
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa
File: cddff9b6-4295-3ac0-a198-c12221481fbc.roa (raw, json)
Hash identifier: k7VahRY1bEYYC4HWk/1z6wfxAL3K1RNc/P0MXYeTBx4=
Subject key identifier: 9C:18:BF:9C:17:70:AD:D6:BC:68:22:B6:ED:8D:8B:3E:86:0A:1A:98
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F093D0EB8648414ABF7E9BAE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 32278
IP address blocks: 2001:470:470::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3d:0e:b8:64:84:14:ab:f7:e9:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=3536d0e0-32ad-4c48-89e1-dfb78ea0f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:bd:05:3f:22:d6:15:6e:6a:98:b0:35:52:
83:94:16:0d:8b:98:86:9b:90:d8:61:51:6b:e0:c7:
7d:a4:da:ed:bb:eb:50:bc:c8:b7:de:08:81:05:f1:
8a:6f:15:f0:e7:02:2b:74:3e:57:cc:a5:e1:7f:c0:
86:fb:b3:08:93:f0:f9:56:49:f8:7c:f0:f2:a0:2a:
d6:b8:dc:9d:73:e4:5e:9a:13:a9:72:4c:b6:76:58:
bf:f5:8d:1c:70:54:a9:f3:66:4b:c4:ad:78:23:6e:
0e:c1:76:7f:25:65:5b:b0:73:20:57:ea:97:d0:a8:
9f:3d:b0:89:fe:f8:7a:c7:b4:d5:ad:44:8a:82:4c:
05:b0:43:6d:4f:4d:d8:92:3b:9b:b2:3d:c0:3b:b4:
9b:24:72:3d:5a:74:29:33:24:e8:b1:c9:00:e4:3d:
61:e0:e8:88:e5:e2:03:79:e8:af:e7:f7:2e:1f:2f:
77:a0:d7:5f:cc:4c:d5:b5:40:5e:e8:db:bf:17:7f:
a6:13:5c:4b:86:b6:f1:97:69:87:4b:da:1c:25:d2:
1b:5e:63:7d:68:04:be:91:8b:0e:1f:bc:73:d4:fc:
96:7d:80:53:88:12:1c:5a:b0:7a:26:45:0f:37:94:
8f:ec:24:4f:35:c5:58:98:fb:e8:5c:33:91:f1:95:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:BF:9C:17:70:AD:D6:BC:68:22:B6:ED:8D:8B:3E:86:0A:1A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cddff9b6-4295-3ac0-a198-c12221481fbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:470::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:27:43:9f:f4:07:ef:a7:5d:00:80:bb:27:0d:76:65:2b:61:
b3:f3:f5:3e:f5:a9:d7:b1:f2:01:16:90:a6:9d:46:86:cb:0f:
48:4d:18:9e:b5:22:e4:58:90:6c:f0:e6:d2:e4:85:6b:09:f2:
77:c2:dc:a8:bf:05:d4:a4:aa:87:2d:aa:fd:70:34:60:0a:d4:
e0:fe:b1:62:15:74:ba:f9:05:b8:81:fd:8a:57:ac:c9:85:40:
67:ac:b3:8b:25:e6:46:20:14:ee:44:48:6f:a2:65:20:30:68:
26:66:6e:2d:db:e0:c3:55:de:7c:7e:b1:8d:60:0d:49:ce:63:
76:03:69:62:30:02:f2:85:dc:cd:3c:95:af:cb:14:a1:af:4c:
88:15:b8:f9:27:ed:81:41:26:ae:6e:56:a5:40:bc:47:e2:d5:
71:8b:25:10:c8:4e:b1:0b:25:3e:f7:fd:23:b4:28:e5:36:3a:
e0:a5:07:74:0f:98:0c:b9:44:20:3c:20:5c:82:31:65:6e:91:
99:1f:fe:0a:74:e7:30:8c:cd:d6:be:de:e7:73:72:9f:5b:d7:
31:26:a1:c2:fb:b2:4d:1d:30:88:32:57:7e:3c:fa:60:2c:c0:
c1:11:4f:2b:af:98:fb:42:45:6f:96:df:61:52:3a:66:d3:91:
99:4e:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:24 2026 by rpki-client