
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa
File: a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa (raw, json)
Hash identifier: 48p1+/LmFm79+/gsp7zf1Wp9A3OD5FOv/9CRFInJqKg=
Subject key identifier: B6:22:8F:98:8B:AC:D7:2B:4C:BE:DA:93:A0:EA:3B:DB:03:FF:67:11
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584E3A2F6CA6A2C13B05E013AE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa
Signing time: Fri 19 Jun 2026 21:00:12 +0000
ROA not before: Fri 19 Jun 2026 21:00:12 +0000
ROA not after: Thu 17 Sep 2026 21:00:12 +0000
asID: 3255
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3a:2f:6c:a6:a2:c1:3b:05:e0:13:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jun 19 21:00:12 2026 GMT
Not After : Sep 17 21:00:12 2026 GMT
Subject: CN=836e6b40-c686-44b0-bca2-79ea181648a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:d7:81:f2:ec:ce:77:9a:01:53:a9:74:33:
f8:b2:74:ff:bd:93:b9:59:26:d7:ac:cd:9f:5f:7e:
0f:2b:3f:48:4c:c9:8f:bf:20:9b:53:17:f4:05:73:
79:0c:c9:f0:0d:ce:36:c9:a5:14:3c:6b:c9:c6:ce:
ff:54:5f:0f:21:06:36:53:c0:48:3a:c8:53:38:38:
99:94:9d:96:d3:7f:5d:cc:60:d9:d0:8a:d7:60:3a:
cd:2f:49:ed:0d:9d:f7:c3:e7:5c:33:31:d6:24:b4:
ac:13:e2:40:30:44:3f:ce:0b:32:ba:da:5b:7a:c2:
ee:30:d8:ee:1b:a5:71:a7:8e:a3:9d:b6:0e:58:c3:
08:86:49:9c:b3:a7:a2:11:d4:42:44:37:4f:99:48:
3c:cc:65:fa:d5:62:8e:51:10:04:be:c0:c6:af:55:
c0:45:e5:5f:fc:d9:93:3d:49:3c:d8:fe:70:17:93:
e9:8f:32:8c:de:d5:96:43:ad:a5:e7:e4:b9:98:9c:
87:80:8d:07:31:eb:cc:cc:e5:0e:4f:18:e9:f2:11:
d8:28:9f:dc:1e:32:2d:2d:56:cb:c4:7d:aa:bc:87:
31:05:74:ae:ad:e1:f2:d4:9b:a0:a5:b4:99:9a:92:
ef:d9:07:e4:b0:c2:a0:7d:48:3e:18:f8:cf:34:ea:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:8F:98:8B:AC:D7:2B:4C:BE:DA:93:A0:EA:3B:DB:03:FF:67:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:86:7e:e2:69:6c:4d:8a:01:1b:70:53:92:b5:7b:cc:c6:29:
39:74:bf:54:31:af:d5:ee:b8:47:91:66:99:e0:17:e9:c3:29:
a3:13:9d:a0:30:29:60:90:04:56:ad:8f:8a:b8:96:2f:d7:a0:
20:37:9e:ac:39:73:5b:1a:0c:4d:63:b8:82:d0:a7:df:b3:38:
02:af:0a:f6:87:c5:7b:0a:f6:4d:a3:e5:77:c5:83:4a:9a:f3:
40:a5:8f:1e:59:9c:36:36:f3:0d:9c:e1:ac:f8:1b:ef:a2:28:
9c:7f:42:c5:38:2d:a6:bc:77:ec:fd:38:18:09:2f:4e:87:5d:
ac:21:88:7d:e9:08:08:e7:27:13:aa:55:e4:89:63:1f:3d:a7:
4c:74:d4:74:3f:44:69:ff:6d:5a:0f:7e:20:2e:4b:dc:f2:e1:
23:05:98:4e:40:7b:1e:42:76:0e:ec:11:57:ff:93:85:db:9a:
cc:4a:e7:a1:77:a5:74:8f:6e:8e:76:0b:cd:d3:92:dd:12:05:
b2:3c:f9:98:46:0a:10:84:5d:e5:7c:5a:f4:42:5d:e2:76:7f:
bb:b2:58:ad:20:e0:52:d1:7d:01:0a:2f:3b:fa:9e:ed:ca:e9:
68:f1:40:cc:59:c4:6e:18:9f:28:dc:f6:90:28:d8:a9:64:e8:
a1:3c:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:26 2026 by rpki-client