
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa
File: 4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa (raw, json)
Hash identifier: v3hdXKriQly/ueIMxWUP5GkFfbI2dZE7mwDaUsEsfHQ=
Subject key identifier: 31:8B:16:DF:03:B1:22:49:E6:13:B5:40:E1:A2:25:0C:1D:D0:33:D4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EA8E05285ACA04F4C8B300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 140577
IP address blocks: 2001:470:24a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Apr 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:8e:05:28:5a:ca:04:f4:c8:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=899b53f2-a3d2-4865-8fcf-a83c129def2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:90:39:f3:4b:7f:49:51:4e:d1:c5:f4:73:92:
d4:e8:da:ec:e3:6c:1e:f7:89:ae:ba:f5:ad:b2:cc:
ec:37:53:5a:c5:fb:d6:35:ba:c2:df:08:6f:63:95:
30:e2:30:eb:96:89:10:b3:20:58:6a:eb:41:02:d3:
b8:72:e2:9c:8f:a5:ca:cf:a1:ca:a5:ad:18:07:1f:
c8:93:23:e4:1b:45:b8:94:57:a9:0a:17:54:fd:10:
ad:95:1a:9b:37:d6:8e:09:e4:c3:2d:b4:cd:04:03:
2d:83:be:40:51:27:4a:09:a4:2d:17:25:df:f3:23:
66:6d:c8:7d:b6:59:f0:ec:57:79:07:bf:8f:6c:bd:
d1:1f:05:48:34:02:82:1d:09:18:e4:af:70:7d:37:
a3:38:09:bd:12:70:a3:aa:c8:41:a5:51:2c:49:ce:
51:e7:92:e4:6c:76:b9:5d:8b:d1:1b:b0:72:c2:a8:
f4:3c:47:00:67:b6:e5:b9:98:dd:11:63:94:ea:93:
3a:d5:44:3a:ee:1a:86:41:d6:b8:91:6f:1d:08:fb:
67:36:50:c6:86:9b:88:19:48:70:92:dc:ef:a7:f0:
19:19:ac:1f:bd:d2:5e:53:19:80:d8:ea:f3:8a:9b:
fc:3a:c3:45:8a:a4:bd:16:ba:3d:e7:87:b2:6d:b1:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8B:16:DF:03:B1:22:49:E6:13:B5:40:E1:A2:25:0C:1D:D0:33:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:24a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:ec:9f:9d:2a:e0:0b:a0:d5:39:77:2b:e4:79:bd:fc:c4:35:
95:13:1d:f9:33:a6:1a:86:b8:19:8d:39:62:29:86:dc:07:c2:
dd:58:9c:a7:f4:7f:9f:ce:bc:93:00:29:62:8f:da:0c:22:da:
05:6c:3c:59:65:57:13:7b:c6:05:2c:b0:68:7c:d8:90:06:79:
b4:13:c1:f9:36:e2:ab:c2:e5:9b:4d:f4:2c:84:a5:b4:20:96:
06:a0:15:7d:c9:78:73:9d:11:43:01:11:4b:27:74:23:91:8c:
fc:e9:54:1d:21:0b:5c:3b:02:11:3c:ac:48:89:93:14:5e:e0:
fd:2f:1d:bd:5c:eb:e6:6c:4f:50:31:6c:11:23:22:4c:6c:1d:
69:78:da:db:db:4c:ef:16:4d:a7:bd:27:03:0d:43:61:b9:79:
69:f5:9c:6e:d4:dc:51:80:e5:ba:d8:2e:29:7b:a4:c0:88:d0:
80:dd:13:ae:70:e6:64:ad:a5:86:5a:79:5f:70:3b:33:7a:ac:
2f:43:6e:d8:41:cf:4b:a4:ca:95:09:46:ea:e3:47:83:7a:f1:
f8:24:4a:09:17:c3:57:00:01:83:67:b2:40:0f:d5:2d:5e:56:
b9:4f:ee:7b:1e:24:11:1c:29:47:2f:63:6d:68:44:6b:29:c9:
e2:c1:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:45:59 2026 by rpki-client