
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
File: 963de827-0eb3-39c8-8bee-3f01a20ec876.roa (raw, json)
Hash identifier: VnVeOzyvkV43rlu/fOyghHvFDhlmFePhxkXzKfW9EqU=
Subject key identifier: 41:34:72:51:0A:C1:4E:5D:4A:C5:7D:69:7E:E8:47:E7:E2:8E:B4:92
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D59EAAA3E4015DA31AA0CA1E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 212955
IP address blocks: 2001:470:2a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:aa:3e:40:15:da:31:aa:0c:a1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=54be699a-89c7-4750-ba09-ee4fdd4d777a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:d7:16:70:11:2f:75:cd:73:be:68:54:fc:
9e:33:8d:06:b3:d3:34:b4:e1:74:71:8b:c0:1f:ab:
2f:38:a9:ea:6e:5a:70:c2:f2:b7:46:a8:0a:53:2c:
08:8b:17:24:eb:a3:ed:5f:9f:d2:25:06:6d:83:ca:
40:71:75:99:dd:fe:7b:e1:c1:f2:86:50:5e:92:ab:
bf:dc:25:7c:53:7a:48:95:9b:7a:aa:05:4b:94:88:
ea:da:d9:88:d5:70:24:06:16:d9:77:e6:6e:b1:2a:
25:ae:37:88:66:d6:30:88:95:29:d7:65:5b:42:39:
53:c6:51:0d:93:df:fc:ee:8b:ea:15:cf:86:1c:d1:
98:92:7f:60:17:be:57:dc:08:ff:a1:b0:1c:4f:47:
3d:8f:42:f3:81:bc:70:d6:21:6d:2d:c6:86:38:ba:
a2:df:69:44:65:b3:d6:de:b9:c5:db:3e:96:f8:51:
d1:d4:92:2e:20:75:04:c9:02:be:b3:cc:d3:99:73:
a2:cb:42:ac:3f:1c:c4:40:7f:ba:98:c4:11:cc:e8:
57:e7:c7:b7:9b:6f:ea:8a:ac:f1:dd:f4:f1:83:14:
17:4d:fa:ce:f0:bf:2d:36:18:c8:c7:23:ea:10:64:
0c:aa:49:43:46:b6:89:d4:3d:98:5a:b1:00:a8:c9:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:72:51:0A:C1:4E:5D:4A:C5:7D:69:7E:E8:47:E7:E2:8E:B4:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2a1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:b8:05:da:34:46:33:0c:e4:2a:73:1c:c5:70:fd:0b:1d:f4:
27:02:9c:ef:24:3e:1a:18:6c:c1:2c:8d:97:46:e4:83:ca:b3:
c0:39:20:a8:8f:3e:ec:53:bf:fa:01:ff:cb:4a:2e:58:14:97:
0a:da:24:07:23:3f:aa:0d:a9:25:61:fb:f4:80:fb:88:8f:4f:
3c:86:b8:42:27:0e:ba:9d:04:6a:1b:8d:82:da:71:ac:3a:f4:
c7:69:a7:ab:ea:90:3d:ce:34:28:31:8e:7d:b6:ea:4f:ad:04:
d5:e9:e2:25:7d:fc:73:bb:b7:14:72:f7:89:57:db:bb:8d:c9:
d2:d7:78:dc:47:76:30:0b:90:ac:d2:cd:3c:70:93:fd:bf:32:
48:d6:81:62:8a:87:d9:89:ee:8e:93:3f:a1:e7:1e:bf:55:50:
cd:b1:57:29:ed:e2:f8:fc:11:10:de:ee:73:18:1b:32:4a:f0:
b0:66:71:0c:e6:ab:ed:85:74:72:36:cc:59:7c:ca:6c:e2:ca:
71:8f:1c:19:2a:8e:75:0d:fb:d7:17:f7:c0:d0:cb:3c:33:94:
4e:b6:54:49:bb:6f:90:d9:39:37:33:d2:cc:04:40:fa:a9:e0:
44:8c:24:ac:a4:6d:2b:55:e9:cb:04:1b:5f:b2:df:28:49:1a:
8a:07:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 13:57:05 2026 by rpki-client