
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa
File: 0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa (raw, json)
Hash identifier: dG9x4udyVB2fjFJ+hI00/cnivR8NZrDoOK7rcF/e7Mo=
Subject key identifier: 85:EF:A7:43:0C:21:57:65:A6:FA:D8:49:2D:72:B6:BF:9C:3E:50:4E
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D143DA8AA196A0A59327845C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 23511
IP address blocks: 2001:470:4c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:a8:aa:19:6a:0a:59:32:78:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=16f92908-a93f-469a-b2c0-788ec4f34a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:a6:0d:38:b2:53:30:ca:52:70:d2:20:b3:
46:8a:50:76:c5:8e:cd:22:52:fe:d6:0d:cc:72:2c:
3f:a8:dc:ed:96:7e:cb:d1:4f:5e:77:de:82:13:27:
a0:a7:21:a6:ed:7a:44:d9:d5:2d:1f:30:f4:2f:0e:
e6:1b:84:83:8c:7f:cd:30:ae:a4:cd:fb:b4:30:a8:
1f:a1:df:de:9b:8e:58:e2:9e:c8:ec:43:fb:a3:91:
ff:75:e1:13:82:ff:4b:1c:bd:c3:2e:61:04:99:be:
c2:a0:3a:b8:43:6a:e8:7e:36:c9:61:6b:89:6b:a2:
d9:95:57:37:db:c6:8b:35:1b:54:b5:a3:e3:03:5f:
ac:ed:35:a7:8c:8f:71:3a:79:ed:cd:90:13:49:0a:
86:59:dd:bd:39:54:74:a6:7a:60:99:2b:d2:20:09:
30:74:3f:42:12:c4:76:b2:ae:dd:53:80:28:9a:3a:
47:8b:63:44:31:bd:63:b4:93:4a:ae:2d:18:21:0c:
fa:e0:bc:2c:c0:35:ca:6d:06:7d:b4:ef:63:a3:67:
be:87:a0:86:f3:f8:86:55:72:a4:03:84:14:a6:7b:
96:27:96:34:01:ff:0d:4f:1d:f8:b6:cd:65:4f:38:
56:1a:bc:6d:6e:1c:3e:7f:4c:03:cf:c6:b7:20:98:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EF:A7:43:0C:21:57:65:A6:FA:D8:49:2D:72:B6:BF:9C:3E:50:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e472681-7bc3-3fd4-ac25-c7d94e24721e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:4c5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:09:9e:c2:9d:5f:6f:3b:71:6c:e1:d3:71:7d:b4:c1:10:e1:
4f:27:e7:38:fb:f9:d2:5f:90:2f:f5:56:e2:9b:4f:39:63:84:
fc:c6:cf:4f:53:f5:e6:e2:7b:b5:12:1f:fe:96:77:b3:e8:3a:
3a:9d:dc:26:fc:04:72:28:23:20:f0:89:1c:bb:ce:bc:2f:7b:
f7:37:8f:74:93:f9:b1:92:28:ac:03:fd:79:1a:c1:6c:33:1c:
c3:0d:6f:52:66:50:14:50:cb:87:8f:42:c4:8e:9a:7f:ad:5c:
c0:e8:aa:f5:fa:6f:a2:dc:df:90:b2:ba:a0:5c:21:9d:a6:03:
37:da:2e:71:d6:6f:00:f8:7c:1c:80:c8:c5:d3:df:e1:96:66:
d8:99:ab:f4:36:64:41:5b:5a:3e:81:d4:01:4b:12:a9:49:20:
b0:12:25:5c:da:34:61:47:37:1f:c0:0f:c7:2e:14:99:bd:3c:
4d:49:f2:9b:15:b9:83:93:d3:0a:23:d7:10:c9:dd:b3:62:5e:
60:82:30:9f:17:0f:5f:a3:59:de:31:29:bd:fd:0f:aa:ed:01:
e0:a4:bb:47:3f:fa:82:de:88:cf:99:cf:5b:13:36:56:24:eb:
6a:50:97:ae:a1:2e:02:b9:5b:3d:75:9b:a6:88:77:33:1c:a3:
7c:72:e7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:19:01 2026 by rpki-client