
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
File: 4721ce1e-db3c-323a-81b9-82a9284f2c47.roa (raw, json)
Hash identifier: cReBoTDUI8lkJ0Z6ZvMvgQTwg77VSRnZW2kFQcg7cz8=
Subject key identifier: B3:B0:CB:EC:83:CE:53:71:FF:DE:68:DA:80:B0:9B:E8:A7:2A:15:D0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F103798749D6B8B6B3EDC9880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 2603:c002:2800::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:98:74:9d:6b:8b:6b:3e:dc:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=80e006c2-9820-464f-bd7e-76a2da2a0f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:29:6b:dc:49:5e:66:b8:fb:2f:8a:d0:28:
93:b4:79:06:0c:42:f6:e5:c7:07:75:8e:8b:54:0c:
1e:ff:76:c5:c9:e7:de:41:dd:4a:2c:53:54:57:01:
98:7b:5a:12:3c:59:21:bd:a2:c1:f6:9e:9a:1d:b4:
b5:69:29:51:a3:a0:b9:33:28:04:23:77:2c:13:b7:
1e:93:18:b3:b0:d2:3c:9e:26:48:b5:8a:f4:33:cf:
91:a1:a8:43:98:89:f5:b9:b5:f7:4e:b6:8e:93:6c:
f8:71:39:5d:fb:57:90:66:22:c3:87:bf:95:9e:dc:
5b:cd:ea:5d:d3:05:7f:e6:71:a7:64:86:34:22:c3:
eb:6e:86:0c:bb:f3:63:27:fe:b3:b9:06:06:bc:12:
4e:a7:e9:38:c3:1e:9e:43:38:27:77:f8:b6:b9:77:
6b:98:2c:fc:62:86:c6:e2:29:0d:c3:3f:18:01:d5:
3d:8c:25:db:fa:42:69:c6:3e:5b:d1:f8:4e:6e:11:
ee:02:c6:54:df:9b:14:b6:66:4d:60:1b:55:63:9b:
2b:6d:21:57:1d:85:c8:6f:32:97:4e:97:c8:64:98:
d5:27:00:c8:e8:8b:8e:9c:fb:0c:20:c6:9f:b3:66:
b0:78:4e:26:32:9e:4b:4f:53:5c:b0:34:74:d9:fb:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:CB:EC:83:CE:53:71:FF:DE:68:DA:80:B0:9B:E8:A7:2A:15:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:2800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:d1:20:74:92:c6:6b:82:19:07:bb:33:19:a4:5f:68:79:1a:
d0:a5:6f:8e:1b:f3:29:f4:9d:28:fe:07:15:54:40:09:d0:20:
5a:ca:08:29:a0:f3:39:fe:5b:b1:7b:30:76:cc:c3:81:f8:f4:
91:8e:59:67:1d:a9:20:3a:31:08:a2:05:47:08:5a:f5:e6:4b:
f7:ee:d5:1b:e7:ad:77:14:29:c4:15:1c:44:59:2d:bc:ef:ac:
7b:35:f6:32:1f:2c:f7:66:2b:86:00:04:c4:00:6e:0d:23:8c:
22:c4:b4:f7:2e:af:76:0f:e6:c5:06:ae:ce:96:39:bf:cf:e8:
2f:e1:08:d0:08:a5:69:a0:c8:96:1a:3e:2d:f9:92:40:be:1f:
38:05:19:cc:3f:bb:e4:fe:8e:08:97:21:2a:95:4a:56:52:80:
c9:c2:67:e3:07:70:1a:90:8e:b1:9f:f4:80:6d:12:95:10:e0:
31:d4:d5:c8:83:a7:d2:69:fa:ed:ec:be:07:84:58:8a:8b:7d:
d8:78:6d:c9:a3:75:e6:7e:e5:c3:82:31:f3:75:19:4f:ec:21:
39:3a:8f:d9:ac:c1:94:3c:3b:f7:95:89:85:ef:09:35:63:b4:
6a:2f:84:be:8b:40:5b:36:59:d2:d2:82:6f:59:0c:1d:d5:a5:
73:5d:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:17:15 2026 by rpki-client