
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa
File: 902850c1-b4ee-38b0-a3b7-5265b8d23981.roa (raw, json)
Hash identifier: Dhucpppqw2r4wmOnqHhvZxBezyHod2mBx3O+kBUUFJk=
Subject key identifier: 92:95:C9:2E:0E:61:7E:8F:49:C1:E8:D4:A4:C7:7C:77:99:56:B8:18
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F427826CD9238466388A08680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 32575
IP address blocks: 2001:470:324::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:26:cd:92:38:46:63:88:a0:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=f88cf2c9-1c97-4015-be1b-60a87c655436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:ca:8d:17:51:e5:87:7c:9a:63:59:1c:36:
56:01:ee:a3:bc:d6:2f:29:08:36:dd:7d:3d:e7:4f:
dd:57:c5:14:f0:63:86:16:2d:1e:a9:aa:38:8c:8e:
f3:fb:ec:75:61:fb:8a:09:7f:50:22:de:b7:fe:05:
d3:56:4d:84:1b:cf:19:3f:eb:b4:7a:25:4e:0b:c5:
b1:49:e7:20:3d:22:ec:78:7c:f6:63:b0:d7:ea:ce:
67:ce:6f:d5:d7:85:ed:c0:a3:65:e8:dc:49:57:55:
8b:56:bf:ea:e3:50:e9:e7:e4:25:8f:31:d4:77:1c:
fa:6f:44:1c:d0:53:e6:51:1d:4f:ff:1f:1e:d7:f8:
82:0c:c2:7c:5f:7f:74:e1:88:38:d2:f0:c1:a8:08:
41:01:c9:cb:b7:d9:12:4b:55:36:60:88:23:22:51:
91:48:d0:72:df:c9:06:10:b0:63:77:a3:d0:76:0b:
5b:63:e4:10:07:1f:43:49:92:b4:fc:5d:ec:93:9b:
62:53:2b:fd:24:76:4a:1e:cb:08:4e:f6:c2:fb:12:
f9:6f:9e:73:ea:f6:56:ed:64:c7:1d:c6:24:61:e8:
92:e6:be:33:4c:d6:94:f3:14:c7:65:0c:71:10:bf:
44:f6:e9:ab:be:b2:3e:bb:52:48:db:e8:49:09:f5:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:C9:2E:0E:61:7E:8F:49:C1:E8:D4:A4:C7:7C:77:99:56:B8:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:324::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:7b:ea:ab:54:d3:d5:7f:f8:43:9a:14:2c:9e:8f:18:74:ba:
98:81:d4:9e:ff:ce:a6:d7:ba:94:8e:cb:c0:98:f5:f4:f6:26:
c3:1a:1c:ca:6a:6b:c6:9f:92:d5:0f:2f:12:b5:c8:7f:a1:fc:
d6:a8:b5:e6:00:42:5e:72:2a:4a:11:87:33:17:91:eb:df:0e:
c4:23:94:c7:f6:de:85:29:8a:f6:3c:0f:a4:f0:f5:1b:99:3f:
3a:13:8f:a4:6e:89:a5:bb:c0:f0:d1:11:37:47:67:d6:71:42:
8b:92:33:02:73:3b:f6:f8:e6:89:66:d3:e5:68:bf:c7:65:3b:
7e:d4:5a:c7:c4:ab:3a:db:7d:a7:21:1d:6b:6a:5b:7d:3d:db:
fe:cc:1e:cb:80:df:c9:92:4c:e0:b1:18:d4:f2:f8:22:0e:a9:
08:d0:fb:fa:b5:f8:47:08:3d:42:17:35:68:d3:6f:52:48:13:
be:79:2f:8a:e5:d1:58:bf:23:25:a2:11:c4:6c:58:8f:72:62:
42:a5:5e:e6:81:a9:89:72:29:19:ef:63:e4:6b:f8:4d:b0:7f:
54:85:6f:e5:9c:fb:11:c4:e8:b9:90:e5:0d:e8:dd:80:12:bd:
68:a8:a1:a9:d1:79:ff:8d:5c:a8:d0:f6:62:89:75:c8:82:a1:
6d:42:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:21:52 2026 by rpki-client