
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf6c4ea-efbd-3140-8496-619a7fa81622.roa
File: baf6c4ea-efbd-3140-8496-619a7fa81622.roa (raw, json)
Hash identifier: 1P6RZkrUCxFD6pu3aSTv+Fgg9zomFmIAxWYASqE90s8=
Subject key identifier: E8:17:70:6D:D6:CC:33:06:68:EB:E6:B1:5A:9B:87:41:D1:11:27:97
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584CBDB1EC160360A6468EEBA840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf6c4ea-efbd-3140-8496-619a7fa81622.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 11734
IP address blocks: 2001:470:2ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 21 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b1:ec:16:03:60:a6:46:8e:eb:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=aaa453a1-4013-4908-b10a-b26166e447b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:74:56:7d:83:52:ee:d5:f2:11:be:0f:7e:69:
a7:d1:25:f6:86:ef:ba:8d:d6:40:85:25:ed:bc:5e:
53:b2:88:b6:18:43:b3:7e:a8:1c:58:8e:6f:75:7b:
b9:b8:23:ef:b3:ce:35:6f:0d:d6:a3:c5:4b:9f:35:
72:f9:9c:ac:4d:1a:07:40:a9:ec:83:07:0d:4e:bb:
39:53:38:6d:d5:34:3e:77:19:8c:c9:ec:95:f1:18:
a7:e1:bf:0b:72:c1:6a:41:c5:d6:4b:2d:df:bd:4a:
33:e6:76:ab:a3:4b:d9:22:cb:2c:92:fd:64:e6:54:
c1:4c:17:0e:43:33:09:e6:db:a5:e1:2b:03:9f:bf:
77:a0:c1:b9:5b:b1:e7:68:70:54:9c:36:40:81:f8:
27:20:58:56:f9:0c:5b:c5:7e:5f:47:40:3e:c8:dc:
4c:b8:82:d0:d6:c4:e5:7e:05:c0:ed:ff:cb:6c:9a:
5e:b5:fe:79:d2:b9:5e:7c:05:b8:ec:b3:a4:fa:a3:
ab:e5:4e:8a:ab:d3:87:7f:d0:81:00:8e:22:8b:fe:
17:f9:02:2b:35:f6:f6:0f:d3:05:bc:ec:0f:9a:e7:
d4:4c:92:9b:f6:a3:83:63:a1:91:5c:73:22:35:92:
20:58:56:b9:dc:07:2f:3d:88:c0:f8:4c:cc:7b:01:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:70:6D:D6:CC:33:06:68:EB:E6:B1:5A:9B:87:41:D1:11:27:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/baf6c4ea-efbd-3140-8496-619a7fa81622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:2ba::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b6:84:10:a7:fe:ae:20:90:f9:c3:0b:1e:c4:14:2a:5c:95:
99:e8:06:bd:75:6d:b4:41:5e:3b:d2:21:58:c1:d1:19:cb:c9:
85:3c:f7:da:c9:39:a9:e8:d4:3e:99:21:2a:ee:19:c2:69:02:
0b:03:46:66:c8:31:56:7a:07:27:c2:34:82:2c:d2:11:5d:82:
78:f7:f4:af:3a:c0:c4:b9:22:e4:9b:52:89:57:34:7f:6c:97:
8a:4c:80:ab:70:b4:65:5a:5f:a6:f1:50:79:d0:ce:6c:37:fb:
40:8a:44:8d:8e:8e:68:d2:18:90:43:51:b5:47:91:07:ee:87:
09:10:a6:50:a1:5d:f8:b9:3e:6f:9c:df:80:1e:71:8c:56:2c:
97:43:ca:11:1f:4d:3f:1e:f6:f8:a5:bc:df:d5:d2:a4:4d:17:
fe:ab:1b:0c:10:fc:17:c5:14:4d:96:08:7d:e9:30:68:a5:cc:
fb:75:ff:a5:d4:b2:1f:67:90:13:14:42:9e:c2:27:49:b1:f7:
63:1f:6f:56:d8:31:d7:68:e3:df:4d:b8:7e:54:18:c3:33:a9:
aa:c2:f0:85:14:14:78:2c:04:24:90:67:6c:6a:9e:61:90:80:
b5:f4:a2:e3:93:8c:e4:d6:dc:de:dd:36:d6:c2:d5:a1:07:0e:
0d:4b:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:57:28 2026 by rpki-client