
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa
File: 43228dc2-fee6-3213-85b8-367652bd3ae7.roa (raw, json)
Hash identifier: DkJCX8yc4/FhPpm7wzFUqzHlaeAmu6gf2HV+SK4lu/w=
Subject key identifier: 1C:76:69:3A:91:C8:6C:BA:6D:C6:C4:FE:02:E8:CB:87:3D:F0:A8:BE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584EDC9220CCBB94BCCDCAD80800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 217
IP address blocks: 2001:470:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:20:cc:bb:94:bc:cd:ca:d8:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=53fbadc9-7346-4a3b-881a-c750205d753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:a9:ae:4c:1a:81:a0:3f:e8:e4:c7:10:b7:
8e:40:53:ea:7f:90:83:ee:d8:55:6c:47:a5:b2:de:
c0:2b:4b:ad:94:ab:72:04:03:8d:40:ee:78:4d:68:
f4:30:e6:2e:bb:6d:19:f2:98:6d:9a:c9:b7:ee:1b:
f9:da:dd:45:f6:a2:a8:b9:71:8e:a4:e8:d4:79:e8:
ab:80:cd:3d:6a:7e:8d:fe:58:f6:34:22:29:b4:55:
94:29:7d:9d:92:c9:08:fa:17:8b:85:f4:2d:83:6d:
ab:a7:83:5c:5f:fe:94:60:df:24:cf:07:91:67:0c:
3d:12:9e:5b:88:91:a4:5c:5f:1a:03:8f:e7:c2:4d:
75:d1:65:28:6c:b1:d0:45:ce:7a:ae:04:e2:0b:c4:
3c:8a:ba:4d:40:ce:1c:db:59:b2:ee:1a:92:55:02:
fd:2a:50:85:9b:ef:b1:2d:40:8a:2a:30:8d:9f:68:
bb:71:b1:46:c5:cd:7c:53:69:ce:d6:a9:66:26:a2:
81:e3:cf:cd:cb:e0:95:57:b2:e6:fc:e2:fd:25:13:
4d:3f:98:6d:dd:14:c6:d6:27:b4:32:e0:4c:a1:f6:
68:08:50:8c:f3:8a:fd:23:ac:61:f1:b9:8b:bf:1b:
dc:99:ea:23:f9:f9:56:68:d5:94:01:2f:7e:d9:da:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:69:3A:91:C8:6C:BA:6D:C6:C4:FE:02:E8:CB:87:3D:F0:A8:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/43228dc2-fee6-3213-85b8-367652bd3ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:22::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:e0:14:ba:32:e0:e6:5f:51:3c:cc:46:7b:30:e3:4d:3a:88:
1b:a9:f5:77:f4:24:b3:a2:36:e0:45:83:ec:1b:71:d8:96:a9:
3e:7c:76:ac:a1:61:42:e1:1b:9d:f3:52:21:e7:34:f9:55:8b:
97:47:0c:4a:bc:11:32:fb:42:ea:f9:16:78:9e:7d:25:58:97:
b0:ec:9e:39:96:6c:0f:d0:9b:01:05:2c:5b:d6:60:34:8e:aa:
93:cc:f2:fb:0e:8f:0b:c7:3a:28:04:db:04:00:cc:06:79:ab:
6f:c7:f0:b1:2d:a6:09:13:02:48:79:a3:ed:f3:1e:3c:3c:22:
62:90:66:cf:55:bf:17:72:0b:e6:fc:37:77:46:40:35:08:6c:
5e:b3:d1:1f:77:a8:6d:8c:d8:7d:df:c9:63:84:94:7d:d5:b2:
7c:c3:25:58:27:4b:61:d9:02:73:29:12:00:d2:2a:99:f1:fb:
a7:a1:22:73:b6:49:22:bd:43:1a:0b:c3:77:e2:2d:43:71:42:
d3:79:93:0e:b2:c9:4d:53:f0:a9:ae:81:a9:a6:18:fa:15:aa:
d3:78:61:64:03:98:f9:42:b5:8f:dd:7f:6d:23:46:d9:63:4f:
ab:12:71:83:cb:37:6e:c3:ae:2f:7f:f0:2d:ca:52:2e:3c:70:
ef:88:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:06 2026 by rpki-client