
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb2c6614-3f96-3b86-be95-6dd48e422318.roa
File: bb2c6614-3f96-3b86-be95-6dd48e422318.roa (raw, json)
Hash identifier: 8E04NLLgL/F4VBRXZqHhfbwSCTTlcgV+Pq7XYQBQyF4=
Subject key identifier: B4:E9:18:99:01:05:F5:F5:C9:3B:18:98:39:F8:95:51:C3:72:78:DA
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F4987056AFA071C6365278C10
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb2c6614-3f96-3b86-be95-6dd48e422318.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397921
IP address blocks: 2001:470:533::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:05:6a:fa:07:1c:63:65:27:8c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=bbf334be-5c4d-4adc-b332-030e1d0e272a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:2b:4d:3c:01:a2:6a:7a:b8:9b:f7:0e:21:
92:04:c0:70:f2:ab:04:05:cb:29:02:05:35:6a:75:
34:c1:b3:ca:c2:00:fe:b5:5e:92:18:73:7b:f8:e2:
72:b0:25:83:2c:a2:0d:93:99:b8:cd:bb:92:8a:3d:
f3:f5:62:a7:e0:4d:b6:72:3b:f7:aa:a6:01:a4:5d:
5a:0d:ee:37:c1:35:b8:af:eb:af:93:ae:21:74:66:
da:17:88:8c:d7:2f:15:6b:25:aa:ee:9b:0a:eb:3c:
ff:c6:90:f1:ee:3a:8f:0a:f9:9d:61:0e:7c:59:c7:
54:34:0c:81:f4:ff:7a:32:23:36:37:44:86:64:a5:
75:8a:15:28:01:c2:52:2a:25:ac:5b:76:3d:27:73:
7f:74:ea:2d:4f:cb:8d:4c:dc:98:9f:4a:67:24:62:
71:53:be:76:6c:83:34:b5:1d:bc:d4:65:d7:ea:41:
22:44:ee:8a:e8:9c:a0:73:18:25:dc:40:d3:cb:71:
d9:4c:cf:96:d6:34:cf:a0:1c:70:24:1e:2c:c3:e3:
95:8f:30:97:39:54:46:8f:93:34:ad:06:ac:5d:c2:
37:8b:59:5c:3a:85:fe:47:e5:e3:ba:81:dc:8e:f5:
0b:f4:69:b2:61:59:cc:30:23:cc:73:8b:e0:a7:e4:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:18:99:01:05:F5:F5:C9:3B:18:98:39:F8:95:51:C3:72:78:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb2c6614-3f96-3b86-be95-6dd48e422318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:533::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:79:7b:4d:fe:29:e2:55:f5:42:c0:1b:bf:5d:81:59:b1:af:
8a:94:3d:f9:80:70:4c:20:8a:c5:2b:24:70:fa:ca:01:e7:5a:
f7:b6:d6:9f:2a:65:e6:6b:7f:ce:a8:61:ac:cf:a2:4c:3b:eb:
be:47:e8:2d:9e:d6:6c:f5:a5:3c:87:ae:3d:cf:55:e7:6f:0d:
a9:6a:83:45:43:1c:46:9a:1d:b5:b3:dc:cd:99:bb:3b:6e:d5:
bc:3b:e4:3c:50:c3:39:81:07:73:d3:84:b3:ef:04:b9:6b:be:
f5:b2:68:a8:e9:5f:21:e0:79:6c:33:cd:1b:66:fc:a3:40:07:
c1:2a:61:93:c6:8b:ce:ad:45:aa:14:37:85:34:e1:bc:13:cb:
4d:9e:ac:6a:6b:b3:6f:b6:4a:ea:76:16:8a:50:fc:aa:cf:ee:
2c:e0:f7:16:b8:98:6a:56:1d:c1:13:9d:71:4b:cc:a6:07:48:
e6:41:f4:f9:e8:e4:df:90:b9:09:59:d9:86:7e:63:51:54:ba:
fd:29:f2:9d:4a:82:63:ff:ca:ab:14:bc:fc:e6:1b:2e:c0:c6:
b5:67:5c:7a:97:b1:f1:4f:f8:b9:09:ed:46:22:b0:fd:39:ea:
d5:e4:8f:0f:97:4e:39:bb:cb:e7:b6:3b:bc:ef:64:9d:64:69:
ed:13:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:20:57 2026 by rpki-client