
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4cb9e600-7db6-350a-8031-44e010e65d99.roa
File: 4cb9e600-7db6-350a-8031-44e010e65d99.roa (raw, json)
Hash identifier: fXIlN6CH92tQs1xqp63v8NTQYNkD9tYkd5lslM5AfqE=
Subject key identifier: E9:98:AE:7B:E0:C7:F1:0A:F0:8B:44:1C:C5:9D:1E:CE:0C:04:47:43
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CF6ECCD7C79DA2FF1EB173440
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4cb9e600-7db6-350a-8031-44e010e65d99.roa
Signing time: Tue 24 Feb 2026 02:00:31 +0000
ROA not before: Tue 24 Feb 2026 02:00:31 +0000
ROA not after: Mon 25 May 2026 01:00:31 +0000
asID: 54253
IP address blocks: 2603:c0f5::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:ec:cd:7c:79:da:2f:f1:eb:17:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 24 02:00:31 2026 GMT
Not After : May 25 01:00:31 2026 GMT
Subject: CN=9f5f928a-6bdd-4582-85d9-b6a13340a7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:9c:e5:5b:83:6f:2b:2d:63:78:ce:fc:6b:
d3:c6:80:fd:10:ef:09:f4:bc:c7:6e:90:1f:10:d7:
ae:90:76:82:95:21:db:14:53:f7:21:26:88:84:c5:
89:80:f1:9c:1a:12:6d:fb:9f:5b:38:87:ce:83:3e:
a2:f4:d4:38:0d:ab:45:fb:5b:68:33:45:85:6d:e6:
d8:08:2a:b6:8b:79:b2:53:c2:00:a0:8e:87:cd:2e:
9d:1a:59:f4:d6:00:02:cc:c3:fc:b5:13:83:48:ad:
52:bd:f0:97:3a:79:22:4f:eb:7b:65:9c:52:19:1d:
e1:8e:bb:12:3c:54:92:8e:28:b4:16:8f:6d:f6:f6:
2c:95:c2:d7:76:fe:6b:9d:b8:df:28:b1:23:0c:83:
46:09:31:c8:10:79:cd:f8:6b:e4:e0:c8:41:28:07:
c4:59:ad:e9:11:97:e8:42:39:97:e2:d0:f7:8e:18:
ad:40:f4:5b:5c:be:fe:52:88:e9:24:eb:29:20:c4:
47:34:f3:4c:30:88:44:f7:0a:03:32:5d:94:36:8a:
06:79:e9:26:da:41:a4:f9:c6:c5:b2:75:c2:24:cf:
63:ee:76:81:08:69:4d:77:16:a1:d1:6e:7d:05:01:
35:23:dc:1a:14:7b:90:70:c2:b3:4e:e2:7a:fd:d0:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:AE:7B:E0:C7:F1:0A:F0:8B:44:1C:C5:9D:1E:CE:0C:04:47:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4cb9e600-7db6-350a-8031-44e010e65d99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c0f5::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:95:e7:72:8f:94:1e:a2:5d:c1:c3:75:47:bd:e5:54:c2:29:
fa:42:c7:f7:cd:bd:19:6c:e9:c1:7e:12:85:22:04:db:41:9c:
e8:b1:0d:6a:31:48:22:60:8f:e5:3d:81:5f:2b:d6:80:a5:d2:
16:91:64:f7:8d:f1:ec:f8:76:38:35:3d:84:e4:b0:d2:55:cd:
25:77:7e:6b:5e:1b:44:92:be:dc:45:5a:d0:56:a8:8e:02:49:
78:49:d1:05:69:0d:c1:ac:b2:9a:2a:45:84:82:45:51:ea:e2:
49:27:bf:e1:cd:61:c0:2b:8d:45:2e:ef:76:6b:98:71:c0:59:
f7:51:1e:6b:11:9d:ec:41:f9:f5:8e:07:6a:e6:46:45:1f:07:
c4:a4:18:6e:10:85:44:e1:70:01:73:4b:b2:5c:62:a5:83:a8:
82:ec:d1:cd:f5:64:cd:36:25:17:54:04:49:42:cf:1d:88:3f:
de:48:9e:45:59:3b:90:00:c1:18:71:4b:4f:41:1c:2a:c9:ba:
fd:42:5d:85:11:fa:aa:31:e9:2b:5a:7d:ca:f7:5b:3f:fb:7b:
41:b4:6a:d1:7d:47:fb:05:e6:ed:ab:d3:3c:28:f6:2e:f4:60:
d3:6b:30:1e:2c:c3:7c:9e:cd:a9:47:42:d6:ce:55:fa:2b:66:
87:34:46:24
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz27M18edov8esXNEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
OWY1ZjkyOGEtNmJkZC00NTgyLTg1ZDktYjZhMTMzNDBhN2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDic5VuDbystY3jO/GvTxoD9EO8J9LzHbpAf
ENeukHaClSHbFFP3ISaIhMWJgPGcGhJt+59bOIfOgz6i9NQ4DatF+1toM0WFbebY
CCq2i3myU8IAoI6HzS6dGln01gACzMP8tRODSK1SvfCXOnkiT+t7ZZxSGR3hjrsS
PFSSjii0Fo9t9vYslcLXdv5rnbjfKLEjDINGCTHIEHnN+Gvk4MhBKAfEWa3pEZfo
QjmX4tD3jhitQPRbXL7+UojpJOspIMRHNPNMMIhE9woDMl2UNooGeekm2kGk+cbF
snXCJM9j7naBCGlNdxah0W59BQE1I9waFHuQcMKzTuJ6/dDV7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOmYrnvgx/EK8ItEHMWdHs4MBEdDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGNiOWU2MDAtN2RiNi0z
NTBhLTgwMzEtNDRlMDEwZTY1ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPA9QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbpXnco+UHqJdwcN1R73lVMIp+kLH9829GWzpwX4ShSIE20Gc6LEN
ajFIImCP5T2BXyvWgKXSFpFk943x7Ph2ODU9hOSw0lXNJXd+a14bRJK+3EVa0Fao
jgJJeEnRBWkNwayymipFhIJFUeriSSe/4c1hwCuNRS7vdmuYccBZ91EeaxGd7EH5
9Y4HauZGRR8HxKQYbhCFROFwAXNLslxipYOoguzRzfVkzTYlF1QESULPHYg/3kie
RVk7kADBGHFLT0EcKsm6/UJdhRH6qjHpK1p9yvdbP/t7QbRq0X1H+wXm7avTPCj2
LvRg02swHizDfJ7NqUdC1s5V+itmhzRGJA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:10 2026 by rpki-client