
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa
File: b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa (raw, json)
Hash identifier: SEeDQC4EaB2Ax3gDFH4ue5x8SzOhzNRfASu7mR+b4bM=
Subject key identifier: D2:AF:14:C9:3A:DC:56:A4:6C:D1:86:3D:AC:56:1A:B6:A5:91:F4:43
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7EE0328A63E750261D400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 49650
IP address blocks: 2001:470:1e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:ee:03:28:a6:3e:75:02:61:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=6d844262-cc97-4a78-9e0e-4398041e0ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:74:1c:72:7f:ae:25:19:70:8a:62:46:7b:
2c:9b:ee:6d:9e:c0:88:44:4b:43:c8:e3:18:9a:eb:
2a:5f:24:ef:bd:52:27:3a:89:80:56:ec:ba:05:80:
54:f5:7a:ee:12:9a:8e:8d:19:2f:78:8f:08:b7:b8:
a7:6d:da:b0:4b:7a:25:dc:d1:aa:e9:c9:64:0f:c1:
94:ef:54:bd:87:df:1c:e0:f9:4a:61:b4:9b:ce:e1:
e1:99:e7:56:e5:d6:5b:5e:ef:34:9c:f3:02:a1:bc:
b4:89:4c:07:16:41:34:fd:87:0c:fe:43:6c:30:3f:
fd:e6:24:5a:6b:b2:1b:7a:5d:bb:05:ec:59:cc:b3:
c7:31:4f:15:b0:f2:f2:80:a1:8c:36:c7:b6:8a:26:
de:67:9c:24:36:a3:44:5e:07:f6:6b:39:f7:17:db:
ba:83:08:99:f4:9a:4b:48:74:23:90:bb:ce:3a:f1:
ba:1b:4c:29:e8:61:65:46:12:d6:2e:ea:02:83:39:
c2:87:5d:c1:2a:18:f8:c8:5d:9e:2e:44:d0:4f:ad:
a3:e2:bf:b1:8d:eb:25:f5:40:44:4c:60:55:15:62:
4a:3e:66:4e:6e:b1:b3:37:ed:a4:3e:74:63:ec:5e:
68:69:e6:1e:a7:b1:c8:b1:92:4a:1c:7c:9b:9d:f9:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:14:C9:3A:DC:56:A4:6C:D1:86:3D:AC:56:1A:B6:A5:91:F4:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1e3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:62:c3:1e:f2:3b:0c:84:6e:45:6a:a0:d9:ac:a7:58:bf:27:
f2:f4:bc:03:11:75:bf:df:a0:47:7f:bc:ab:c4:f4:bf:45:08:
b2:46:ee:cf:66:0c:b2:15:0c:a6:f9:c8:48:90:ff:63:80:29:
3b:9b:34:6b:6c:cb:31:e9:b7:84:fd:93:de:dd:d5:27:ba:7c:
8f:23:c1:3e:47:66:38:f9:74:7f:98:fe:5f:91:0e:d8:36:9e:
be:32:1e:b9:91:b0:b0:cc:8b:79:a0:87:7d:88:5f:f9:2a:33:
ec:bf:ea:41:0b:ec:40:e5:33:a0:b6:0c:a2:26:9e:61:2d:97:
f3:dc:bc:4e:db:a3:03:5a:f0:f6:7e:d5:4c:cb:27:55:c5:80:
df:bc:2b:66:f1:c0:78:68:f2:33:0d:29:5e:66:e8:38:5d:ef:
db:6f:85:b4:94:bc:91:83:bb:d7:1e:d6:65:84:5f:05:6e:b5:
8b:5e:1a:e8:4a:7d:6e:06:6a:0f:e0:da:30:bd:3f:e3:65:1e:
09:25:5d:09:de:73:7f:17:75:65:24:09:df:0b:5a:d7:9d:f5:
22:d1:7e:a9:91:84:88:5f:3c:a4:1b:d9:44:43:73:ba:b9:3c:
99:a6:32:df:ee:2a:90:a4:15:4c:9a:a8:18:c3:6d:5a:5a:78:
6f:79:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:19 2025 by rpki-client