
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
File: ad3907b2-32a3-3611-b9fc-0820dd81460b.roa (raw, json)
Hash identifier: DDbq/4d+KSnjebNBq4gwq4JGBR9MBXYg16+3/ZK9+Lc=
Subject key identifier: 2A:34:38:1E:CC:51:B1:6B:09:32:34:4A:0A:35:14:65:CA:57:C3:D8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584EDC92425003235C4F0ECD2E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 400686
IP address blocks: 2001:470:2f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 15 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:42:50:03:23:5c:4f:0e:cd:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=450c28d7-4aa4-4eb2-a0d9-2071a30f1a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:25:9b:57:34:8e:1c:85:c4:b3:27:57:a8:
78:ea:6f:e1:8a:10:16:97:ec:74:cc:b6:cf:62:e9:
97:00:64:9b:ce:8c:fa:7b:15:1f:f3:39:e0:4f:f6:
2e:ed:29:5d:1a:05:f4:52:7c:87:92:a9:53:97:de:
63:08:c2:bf:c4:d8:cc:cd:be:13:e6:ed:d2:5b:13:
3d:b6:88:9a:32:cc:17:ab:f8:3a:81:af:70:46:3e:
bd:ec:c2:65:42:11:56:0a:73:1a:75:c0:dd:4d:0d:
eb:30:85:92:ee:45:f3:b5:77:30:0e:ac:86:d7:37:
ae:4e:4b:62:43:f5:94:d3:19:77:fc:3e:95:98:eb:
c6:fe:96:43:29:f2:2d:8e:34:b9:98:c1:97:19:c4:
3d:81:75:56:fe:cd:ae:22:d8:ca:63:eb:8a:fc:7e:
10:65:e3:5f:99:43:d4:96:2e:ba:5d:6f:98:bf:d7:
7b:6c:f2:43:a5:83:e9:51:77:06:96:1f:d9:dc:72:
b9:ad:c3:aa:bd:59:40:02:80:b9:2d:88:18:af:d6:
76:e9:57:45:a5:68:af:27:84:51:b8:4e:bf:28:4f:
84:2c:0b:c2:4c:68:9b:4e:0d:e5:67:62:ba:5b:58:
b8:f7:9c:cb:c0:d9:59:2b:e4:0f:21:41:64:a8:26:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:34:38:1E:CC:51:B1:6B:09:32:34:4A:0A:35:14:65:CA:57:C3:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ad3907b2-32a3-3611-b9fc-0820dd81460b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2f3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ba:70:50:25:55:d6:2c:1a:39:b4:72:6e:71:9a:86:ea:16:
1f:b7:36:a6:90:d6:57:5e:2b:ca:af:e7:fc:81:51:a2:8d:3b:
08:7e:e8:e3:7d:ea:aa:d0:5e:fd:1a:10:e7:50:99:70:3e:9f:
d7:70:34:27:94:8d:ea:57:12:06:16:1a:af:5e:58:b7:12:0d:
5a:41:9f:b0:32:0d:d3:d1:79:d7:3c:f0:f8:6e:aa:88:e2:5c:
72:3c:80:14:02:ad:a8:6d:c7:65:1c:bc:0a:0d:0a:c5:5a:c5:
c4:37:c5:d1:19:c5:46:87:5b:62:c7:1b:ea:d8:6c:63:41:2b:
dd:83:f7:c8:e2:b7:4e:51:72:31:9d:9f:44:cc:49:32:0b:db:
77:3d:87:71:e8:12:84:dc:c0:14:36:df:13:25:4d:ee:3e:16:
5a:2b:90:23:b7:bf:e9:33:5b:88:60:0e:c2:2c:8e:49:51:bd:
42:5e:7c:c3:5e:d8:35:44:0d:16:71:d0:c8:48:69:44:08:74:
9f:01:29:ca:28:e6:ff:83:b7:a3:c4:c4:ff:cc:d0:86:3f:9d:
66:18:43:87:f1:57:1f:f0:97:82:e6:f3:7d:4c:8b:b3:ca:b3:
fc:21:b4:b8:e0:a5:c2:57:2d:54:30:f4:eb:56:1c:77:9d:64:
0e:51:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:33:51 2026 by rpki-client