
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa
File: 0d8887fa-47ec-3f9a-8306-921ba26462c8.roa (raw, json)
Hash identifier: jlX82OLpSINRMFOw8UjrWf0rf4NIlUZwv7DQhcQOYfQ=
Subject key identifier: E0:9C:9E:93:AB:C9:C2:50:7C:F7:F6:AD:05:FA:21:7C:B7:92:65:58
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F498B5FD3498F6ED9B0813E40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 54253
IP address blocks: 2603:c0bc::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:5f:d3:49:8f:6e:d9:b0:81:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=dd6a6744-c9e9-4d57-90b1-8da49b3044ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:a2:f6:f6:6a:82:93:5f:60:a8:aa:40:82:
2b:d3:e0:58:70:f5:1d:8d:9b:bb:0e:17:e6:e5:cb:
52:08:84:5c:1d:97:f0:0d:2b:a2:87:08:17:fa:fb:
7a:5e:6e:af:1a:4d:34:55:be:bb:e6:a1:08:24:61:
13:b5:b8:b0:47:0b:fa:b4:d8:72:1c:d4:3e:07:e1:
f9:f1:16:0e:8c:13:3a:b1:d9:f9:09:a4:31:69:fe:
9b:c3:e3:01:61:77:db:ce:1b:23:00:bf:3e:06:e0:
c0:32:93:38:87:cf:db:65:c9:a2:f6:e1:c1:d3:32:
5a:c6:8e:c4:55:eb:86:82:06:67:f4:ad:30:10:5c:
82:d6:90:d9:55:43:eb:80:fd:61:94:75:ef:34:30:
d5:00:74:37:be:47:dd:8f:01:cc:31:a3:7e:ab:b0:
88:53:10:ca:69:df:39:17:4e:67:3a:d0:f9:30:d6:
36:bb:1c:f4:cd:01:ae:c1:8b:4d:3c:e3:80:e7:6d:
9b:db:1a:4d:a4:f7:ab:19:59:7f:60:ea:5e:eb:4e:
92:53:8c:47:d7:82:3d:1c:ad:ba:0b:4d:27:2e:46:
44:2e:2e:78:75:6a:3a:6d:09:44:10:1f:e2:55:e1:
0d:e8:07:91:95:df:34:c1:38:ee:09:19:aa:15:c7:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9C:9E:93:AB:C9:C2:50:7C:F7:F6:AD:05:FA:21:7C:B7:92:65:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c0bc::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:29:cd:9a:f9:04:25:aa:22:8f:87:21:3b:b3:0e:cb:d3:80:
07:18:09:13:70:b5:ef:92:38:6b:76:d9:0a:c8:e2:9d:83:63:
b5:0d:4d:ec:c1:b3:bf:02:6e:21:f0:1b:40:dc:0f:23:19:03:
da:a7:a2:54:35:b5:83:d7:08:b3:df:6c:b5:8c:cf:e4:05:1c:
c3:10:38:c5:b4:9b:7a:41:00:4d:51:30:ec:58:55:7f:55:39:
36:b5:6f:5d:7b:a2:c5:c7:93:2e:90:35:9c:3e:f1:e2:42:69:
dc:8c:9a:ca:31:3c:80:2f:dd:18:6f:71:44:65:28:01:27:1e:
a8:b3:6c:c7:fe:20:3f:00:28:72:7f:d5:f8:5b:b2:0b:60:75:
1e:a4:c2:d7:cc:07:db:6c:f1:26:f8:fb:51:58:96:54:74:86:
33:41:60:51:be:0b:3f:85:83:38:d6:81:72:77:fe:f5:8c:24:
c6:ba:a4:2e:d0:d8:82:a1:f8:3a:50:64:d3:67:59:65:1b:b8:
50:2b:fa:20:2c:fb:bc:54:36:64:34:dd:70:82:9e:1c:4c:5d:
8b:72:e4:ce:55:d7:d5:77:f9:7d:01:da:2d:b6:e3:f6:82:17:
e0:36:42:cb:d8:31:c6:56:ba:4a:d3:2d:0d:33:d7:d3:ea:42:
77:eb:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:10:42 2026 by rpki-client