
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03414c25-6008-3395-bfc0-9e3381606bab.roa
File: 03414c25-6008-3395-bfc0-9e3381606bab.roa (raw, json)
Hash identifier: dVEBG1YQdQcWduUVB+ae8o3TMAhJLYAr+4l3KPL59lM=
Subject key identifier: 28:68:44:3A:D3:A0:FC:19:E0:DD:2F:8A:B9:45:4B:D9:0D:57:39:31
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F103790A6F9F73178094B5BC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03414c25-6008-3395-bfc0-9e3381606bab.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 2603:c001:2c00::/39 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:90:a6:f9:f7:31:78:09:4b:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=87998bee-93e0-4e63-b0f6-a8de3af042b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:77:d3:63:79:0f:c4:2b:fd:6a:0e:27:c3:eb:
ad:88:ee:f9:38:95:ba:7b:72:a1:f2:5c:4b:02:bf:
a5:7a:a5:ff:d3:9f:c8:af:29:3e:e2:25:74:24:ad:
61:41:e0:b7:06:98:7f:54:5e:2c:7f:f7:18:7d:f1:
c6:25:45:9c:52:ae:5d:4c:72:67:81:84:3f:57:0d:
32:3e:dc:da:1f:00:87:6e:5d:0e:ce:66:72:56:f6:
93:20:c8:98:7e:ab:dc:21:c9:16:86:9e:86:9f:4d:
3e:31:d0:b2:b2:d9:a3:a1:fb:50:3e:81:7f:f5:17:
34:e3:24:a9:cc:4e:e1:2c:63:23:05:41:b1:64:60:
82:18:8b:09:23:9f:24:ef:e5:df:b6:75:fa:06:65:
3d:1a:3e:81:6e:73:e5:6c:0c:ea:d9:89:ef:57:60:
7b:27:3d:eb:b7:33:5f:63:95:b7:0e:2e:62:bc:83:
1f:da:06:09:9b:44:63:38:51:6e:5e:28:da:f7:21:
11:9d:51:10:45:a1:4d:c6:21:52:7e:0a:21:f6:5c:
41:84:d6:98:4c:ff:a7:79:df:09:b6:3f:1d:57:58:
7a:9c:78:db:c1:57:d5:ae:18:97:6e:64:c5:22:4e:
da:00:62:a3:8e:55:4e:31:2e:fd:c2:69:b9:c2:c4:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:44:3A:D3:A0:FC:19:E0:DD:2F:8A:B9:45:4B:D9:0D:57:39:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03414c25-6008-3395-bfc0-9e3381606bab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c001:2c00::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:d0:32:7f:9d:88:36:fb:11:76:db:31:58:57:df:35:ac:ab:
96:61:d6:8b:2d:9f:9b:d8:e2:3a:13:73:14:45:ce:4c:14:4b:
2c:f2:7b:3e:69:fe:6d:42:37:3e:b4:50:53:66:58:77:f1:47:
7e:5f:2e:3b:df:ab:ae:76:20:53:6a:12:cd:24:6f:81:17:4b:
62:6d:e1:fa:98:0b:46:c2:27:a1:a9:62:36:d1:09:6c:b8:38:
f5:9d:98:bc:5a:a0:8f:6b:cb:db:2d:3c:5f:71:e7:57:9c:85:
72:c0:d1:17:c3:b4:e0:6a:99:62:ea:26:2d:1f:37:e8:b0:c7:
09:e1:8a:20:e9:a6:6a:b6:c8:6c:84:be:8b:60:32:16:b1:d8:
75:b7:3e:d2:7e:b0:68:79:d8:b9:ec:f5:0f:06:55:29:ce:43:
bd:e5:d0:3c:68:d5:0c:3c:37:c5:0e:bb:9c:ce:d4:9a:b8:a0:
04:13:b3:a0:35:90:c0:ee:ff:8f:eb:3b:51:f3:89:80:76:75:
f2:f4:a2:24:e1:7a:c3:33:ed:03:d2:67:44:ec:24:89:62:58:
25:ea:9f:02:49:42:de:ec:5a:4e:fa:92:19:80:c8:f5:62:96:
ec:a7:32:ba:af:69:1a:42:c1:6c:09:7c:cd:55:59:7a:ad:c3:
cf:b2:b3:0f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN5Cm+fcxeAlLW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
ODc5OThiZWUtOTNlMC00ZTYzLWIwZjYtYThkZTNhZjA0MmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3fTY3kPxCv9ag4nw+utiO75OJW6e3Kh8lxL
Ar+leqX/05/Iryk+4iV0JK1hQeC3Bph/VF4sf/cYffHGJUWcUq5dTHJngYQ/Vw0y
PtzaHwCHbl0OzmZyVvaTIMiYfqvcIckWhp6Gn00+MdCystmjoftQPoF/9Rc04ySp
zE7hLGMjBUGxZGCCGIsJI58k7+XftnX6BmU9Gj6BbnPlbAzq2YnvV2B7Jz3rtzNf
Y5W3Di5ivIMf2gYJm0RjOFFuXija9yERnVEQRaFNxiFSfgoh9lxBhNaYTP+ned8J
tj8dV1h6nHjbwVfVrhiXbmTFIk7aAGKjjlVOMS79wmm5wsTPlQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFChoRDrToPwZ4N0virlFS9kNVzkxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDM0MTRjMjUtNjAwOC0z
Mzk1LWJmYzAtOWUzMzgxNjA2YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAASww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAd9Ayf52INvsRdtsxWFffNayrlmHWiy2fm9jiOhNzFEXOTBRLLPJ7
Pmn+bUI3PrRQU2ZYd/FHfl8uO9+rrnYgU2oSzSRvgRdLYm3h+pgLRsInoaliNtEJ
bLg49Z2YvFqgj2vL2y08X3HnV5yFcsDRF8O04GqZYuomLR836LDHCeGKIOmmarbI
bIS+i2AyFrHYdbc+0n6waHnYuez1DwZVKc5DveXQPGjVDDw3xQ67nM7UmrigBBOz
oDWQwO7/j+s7UfOJgHZ18vSiJOF6wzPtA9JnROwkiWJYJeqfAklC3uxaTvqSGYDI
9WKW7Kcyuq9pGkLBbAl8zVVZeq3Dz7KzDw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:29:15 2026 by rpki-client