
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2cf8058c-7f27-3030-9e9a-f36808c9c838.roa
File: 2cf8058c-7f27-3030-9e9a-f36808c9c838.roa (raw, json)
Hash identifier: wGjwoKcZRxlWw5Zk5gKdFhN5yAhZD49QWgX9sO12Uz8=
Subject key identifier: 1F:AB:08:37:D7:28:C0:DB:97:0C:C0:8F:05:BC:95:00:A1:62:AC:64
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CF6ECD2E4782BA0FC1E093100
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2cf8058c-7f27-3030-9e9a-f36808c9c838.roa
Signing time: Tue 24 Feb 2026 02:00:31 +0000
ROA not before: Tue 24 Feb 2026 02:00:31 +0000
ROA not after: Mon 25 May 2026 01:00:31 +0000
asID: 54253
IP address blocks: 2603:c0f4:2300::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:ec:d2:e4:78:2b:a0:fc:1e:09:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 24 02:00:31 2026 GMT
Not After : May 25 01:00:31 2026 GMT
Subject: CN=d4729753-7723-4c34-96d9-5156bcd78260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:e2:7d:0b:5a:e2:06:6b:dc:08:ce:5b:b6:
6f:4e:d6:7a:95:9e:00:95:11:de:d7:17:16:75:49:
25:27:a3:5a:26:95:46:b1:c3:28:cf:91:6c:39:70:
c0:46:d8:50:e5:0f:3e:a3:f7:cf:0e:19:8a:6c:19:
62:57:61:07:5e:9e:37:39:4c:93:82:1a:56:2e:6b:
8a:4e:a1:3d:0d:29:46:25:ed:8d:d9:71:40:36:15:
13:87:07:bd:59:0a:eb:d5:a6:d9:9e:09:15:2d:be:
13:29:08:fd:a5:87:6a:6f:c8:80:13:6e:3d:5c:3f:
3c:a5:f8:9c:ac:86:86:27:7a:0d:ee:e9:bc:ef:77:
17:a6:e7:13:e9:c6:45:a6:e9:01:4b:df:eb:ad:61:
ad:65:e1:1f:94:cf:ac:d2:25:67:6e:0b:e3:28:de:
2d:48:d3:4d:e7:c3:b9:a5:d7:7a:59:ba:c8:a5:1a:
86:f4:a9:2b:20:a6:d3:94:f7:1c:fc:41:5d:02:6a:
c4:e1:0c:7b:9c:29:e2:09:70:f1:5d:98:27:4b:c5:
a3:79:a4:c9:a2:b1:b9:2b:c5:34:7a:0a:f9:e2:ff:
9a:0e:8c:bb:f8:66:ef:6e:23:5b:fe:74:d6:47:bf:
b7:cc:0c:f0:55:f1:18:fe:c8:54:60:b6:fd:4d:bb:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AB:08:37:D7:28:C0:DB:97:0C:C0:8F:05:BC:95:00:A1:62:AC:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2cf8058c-7f27-3030-9e9a-f36808c9c838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c0f4:2300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:83:d6:56:34:01:40:84:dd:af:42:c1:cb:93:3f:a2:a9:2a:
fe:92:5b:be:01:4a:f6:35:ab:2d:5a:17:4f:0b:a3:32:84:db:
6b:c3:81:89:80:83:be:49:4a:9c:d8:b1:65:fb:c8:07:07:0a:
95:65:aa:fc:18:7f:d9:7c:bf:ea:79:c4:61:27:4c:f2:28:ae:
8d:38:69:1c:72:47:00:98:eb:5c:9f:d9:07:03:fe:76:37:1a:
a8:11:45:65:3a:15:f4:24:21:26:75:88:02:ca:de:b1:9a:4e:
11:f9:37:7d:7e:97:9d:91:06:b2:bd:33:d9:7b:2c:e7:cd:16:
95:bb:f7:22:df:02:0f:eb:14:40:5c:24:a7:44:86:c6:a6:9f:
0d:36:6c:ed:98:ab:66:32:21:df:55:91:dc:df:43:7a:18:9e:
ba:9f:8c:f9:48:ef:3e:48:47:43:44:c7:e1:37:2a:14:83:6f:
82:3d:d5:e3:95:c8:58:d0:c3:b6:27:f2:0b:c9:e5:23:9e:98:
e0:c8:2b:ca:02:78:c7:f4:e6:18:06:35:89:a6:7c:d9:07:77:
80:13:e6:0b:6c:0a:93:c8:84:33:b3:ef:97:3b:4c:77:3d:bc:
a3:f3:6f:bc:1b:f4:b5:6a:ab:32:5f:c2:2d:41:86:6a:89:c7:
a5:d8:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:12 2026 by rpki-client