
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2175c227-e031-3e47-a365-64e49007451b.roa
File: 2175c227-e031-3e47-a365-64e49007451b.roa (raw, json)
Hash identifier: x7VF1ayj6sXpOCR7JVjueAD5ibDqflb17WybDwbk7vk=
Subject key identifier: D1:F8:7E:DB:19:7D:92:70:79:AB:CE:89:EF:A7:04:11:E3:8B:92:A0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584B99D7F068CF4D634721341AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2175c227-e031-3e47-a365-64e49007451b.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 18041
IP address blocks: 2001:470:21e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:f0:68:cf:4d:63:47:21:34:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=840c3f14-a5e9-4e81-a2bc-93d696eecba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:20:d0:8d:62:21:b1:20:07:40:ae:4f:8b:
9f:bf:aa:e1:45:ae:e6:e0:62:e7:d9:d7:9d:1b:ae:
1e:71:f8:d4:2a:83:97:12:86:d1:bf:37:bf:32:1b:
a6:af:75:a0:57:70:71:ff:f4:0d:64:56:32:4f:ae:
b7:5e:16:37:29:4b:f1:57:e2:f3:d7:84:ed:89:18:
e1:eb:40:1f:b2:2b:44:99:bb:71:3b:76:32:82:fb:
71:29:58:d1:1b:65:d7:c6:4a:2f:c8:6e:24:b7:b3:
13:a0:dc:84:43:85:e8:d7:d8:d8:e1:63:3c:42:00:
49:13:55:64:63:a6:f9:cc:8c:58:b3:a0:c4:72:31:
44:e2:90:03:c2:ae:0c:6f:3b:41:98:cf:74:60:7d:
09:97:00:ad:30:27:23:0a:ee:fb:8f:44:ef:07:73:
b7:b9:f5:bd:11:23:f4:04:a7:fd:89:4b:86:ea:d9:
86:b3:33:3b:b5:68:3d:67:1e:02:14:f0:ed:e3:9d:
45:f1:7b:e8:f5:c0:3c:e7:08:42:b3:fc:a7:85:e4:
19:e9:22:35:96:05:6a:c2:6d:42:dd:b5:e4:4b:e6:
96:f6:28:9e:7b:53:95:8b:94:03:1f:4a:5e:d1:37:
6f:51:8a:28:4d:77:0b:55:01:e8:3c:03:00:e4:24:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:7E:DB:19:7D:92:70:79:AB:CE:89:EF:A7:04:11:E3:8B:92:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2175c227-e031-3e47-a365-64e49007451b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:21e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e0:b5:83:68:7e:cf:0e:a9:8e:f9:60:ee:f4:9d:c4:f7:f3:
96:d7:cf:1d:7c:cf:56:19:93:80:59:8e:8b:f5:74:a2:c9:d7:
17:86:3f:03:9c:ce:81:b7:33:3b:12:25:38:d0:79:9e:8d:93:
3c:3c:18:e4:c6:b3:c2:99:33:7c:ce:f8:0d:9c:77:4e:42:dc:
8c:70:f2:2d:7a:08:08:d4:2e:58:e5:24:84:9f:dd:4a:a1:17:
83:6e:7c:44:02:2e:76:79:1b:22:b6:65:83:41:f8:b3:6b:5f:
78:a2:fc:04:4f:df:b4:4c:4f:7a:38:4d:fb:7b:d2:de:f5:57:
fc:33:f1:6a:e1:0c:f9:21:8c:85:5e:6d:48:b0:16:65:bb:75:
72:bb:09:53:0f:ae:94:91:76:31:9d:c9:ac:9c:c9:e0:e9:b0:
67:3f:cf:36:00:87:ea:14:37:17:3d:1a:20:0e:c2:52:c0:27:
c6:03:4d:0f:ab:66:6e:4c:a3:17:69:d4:0a:9d:dc:3b:8f:c9:
19:94:59:e3:10:11:e7:ee:ec:c4:ac:81:e0:80:a7:54:c4:a1:
b3:2a:0d:70:07:75:30:f7:cf:63:95:f5:2d:9a:06:81:e5:e3:
f8:90:64:e5:9d:6b:26:53:c6:dc:b9:5d:b9:c2:ab:0d:14:5f:
90:5a:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:57:41 2025 by rpki-client