
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa
File: 2b212c3f-0bb9-36d8-a389-9f219be91036.roa (raw, json)
Hash identifier: +Hv/e1u8IfGmvknisZAuI9v/C3gx8cGbIjkl/0pvTEA=
Subject key identifier: D5:E5:B2:A7:45:E6:3B:FA:02:BD:FC:BD:C4:8F:CE:25:CB:9B:02:01
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F00DCCABE457908679822C040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa
Signing time: Sun 30 Aug 2026 01:00:12 +0000
ROA not before: Sun 30 Aug 2026 01:00:12 +0000
ROA not after: Sat 28 Nov 2026 02:00:12 +0000
asID: 52389
IP address blocks: 2001:470:87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:00:dc:ca:be:45:79:08:67:98:22:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 30 01:00:12 2026 GMT
Not After : Nov 28 02:00:12 2026 GMT
Subject: CN=a675cb3d-beb5-4a98-9cef-dbde455137e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:97:98:1c:8c:bb:54:7a:f3:a1:1b:fa:63:
85:96:17:7a:a4:03:f4:05:43:7f:96:3a:aa:ff:80:
7d:48:5c:e9:84:2f:e8:87:e6:d1:ce:ea:98:47:67:
2f:f6:3a:5c:28:d8:63:0a:8d:b4:39:a9:90:75:8a:
04:a6:0b:3c:99:d3:35:7d:ba:76:3a:35:04:31:00:
45:0c:84:56:54:4b:86:88:c9:6c:43:03:8f:e9:4b:
b6:60:f2:24:c8:28:fd:5c:54:90:e9:88:7a:90:ef:
12:2a:f0:fb:42:42:e0:9c:9c:a2:31:d7:8b:ae:72:
01:ce:76:73:f4:99:d0:82:6c:ac:c4:0a:71:d1:c8:
b5:18:a0:e7:33:bf:a2:7b:4a:bf:9c:81:1d:ff:51:
7d:83:1b:5c:55:77:de:ef:47:62:2e:0e:4a:9a:ed:
55:7c:4f:4c:76:09:97:e2:4b:42:91:4f:9a:17:6f:
7b:3d:00:14:6a:35:ac:37:e2:f4:a7:03:e0:09:2d:
ec:0f:91:e9:cc:a8:c4:4f:99:13:76:ae:d0:51:ee:
65:b8:ef:11:45:1d:15:c3:c9:55:b9:84:18:28:6d:
bb:88:eb:8e:40:38:92:f0:e7:3f:24:76:55:4c:d9:
4b:cc:5d:72:1f:d8:59:74:57:23:d3:39:64:e3:e3:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:B2:A7:45:E6:3B:FA:02:BD:FC:BD:C4:8F:CE:25:CB:9B:02:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b212c3f-0bb9-36d8-a389-9f219be91036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:87::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:6a:31:b2:8f:27:9b:4b:aa:39:90:eb:41:60:43:cd:1b:7a:
52:34:7b:c9:fc:f2:eb:35:73:6d:29:5f:bf:fa:a8:83:b7:a6:
01:3e:32:f6:54:44:dd:eb:8b:68:77:cd:a0:34:23:7e:b2:e9:
7f:51:12:11:f0:77:80:79:c7:ac:e5:25:01:00:ef:39:93:8b:
72:a3:fa:89:4a:7b:ad:5d:7d:64:ec:61:e4:67:1e:6b:e9:9f:
c6:ec:e7:17:7a:d7:fc:ab:5c:1a:db:40:d8:27:c2:2a:7d:33:
80:2c:b2:35:df:1e:99:73:33:c9:6a:13:d7:b4:1e:63:21:ff:
92:46:a5:a1:91:ab:8c:92:83:29:f9:2a:37:3b:cf:7d:39:25:
4b:c7:a3:13:de:e3:28:7c:09:05:5e:25:d0:7f:fb:61:99:a8:
3a:53:41:db:c0:ce:d2:92:fd:10:b2:eb:b6:9a:ab:3f:41:d0:
bf:c2:4a:fe:36:8b:33:73:54:9a:cd:fd:e3:dd:94:15:c7:16:
be:07:06:40:1c:02:b1:b7:34:95:b4:81:48:79:d0:5c:f5:f6:
81:d1:6c:bd:a6:7b:79:cc:04:f9:e5:01:dc:52:e9:6a:73:16:
f3:52:6c:c0:c4:2b:87:e9:ea:78:3b:d2:0c:8d:1a:fa:ee:48:
61:43:57:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:21:35 2026 by rpki-client