
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa
File: ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa (raw, json)
Hash identifier: HKi0gCzUmSJ7kjyTnyAaTuZGr1LN0coYVCUQ9jfVMzc=
Subject key identifier: 9D:05:8D:12:2B:7B:E6:9B:23:C2:9F:79:41:90:77:74:04:14:A9:1D
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584EAD1C68CFE11E54DBB9687180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 21714
IP address blocks: 2001:470:3f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:68:cf:e1:1e:54:db:b9:68:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=ce1597b6-34d4-45d2-9120-8eb7cb137a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:54:5d:5f:96:9f:2a:4d:91:da:29:9e:8d:
09:85:e4:2c:e1:53:16:05:fb:f0:57:6a:6c:97:12:
30:f4:a2:3c:12:1f:ed:d3:f6:a3:5d:ef:20:78:dd:
56:53:e3:c4:1d:12:a9:d5:87:90:05:32:2e:04:ff:
71:c8:cc:81:f5:a9:2c:39:bc:9d:5d:48:7d:f4:fb:
bc:75:2f:c9:d5:97:78:36:be:97:6c:5e:ec:63:9a:
e6:1a:9e:b0:d1:e6:0e:4d:87:90:02:22:1d:7a:de:
7e:21:f8:fb:77:5d:a6:69:fb:bd:34:07:7d:5a:a4:
f1:a2:dc:83:bf:df:35:5f:37:15:94:50:84:b5:91:
76:6e:a4:c1:de:03:45:ef:a3:6c:70:e1:11:8e:8e:
1a:e4:9b:c7:45:f1:cf:36:2d:c2:a2:93:a8:26:5d:
78:54:e6:39:1d:76:af:b8:79:e3:75:fb:f1:9e:1d:
9f:4a:5e:65:f3:54:8a:d3:d6:45:ca:23:3e:3a:e9:
ce:4f:4a:f7:16:80:e1:7a:f5:bf:67:76:ab:50:0f:
95:7e:76:6c:03:3b:65:7a:34:be:be:4d:fc:52:80:
2a:23:59:a5:02:f9:91:72:b8:0b:d6:9a:32:c7:7e:
75:f9:31:e6:a5:b1:cd:d2:0f:92:eb:52:0f:27:f4:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:8D:12:2B:7B:E6:9B:23:C2:9F:79:41:90:77:74:04:14:A9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:3f9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:a3:19:43:b4:aa:5d:39:39:cb:3f:db:56:ec:39:de:e3:bd:
57:ab:3f:ff:af:c4:d5:68:2d:97:1d:b6:30:45:4d:a1:cd:d5:
e6:01:ad:d0:36:c9:66:64:ed:8d:66:a6:43:9b:9b:ff:a8:25:
ae:52:91:ad:3c:03:1b:1f:6c:39:08:22:6a:33:b5:8d:78:5b:
18:f3:85:d2:3e:53:3c:eb:80:8c:d4:5f:d1:3a:c9:69:f3:48:
05:f0:b6:7d:bf:32:13:21:24:54:25:bc:43:9c:76:80:d1:10:
cd:22:06:5b:28:80:8d:d5:53:c3:c3:1a:f3:06:f3:2a:ad:b3:
ce:ef:ac:36:20:3b:4a:07:d9:95:5c:42:4f:55:11:13:17:e9:
76:8a:65:97:cf:3c:88:44:e8:36:54:1a:35:ef:9f:06:b1:e1:
7d:fa:5c:38:83:00:a5:af:05:f1:0d:f0:97:50:7e:5e:24:e8:
44:86:c5:75:31:e1:b2:c7:42:e0:87:f6:68:85:3e:7d:70:72:
e6:61:38:84:d1:f5:88:89:79:4f:99:7b:9b:2a:25:22:9f:99:
c0:cf:36:a1:de:03:87:dc:1b:bf:6d:86:0a:10:bd:42:ec:92:
2b:fa:73:dc:63:53:71:1d:a4:52:25:9f:bb:98:f6:a7:83:78:
52:18:ca:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:22 2026 by rpki-client