
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa
File: cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa (raw, json)
Hash identifier: aLSEvUOxW4sto6EsYzouuOm86gHl9NoPMLX8r5sPaX8=
Subject key identifier: 73:5B:D8:74:12:B9:7D:19:B8:D0:07:60:8A:5F:E9:A1:E8:2A:07:37
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584D39DE215C8C5DC244D1646A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa
Signing time: Fri 20 Mar 2026 01:30:13 +0000
ROA not before: Fri 20 Mar 2026 01:30:13 +0000
ROA not after: Thu 18 Jun 2026 01:30:13 +0000
asID: 22131
IP address blocks: 2001:470:248::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:de:21:5c:8c:5d:c2:44:d1:64:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 01:30:13 2026 GMT
Not After : Jun 18 01:30:13 2026 GMT
Subject: CN=2a35ed70-f8b5-4544-a1d7-f78b3a91415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:d8:07:6d:08:20:b0:18:54:c8:88:79:20:
00:0d:5c:38:7a:63:2c:c6:47:a6:29:28:18:24:93:
65:dc:bd:8f:b3:3c:b0:24:2d:16:b2:a9:90:57:c7:
2c:7b:16:5e:df:93:3b:7e:b9:c1:ef:8e:ea:da:9a:
86:8a:40:18:41:ac:eb:8f:6b:5d:f6:68:3a:83:71:
d7:cb:c5:e0:6a:8a:8f:f8:75:e8:0f:94:97:eb:4a:
ee:d2:6d:3f:72:4c:c8:ab:5d:79:45:a6:1a:15:65:
c0:5a:b6:ec:0f:c7:86:38:e6:60:87:60:60:fa:67:
17:8f:9e:4a:d6:a8:e6:78:af:3f:b6:99:d7:b4:12:
41:0a:5a:0c:eb:af:df:ce:26:ea:bc:d1:f7:fb:ee:
5c:14:dd:9a:ca:04:ca:be:c8:5a:67:25:4b:17:d1:
b9:51:2e:d0:29:7d:02:51:9f:66:18:ee:30:ff:fb:
aa:5c:3d:ae:cc:50:00:26:41:b7:ce:8d:61:c9:f1:
56:a2:fd:1e:2a:8a:b8:17:71:33:f0:1c:7a:f4:4a:
fb:c2:c0:4d:17:9a:2b:70:59:52:0e:5e:33:55:76:
a4:09:bb:e1:c3:2f:25:81:a1:fa:88:3e:0b:a7:5f:
91:9b:73:9f:47:28:fc:b8:60:0a:a3:ff:d0:8e:e0:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:D8:74:12:B9:7D:19:B8:D0:07:60:8A:5F:E9:A1:E8:2A:07:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:248::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:dd:22:82:7d:e8:b1:e4:12:df:1c:8d:b0:a6:95:4d:f7:39:
c4:15:3f:04:40:f1:c0:76:38:c6:98:5e:7d:a9:96:53:8c:a6:
6e:16:4f:19:b4:6f:84:1c:b8:5c:22:90:1e:a2:96:a8:65:ba:
56:2e:cf:e1:cf:1a:22:ba:de:ab:72:90:07:89:11:c7:50:23:
5f:a4:2d:3c:26:41:b3:96:13:23:9e:49:5e:0d:a8:88:44:8f:
61:b2:54:64:4a:85:e6:1c:89:71:9c:52:aa:d7:87:e5:6a:97:
23:03:0c:87:bc:0c:6d:9b:06:4e:f3:ad:01:48:08:29:c1:ba:
94:9e:03:80:32:28:6e:25:9d:a8:db:35:40:cc:a2:a3:bf:1d:
12:4a:7e:41:15:45:ea:12:02:90:f8:5c:6a:a7:60:07:0f:ae:
b6:d9:50:4f:1c:b6:4a:72:13:7a:10:55:c1:de:e7:e5:d2:79:
ba:4c:b1:1a:80:7e:97:86:cd:67:4e:66:d9:da:70:fe:e9:4a:
3f:97:0c:cd:0b:cb:71:64:79:32:88:18:4a:80:19:7f:21:be:
e8:91:cf:ce:32:b0:6a:36:bf:35:92:39:3b:81:c4:aa:5c:2d:
6c:51:d9:42:d8:a8:43:d4:61:5d:2f:1a:26:f8:92:a1:d9:fc:
4c:b7:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:13:35 2026 by rpki-client