
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d87ad108-f561-3e96-8af0-9bd69e30c542.roa
File: d87ad108-f561-3e96-8af0-9bd69e30c542.roa (raw, json)
Hash identifier: N5itTc8B6lXyI3F2wjxNRgWBIscmPRflSyksAIM4inY=
Subject key identifier: A9:18:5C:34:EE:95:07:B8:BD:DC:D2:AD:F0:DF:E9:C6:47:03:81:F1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584F7E7E006AA251D7DE54FFBD40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d87ad108-f561-3e96-8af0-9bd69e30c542.roa
Signing time: Wed 14 Oct 2026 01:00:13 +0000
ROA not before: Wed 14 Oct 2026 01:00:13 +0000
ROA not after: Tue 12 Jan 2027 02:00:13 +0000
asID: 8851
IP address blocks: 2001:470:136::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7e:7e:00:6a:a2:51:d7:de:54:ff:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 14 01:00:13 2026 GMT
Not After : Jan 12 02:00:13 2027 GMT
Subject: CN=403de7b9-05e8-4ff1-b150-d8fb7f30e411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:65:f6:04:cd:d7:26:60:75:8b:6c:02:5a:
2c:4c:e9:54:10:f1:92:62:63:64:b8:c2:2f:06:e0:
ad:86:f9:0d:1b:56:a9:c8:89:fb:56:60:7d:72:24:
e5:85:12:be:2e:5f:ba:dc:8a:ba:11:2c:99:4f:55:
4d:90:51:a7:c8:71:8c:ba:97:b1:2e:85:37:27:c8:
88:51:8c:7b:ec:c5:d6:fc:db:64:ed:fd:f9:f6:6a:
1a:22:5f:49:e3:b9:57:fb:d1:a4:bc:f8:9a:1d:ff:
46:bd:32:6d:1b:51:cc:00:69:36:44:82:7c:dd:c5:
b1:b0:f9:ad:77:eb:4e:cf:0c:9d:0f:41:80:60:5a:
82:0a:f7:70:f5:83:12:78:0d:66:69:4d:58:bc:f5:
4a:0b:ea:e2:b5:ae:7b:76:30:19:19:19:b6:70:a4:
e4:a5:53:c6:f5:0e:82:d4:04:5c:9a:e8:a2:bb:b5:
b2:8d:e7:74:7f:7b:8c:ac:19:70:b5:c5:dd:bc:7c:
d0:a7:1b:51:a7:62:db:95:8f:d7:eb:0f:15:97:cc:
9c:34:4a:ec:f4:bc:cf:2b:a6:59:1b:3a:f6:c6:81:
98:ec:81:f9:42:7d:a2:c7:2e:6d:54:46:ba:63:b3:
f7:cd:ad:56:8d:c8:77:3f:34:81:08:99:7e:2e:d6:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:18:5C:34:EE:95:07:B8:BD:DC:D2:AD:F0:DF:E9:C6:47:03:81:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d87ad108-f561-3e96-8af0-9bd69e30c542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:136::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:68:47:4d:b7:8a:d0:c4:da:fc:74:5f:f6:05:e3:02:06:8b:
e0:e6:77:77:0e:81:72:8c:9e:be:de:25:9e:c5:bf:f3:b1:66:
98:9b:19:f5:33:39:3c:0a:c1:28:b6:c3:32:aa:6c:ce:54:37:
ab:33:08:28:db:db:69:f8:98:e0:e4:51:43:f2:fd:51:f0:45:
95:91:15:3f:bc:62:31:4c:e1:40:52:9e:a3:e1:78:58:7a:7a:
cd:09:9b:77:cb:75:30:c4:19:85:18:ba:e8:fd:ce:cc:6a:41:
de:42:5b:1b:f0:7f:a6:31:ec:fb:d5:f1:3e:a5:ac:dd:c2:fa:
45:40:1e:6e:b8:9c:54:7a:ae:dc:6e:75:f7:7a:2f:bf:6a:cd:
ed:da:77:4f:6b:c4:1d:d3:c1:3b:a5:09:76:31:a9:9d:b2:f2:
be:76:0d:e2:97:ce:0b:98:69:b7:42:c0:ee:13:4d:e9:41:bf:
8c:0b:d2:10:05:5d:11:77:db:56:c1:ac:82:3d:8f:98:cf:99:
08:64:f6:b9:c9:07:49:04:51:b5:b8:fd:ad:ed:4a:3c:a7:b3:
e0:c7:17:60:a1:95:e3:4b:85:48:7e:48:5c:43:34:a5:9b:cc:
39:a5:17:59:61:89:61:03:fa:20:aa:23:ef:ab:cc:31:88:53:
96:14:d9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:31:46 2026 by rpki-client