
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43aaa6df-3de5-3b85-92ba-c1741fd69436.roa
File: 43aaa6df-3de5-3b85-92ba-c1741fd69436.roa (raw, json)
Hash identifier: +FCch3RzAiPJYaDeKvFqEIfxfewIb2Od6XfK78LtOo4=
Subject key identifier: 67:99:94:9F:D2:EA:81:28:9A:B8:6C:C1:C5:AD:10:17:AD:B9:F0:71
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E1A143233A36650F2E6573300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43aaa6df-3de5-3b85-92ba-c1741fd69436.roa
Signing time: Mon 08 Jun 2026 09:00:12 +0000
ROA not before: Mon 08 Jun 2026 09:00:12 +0000
ROA not after: Sun 06 Sep 2026 09:00:12 +0000
asID: 54253
IP address blocks: 2600:200c:2800::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1a:14:32:33:a3:66:50:f2:e6:57:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jun 8 09:00:12 2026 GMT
Not After : Sep 6 09:00:12 2026 GMT
Subject: CN=cc4b3b63-446b-47f3-8e70-0af74bc0043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:f2:0b:22:35:de:2a:e3:ac:8c:45:d1:a7:
a8:5f:50:b7:5b:52:ba:43:6b:4a:00:be:16:f4:3d:
54:08:b4:9d:f7:a4:3e:65:50:c5:4f:9c:1b:89:e2:
b9:45:b4:77:76:60:d1:19:09:1f:3c:c5:92:0f:76:
f7:58:55:1c:93:d4:d9:0f:ae:3d:b6:19:18:24:e1:
04:7b:e9:46:20:f8:43:f9:b0:15:63:f5:cc:37:ac:
0e:77:74:36:19:cd:25:1b:10:33:cb:84:20:1a:ec:
99:a8:2b:6e:50:dd:71:d5:83:0c:37:12:aa:2f:0d:
ee:1a:ea:57:8e:e5:78:be:24:fe:18:14:55:fe:f0:
bb:a8:3c:f9:41:5a:68:4a:c6:11:b8:0e:99:d1:67:
98:15:a5:5c:96:1e:77:67:d1:a2:a1:f9:ed:06:d3:
0f:ba:b3:20:cf:28:ce:31:3d:03:ca:4c:49:d3:0b:
ed:85:3b:5c:b4:97:f2:56:3b:33:a8:2d:13:e2:cf:
bc:26:78:fa:bf:91:d3:b6:42:ec:96:9f:5a:f2:5e:
c8:0f:1d:d2:05:9f:90:3b:c6:52:e0:42:b2:1d:32:
4e:e8:ed:18:5e:14:a0:fa:98:81:71:62:0f:72:7d:
d8:47:dc:ea:66:8a:ad:65:2b:85:f4:98:32:51:84:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:94:9F:D2:EA:81:28:9A:B8:6C:C1:C5:AD:10:17:AD:B9:F0:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43aaa6df-3de5-3b85-92ba-c1741fd69436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:200c:2800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:b1:4b:93:6a:0b:c8:96:a2:a3:c8:d1:70:07:bf:be:3b:1c:
cb:01:d5:80:2d:dc:fd:b6:36:55:5f:a8:91:f1:98:26:44:42:
35:20:49:66:a8:59:b2:64:e4:09:a4:57:82:85:06:20:67:82:
e6:42:17:fc:b6:ac:92:7b:49:94:42:42:0d:1d:0a:32:a8:02:
1a:19:88:fb:f4:a5:f8:d2:d0:79:d7:17:c6:b7:49:6d:e7:36:
2c:70:97:c6:14:e9:cb:6e:8b:64:b1:ec:5d:f8:e7:34:fd:1e:
2f:d1:c3:74:3e:4a:1e:06:b4:20:d7:ab:44:45:9a:42:f9:8c:
e4:44:7b:53:70:ee:bc:6a:a4:9e:ac:77:2c:b6:d1:e8:91:b3:
eb:73:4d:70:e9:1c:ef:4c:e5:58:ad:75:6f:fd:97:50:cf:41:
80:38:80:10:e2:87:56:9f:d6:1b:8f:08:eb:5d:5a:b1:a6:fe:
14:60:91:c4:35:f9:13:81:40:b7:12:62:4b:ba:4a:1e:a9:b3:
52:b9:a7:5e:b5:64:4c:f1:d0:28:17:fd:e1:4f:20:d5:a5:36:
b0:bb:dc:d7:7d:0e:9c:4a:d8:9d:86:0c:26:f8:ed:ca:3a:17:
66:8b:8a:1e:2a:db:e1:de:3a:05:74:6a:17:66:f6:a0:bf:08:
0a:f1:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:05:59 2026 by rpki-client