
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa
File: 8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa (raw, json)
Hash identifier: j35knwI1qF1h+NFS7RetqNS+J468Zd347Z5kCSrGJrk=
Subject key identifier: 1B:CF:B7:C8:51:56:12:32:7E:DB:78:1D:CD:3D:BD:4C:A8:EB:62:E4
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F9A685F9FB1F30020F4DA7100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa
Signing time: Sat 24 Oct 2026 01:00:12 +0000
ROA not before: Sat 24 Oct 2026 01:00:12 +0000
ROA not after: Fri 22 Jan 2027 02:00:12 +0000
asID: 215740
IP address blocks: 2001:470:2bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9a:68:5f:9f:b1:f3:00:20:f4:da:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 24 01:00:12 2026 GMT
Not After : Jan 22 02:00:12 2027 GMT
Subject: CN=2e377ba7-9205-4df7-b1b3-d4ccb4fd7751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:fa:15:6c:06:f7:83:54:d1:e1:69:c3:5b:
db:2a:89:bc:04:e6:c1:5a:f6:cd:65:82:c5:d3:d6:
46:45:42:25:72:64:0b:b5:9d:f7:9c:b3:5e:05:7c:
5e:19:1c:fc:7a:cc:9f:e2:98:67:c0:2b:95:78:88:
72:11:a1:cf:74:90:27:10:fe:c7:39:63:37:67:64:
11:0c:25:84:92:a0:a4:85:4e:fc:37:9d:d9:6b:76:
47:0c:01:9b:5a:bb:7d:46:87:44:c7:db:8c:11:63:
cb:0e:cd:0f:91:a9:63:08:8e:47:8f:e8:3d:57:08:
66:61:6b:b8:c5:93:c4:00:0b:d8:3f:f7:ab:9d:bf:
b9:6c:60:77:51:30:5a:82:28:c5:16:bc:82:2c:30:
39:e8:11:ad:7a:9b:f9:d5:ca:7d:12:04:35:7f:f7:
1a:bb:2c:ca:48:51:fd:79:94:5a:23:86:44:3c:56:
ad:67:92:25:42:60:20:78:a7:c1:c9:9b:6e:75:50:
00:cb:c7:4b:9a:2c:24:8d:5c:3f:6a:6e:f8:79:bd:
94:e3:ac:3c:1b:97:1e:5c:5c:f4:2c:7e:5f:f9:24:
5c:76:56:06:90:91:8c:d7:9e:68:c5:38:3c:cc:05:
1f:04:9c:f0:91:14:17:03:77:8c:dc:cc:50:7b:7a:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:B7:C8:51:56:12:32:7E:DB:78:1D:CD:3D:BD:4C:A8:EB:62:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2bd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c7:0b:9c:44:2e:13:68:3e:2b:1b:60:24:8d:b4:8d:a1:5b:
df:15:de:2f:d7:7b:ab:76:0e:bf:19:6f:15:66:46:13:ea:85:
62:a2:55:dc:2a:9e:98:a7:ab:45:8c:7f:c4:11:79:b9:68:c9:
7e:42:5f:a4:b8:b3:29:58:c8:27:11:58:73:bd:86:39:e5:e7:
c3:01:8b:e6:75:af:ec:b9:0f:cc:e3:79:a4:b3:7b:10:a6:95:
94:8f:db:af:5e:e0:ab:aa:8f:92:e9:45:e2:10:d0:1d:d7:ca:
4e:c0:a2:b5:e0:05:df:05:ed:c8:9b:f1:cf:ad:55:29:ba:33:
80:d9:32:26:fe:10:21:72:3f:b4:0b:ec:fd:64:7d:f3:e4:02:
da:5f:f0:e4:39:65:0c:a8:f6:0f:9f:e7:cf:e6:8e:24:ea:4d:
8d:b6:82:e3:be:10:b5:3d:76:3b:42:2d:50:4d:eb:8b:82:01:
30:a6:63:52:ff:36:b8:89:a0:a9:6e:ff:2e:f5:c6:0f:87:e2:
03:04:a7:f0:af:ee:2f:79:4c:60:0f:fd:d5:25:b5:3a:a2:ba:
c9:1d:6d:8c:20:1f:85:e1:f7:72:9b:9b:58:c2:1b:72:63:4f:
17:54:4f:d2:d2:0d:c1:26:1e:e1:ab:0e:cd:67:be:df:92:27:
f3:36:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:49:40 2026 by rpki-client