:97:30:58:85:
a1:0e:f8:21:21:20:40:cf:73:53:ad:8a:db:e6:34:
ad:16:1e:05:97:6f:9f:3b:0f:88:9e:01:63:4f:0f:
af:a6:de:3d:e7:32:c3:52:f0:5b:f5:0a:eb:ec:f3:
5b:d2:25:89:6b:38:27:12:50:36:a7:bd:fb:74:1c:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:AE:85:36:2B:2F:A4:29:E7:70:D4:92:03:83:CD:8C:9C:F3:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6a47b96e-8e1b-3287-9626-eb798f7ee10e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:428::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:39:54:b4:89:5b:f1:c1:9c:37:74:60:9f:c2:12:c9:1e:2f:
08:1b:94:9d:55:42:73:9a:55:b2:0d:eb:91:ce:6e:b8:7c:82:
2f:d8:34:07:8b:73:ed:8a:6b:49:46:a4:87:c1:ec:b1:d0:92:
3c:dd:e8:bf:4f:59:7f:01:4e:b0:a6:93:45:d1:07:4d:19:97:
d1:82:0c:30:cc:5e:ce:01:a9:1f:cb:ce:04:06:41:8e:da:6d:
9a:cf:63:ed:e4:e6:a6:60:51:b8:cc:2e:ed:ac:a0:57:d1:74:
c0:fb:51:c1:72:b2:f9:90:51:e8:60:95:b9:b3:7e:66:9b:2d:
ff:cd:c5:93:65:bc:eb:50:cf:97:d1:46:ce:1b:63:34:44:07:
3f:ed:33:ac:1a:47:a8:39:63:62:1c:fa:ec:73:d4:e4:23:ed:
20:d6:f6:24:93:e1:77:70:04:e4:72:5e:58:7e:e7:9e:23:19:
d3:da:34:ad:70:46:1a:e3:b1:ef:c3:b7:b4:d6:ef:3b:57:cc:
3c:9e:1e:99:fb:3b:65:a5:cc:3e:d9:66:59:b0:de:99:12:7f:
bc:f7:56:5d:41:c4:61:a1:f5:5d:d9:bb:ce:67:bc:11:de:a6:
49:47:fc:76:d1:b5:19:9a:59:fd:4e:a2:25:15:32:d0:ce:17:
8e:7e:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:30 2026 by rpki-client