
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa
File: a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa (raw, json)
Hash identifier: 2KPXpT5+mKJS0RcO5JpWr7bZNLJ8YwYwAWDztDSIf5s=
Subject key identifier: 1C:89:7A:0B:0E:B8:76:A1:FB:6C:D4:66:BB:79:C8:D2:D6:1D:BB:AF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584EEA87557FCA261BFF8DA238C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 212755
IP address blocks: 2001:470:257::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:55:7f:ca:26:1b:ff:8d:a2:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=c18e065a-1465-46f1-ada2-367f8a58177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:4a:37:e4:d4:4b:90:e1:d2:76:e2:9b:97:
b4:51:8a:e9:4e:2c:f6:83:86:17:75:df:36:87:10:
1a:c8:fd:74:7f:8b:b4:91:38:89:17:81:3e:a0:c9:
82:ee:a0:15:95:25:af:fd:e5:10:7b:c6:22:46:5f:
f4:6a:b1:55:f4:70:3e:22:cb:55:e5:58:81:ec:6a:
24:8e:23:df:b2:7e:8e:2d:28:26:74:20:e1:87:55:
3e:94:14:71:3e:a1:a9:a3:c9:42:4a:01:1c:a5:63:
95:93:3a:e7:4b:70:d0:54:e9:27:ed:b8:b6:cc:c5:
80:74:52:bc:b8:d1:00:46:91:77:3b:72:a0:44:3b:
30:28:f1:99:be:75:0d:a8:eb:85:2b:fd:16:fb:17:
37:a4:56:4f:3c:20:c5:f3:51:0f:02:19:6c:20:ab:
40:83:ee:d0:05:11:a9:84:ec:55:a4:4d:de:6b:20:
b1:9a:ec:ef:d9:ae:d2:64:7b:b7:0d:37:5c:b3:3d:
ba:f0:65:d0:6c:63:28:ab:d4:ad:c7:35:bc:bd:b0:
2f:67:61:65:b1:dc:89:03:71:99:77:b1:75:23:1b:
c1:8d:81:bd:7b:e9:28:7a:04:25:28:0c:7a:86:ff:
0e:af:65:75:33:50:50:0d:f1:95:a7:96:3f:b1:8b:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:7A:0B:0E:B8:76:A1:FB:6C:D4:66:BB:79:C8:D2:D6:1D:BB:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a5c98c94-6f4a-3d54-a9fa-84396ed462ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:257::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:33:1b:75:30:0a:c0:69:af:36:96:08:01:5c:c1:95:28:0d:
dd:5a:a4:2a:86:c1:71:0d:b7:ce:ac:0c:f7:38:80:56:fa:67:
9b:5f:d9:57:3f:20:1e:7a:81:67:6d:47:f5:64:43:7b:6f:e8:
e9:95:e7:28:0d:97:03:19:ff:b1:4c:fa:d8:dc:36:58:d9:4a:
8f:39:86:d1:be:56:54:93:94:90:64:cd:e5:b0:df:1f:a9:3e:
2b:0e:76:3b:9f:94:f2:52:93:c2:e4:78:90:84:43:0b:a9:77:
e1:a2:f1:79:ac:62:05:54:2b:da:0e:e9:34:5c:1b:e9:3a:e0:
f6:a0:1d:da:ca:2a:c1:63:b7:ec:90:6a:de:05:b4:93:60:9a:
e6:b8:ff:54:ba:0e:63:28:56:e4:6b:ae:8f:4b:b3:0e:95:7e:
da:22:4a:ca:f5:94:d7:19:c1:08:3b:07:33:47:45:3c:75:d2:
d4:fc:bf:05:8d:b1:60:d5:33:54:0b:f1:f4:c0:2c:21:eb:ce:
06:59:dd:68:44:05:60:6b:e5:04:7a:fa:89:7c:e9:e0:8d:f0:
e4:00:94:f8:f1:1f:63:8f:eb:be:30:c7:06:ab:06:e9:a0:e4:
a1:72:0c:2d:12:3c:32:ce:99:35:12:22:8b:ae:17:2e:65:a8:
84:2f:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:11:36 2026 by rpki-client