
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21eea410-2d36-3aed-bd15-722d0a64864d.roa
File: 21eea410-2d36-3aed-bd15-722d0a64864d.roa (raw, json)
Hash identifier: 5OY/6Dvx5UipgSCrTvrGZMGG/TtS6JcToR/pGFMtO0U=
Subject key identifier: 67:D5:30:AB:08:44:07:39:19:C1:1A:8B:A0:88:06:43:FC:2E:39:F9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F093D0C87E5019ACF7DABAB80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21eea410-2d36-3aed-bd15-722d0a64864d.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 54253
IP address blocks: 2603:c059:2000::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3d:0c:87:e5:01:9a:cf:7d:ab:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=93251a9a-a3b6-44c2-b598-7ed0925cb001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:55:b0:c9:63:bf:9b:41:63:20:8b:2e:95:
9b:30:3d:c5:93:73:4c:47:fc:06:4c:04:44:60:8f:
e2:22:1c:4b:db:9d:c5:70:c2:de:52:5c:0b:68:73:
0f:55:9e:fd:21:d3:11:39:0b:bf:16:d2:6a:0d:80:
9a:11:d1:01:d5:2d:0c:c3:03:9d:02:39:63:9f:c2:
b0:3e:5e:8e:26:7f:83:ea:9a:a2:d5:5f:b0:3e:64:
bd:5c:cd:dd:03:9b:de:b2:8a:5b:1e:7d:13:6f:94:
02:c1:27:44:0e:d1:95:29:79:d4:95:63:a6:47:2b:
30:30:6d:60:1e:5b:e9:80:da:60:db:8f:07:d7:b2:
c1:01:18:9b:fd:20:52:8e:7b:98:03:6a:1b:dd:2a:
34:86:00:96:cb:93:75:ba:40:7b:67:be:03:cc:49:
78:f6:81:62:48:98:ee:2a:1b:91:29:22:9b:7d:6c:
a9:cd:53:29:25:fb:97:2a:e7:47:01:4f:54:fb:38:
41:92:61:36:58:fe:b0:83:3b:c1:a1:b0:ac:97:98:
dc:69:76:c1:bb:77:0d:76:2d:99:aa:3c:6f:71:06:
90:e2:a1:49:b3:38:ee:90:57:52:39:e2:56:49:57:
fd:7e:40:f4:d0:46:4c:31:4d:58:29:77:68:cf:64:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:30:AB:08:44:07:39:19:C1:1A:8B:A0:88:06:43:FC:2E:39:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21eea410-2d36-3aed-bd15-722d0a64864d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c059:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:81:6b:08:ac:7c:33:b3:a5:85:70:5c:08:91:41:65:fa:cb:
ed:bb:47:a9:cf:f5:98:80:56:dd:73:65:8a:4c:7c:13:7f:e6:
c3:e2:3a:c0:28:33:1b:17:38:81:5f:c7:f7:16:78:73:69:2d:
b2:43:4e:6b:84:d0:50:1e:d9:4b:00:af:93:e1:98:cc:98:be:
fa:14:0f:ea:22:b6:e3:1e:a4:36:f0:b4:3c:5a:41:75:99:42:
c9:b5:ed:0f:00:3a:f2:e4:0a:7e:5e:40:cf:b7:81:53:16:b0:
ed:f0:f0:f6:f9:06:cf:01:4b:3d:37:4f:e8:97:7c:60:fc:bd:
eb:c2:dc:38:28:fb:ad:36:0e:58:65:8a:bc:cb:58:5e:55:58:
c9:25:7f:e2:5c:b3:5d:a3:b0:d3:30:2b:39:19:17:3a:36:c4:
1c:4a:09:c9:70:e6:3e:4d:da:47:60:46:84:1b:79:fe:16:9d:
5b:83:2d:53:68:4b:4d:dc:76:3c:06:0a:d5:0d:e5:08:77:54:
6d:98:99:e6:43:e2:ef:83:69:b7:8d:bf:6a:8a:70:b6:53:75:
14:2d:b2:20:12:e1:99:02:42:e6:b4:d0:62:b7:69:b0:87:64:
a4:74:d8:01:6a:da:e2:79:57:2c:6e:c2:cd:e7:51:6e:9a:3b:
05:09:f0:f0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPQyH5QGaz32rq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
OTMyNTFhOWEtYTNiNi00NGMyLWI1OTgtN2VkMDkyNWNiMDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDdVsMljv5tBYyCLLpWbMD3Fk3NMR/wGTARE
YI/iIhxL253FcMLeUlwLaHMPVZ79IdMROQu/FtJqDYCaEdEB1S0MwwOdAjljn8Kw
Pl6OJn+D6pqi1V+wPmS9XM3dA5vesopbHn0Tb5QCwSdEDtGVKXnUlWOmRyswMG1g
HlvpgNpg248H17LBARib/SBSjnuYA2ob3So0hgCWy5N1ukB7Z74DzEl49oFiSJju
KhuRKSKbfWypzVMpJfuXKudHAU9U+zhBkmE2WP6wgzvBobCsl5jcaXbBu3cNdi2Z
qjxvcQaQ4qFJszjukFdSOeJWSVf9fkD00EZMMU1YKXdoz2S8UQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGfVMKsIRAc5GcEai6CIBkP8Ljn5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjFlZWE0MTAtMmQzNi0z
YWVkLWJkMTUtNzIyZDBhNjQ4NjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAWSAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWoFrCKx8M7OlhXBcCJFBZfrL7btHqc/1mIBW3XNlikx8E3/mw+I6
wCgzGxc4gV/H9xZ4c2ktskNOa4TQUB7ZSwCvk+GYzJi++hQP6iK24x6kNvC0PFpB
dZlCybXtDwA68uQKfl5Az7eBUxaw7fDw9vkGzwFLPTdP6Jd8YPy968LcOCj7rTYO
WGWKvMtYXlVYySV/4lyzXaOw0zArORkXOjbEHEoJyXDmPk3aR2BGhBt5/hadW4Mt
U2hLTdx2PAYK1Q3lCHdUbZiZ5kPi74Npt42/aopwtlN1FC2yIBLhmQJC5rTQYrdp
sIdkpHTYAWra4nlXLG7CzedRbpo7BQnw8A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:47:43 2026 by rpki-client