
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa
File: aafa7218-9f55-3fdd-b76a-aefa27a87775.roa (raw, json)
Hash identifier: bEGdqWJZ+bsX619WaPT/fMdKb0ejO/J0rwQNmcQGoKg=
Subject key identifier: B8:B8:D7:C3:D0:50:FF:25:42:DF:EE:57:AF:1A:02:A0:D6:67:C4:F3
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B1F01807900DF47368FA58400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa
Signing time: Mon 08 Sep 2025 01:00:33 +0000
ROA not before: Mon 08 Sep 2025 01:00:33 +0000
ROA not after: Sun 07 Dec 2025 02:00:33 +0000
asID: 40300
IP address blocks: 2001:470:266::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1f:01:80:79:00:df:47:36:8f:a5:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 8 01:00:33 2025 GMT
Not After : Dec 7 02:00:33 2025 GMT
Subject: CN=84a4b37e-b6d9-4742-bd67-cc763b3987ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:1d:e2:cf:0c:13:e4:c8:e4:75:54:bb:bd:
5c:72:a5:dc:6f:e1:73:8c:ec:3a:13:7e:82:3e:d1:
cc:9f:eb:23:4e:3a:6e:68:e0:fa:fc:06:10:b7:c6:
fe:ef:0b:50:33:e3:00:02:50:b7:1e:91:b5:76:dd:
27:67:78:82:46:43:c3:d4:d3:ce:61:ef:86:8a:67:
23:87:67:2e:b4:7a:51:aa:5b:e9:a9:52:c0:b2:35:
57:a9:4d:a3:6b:a0:62:89:1d:df:d6:a1:56:c2:49:
fa:f4:2b:e2:9b:6a:53:ac:7b:c2:ff:57:62:8a:8a:
3e:9d:ae:17:50:78:9f:5d:30:be:ba:14:d6:97:14:
3d:c0:d0:49:3d:cf:36:c1:6f:20:aa:a7:88:27:cd:
66:a1:5a:17:61:33:54:96:c1:17:8f:43:e5:39:c1:
6b:4e:d2:06:67:fc:29:a6:df:c5:b8:21:10:14:f0:
eb:cd:f5:b1:9a:6e:3f:29:32:1e:ed:75:54:09:c8:
53:33:2c:04:5d:e3:41:c2:f6:3b:d6:ad:61:83:62:
eb:0e:ab:c0:38:a2:0b:75:65:96:c8:30:e9:20:ba:
6f:42:81:8c:1b:f2:a6:9e:8b:d4:a3:02:b1:da:f7:
05:f7:72:bf:98:69:81:ac:4e:45:3e:f5:12:55:48:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:D7:C3:D0:50:FF:25:42:DF:EE:57:AF:1A:02:A0:D6:67:C4:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafa7218-9f55-3fdd-b76a-aefa27a87775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:266::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:00:db:ef:e5:6b:28:dd:cd:a9:d8:f8:e8:5a:fa:47:d5:7b:
7f:8b:70:f7:a0:64:a3:ea:e7:be:bf:44:3f:37:d0:39:a2:ea:
12:66:1c:d7:94:0d:0a:5b:ed:78:5c:8b:ea:cb:bb:46:1e:f3:
2d:fd:34:d8:e6:3d:f0:1b:4c:1b:45:1b:c8:b6:89:c3:e3:63:
74:d0:85:5d:5e:bd:19:5f:62:1d:b2:ed:c6:e8:0b:42:20:7a:
3e:d7:f2:6d:42:c9:87:13:a7:f5:9c:9f:05:3e:52:c7:0d:5a:
a8:c7:49:93:17:70:72:92:5d:36:65:80:25:99:df:00:66:bb:
3b:0c:a8:8d:d1:66:bd:33:d2:0d:ec:7a:d7:45:9b:a9:90:7e:
81:72:9c:4f:b5:a4:36:c1:ce:7f:3b:1a:91:15:48:48:ac:84:
9a:b8:c5:a6:3a:f8:dc:82:04:d8:9d:3a:b1:ce:59:a8:de:d5:
ef:23:c5:f7:da:27:20:56:d7:40:f7:2d:21:1a:93:a1:82:06:
a2:5f:c0:ee:03:69:5b:ff:5b:e1:63:1c:fd:b3:cc:15:6e:61:
5a:30:c6:91:d1:c3:fd:fb:eb:ec:5b:1c:64:26:96:54:94:bd:
88:dc:5e:b6:81:01:de:06:dd:bc:b1:3f:ce:0f:02:3c:7f:4a:
15:a4:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:42 2025 by rpki-client