
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
File: 60a3455f-331e-3a81-91e5-291220065e1c.roa (raw, json)
Hash identifier: ISXeaIO0RpvfB0X0ZEmfx3pGe56icqtWvs5VXB6mEu4=
Subject key identifier: 0D:5D:11:81:89:BE:FB:10:15:30:62:94:DE:A1:E1:00:B4:B9:17:B7
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584AE69996B89F53DC75C79E5880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
Signing time: Mon 18 Aug 2025 20:06:09 +0000
ROA not before: Mon 18 Aug 2025 20:06:09 +0000
ROA not after: Sun 16 Nov 2025 21:06:09 +0000
asID: 31898
IP address blocks: 2603:c002:8c00::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e6:99:96:b8:9f:53:dc:75:c7:9e:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 18 20:06:09 2025 GMT
Not After : Nov 16 21:06:09 2025 GMT
Subject: CN=d8551cff-51ab-4144-b5dc-39880348d2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:1d:69:9a:37:63:5b:ab:ab:a9:a0:e2:d4:
da:67:11:e1:d0:56:d0:b4:41:9a:58:44:a2:b1:71:
3c:17:e8:50:1e:17:84:71:c5:7c:99:8e:bc:b3:72:
84:30:4f:20:8c:f9:cf:c4:da:3d:fa:27:b5:b1:78:
61:ce:0b:ac:37:7e:21:3f:8e:b4:d1:17:ae:f5:db:
e1:ec:f8:01:c8:33:85:4b:8d:55:cb:b6:46:bf:17:
67:60:70:be:fc:c3:27:cc:f6:88:93:69:43:81:78:
2d:26:84:ce:87:ee:30:dd:47:d7:6b:55:d0:f6:d4:
fe:cb:b9:64:dc:b1:c1:71:3a:f7:94:0b:29:92:87:
b1:d9:b2:34:c9:30:8e:63:5f:4d:fd:42:e0:14:d5:
8b:14:42:3e:cf:ab:a2:dd:9b:ac:63:1a:ac:eb:02:
ac:05:77:a6:e7:ba:ab:51:96:5a:a0:c6:48:5d:c1:
e4:fe:ee:2f:08:9e:5e:59:10:97:73:a1:62:b4:b2:
21:c4:94:d6:2e:73:fa:8e:46:83:ee:d6:28:dc:47:
e3:ae:73:b1:3f:47:5a:10:74:d2:78:b5:2f:61:d0:
b6:a5:94:be:43:f2:7e:fd:8b:5d:fe:43:07:46:66:
ea:ce:b6:ec:ac:d5:56:7d:cb:62:76:96:8c:e6:79:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5D:11:81:89:BE:FB:10:15:30:62:94:DE:A1:E1:00:B4:B9:17:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:8c00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:eb:62:97:98:3d:74:e8:15:7d:dc:e8:15:fc:b9:a6:86:8f:
c2:cf:4f:1d:98:1a:12:a2:ee:b9:19:bc:2b:b1:35:7e:ca:6b:
d0:10:6c:de:9f:5e:af:24:34:63:df:6d:aa:45:bb:c2:c6:1a:
b7:7c:37:5f:6c:ee:25:65:9a:47:dc:cc:7d:2e:5b:8f:58:83:
fe:a6:f7:65:22:bf:29:b6:87:e6:16:5d:1d:96:97:7b:4b:86:
90:c4:32:25:a1:39:fe:86:30:4d:ba:e0:c3:44:9b:56:be:58:
36:71:5a:86:3d:a7:45:11:e9:2b:63:3d:e0:ec:17:86:c0:54:
16:ab:d7:88:de:c6:8a:19:2e:d7:e4:03:f9:96:a7:f3:65:12:
38:ef:39:9a:40:a1:3b:5e:a5:83:be:92:f1:28:7c:0d:23:ed:
56:b1:f5:34:58:38:ce:eb:86:f7:f0:9a:68:db:c5:2a:7c:5b:
25:53:93:2a:fd:b9:2c:56:34:a5:be:8e:f7:ff:ab:36:06:6a:
ea:94:3f:dd:02:7a:00:e0:b5:c9:0a:45:1f:bc:7d:41:5f:9d:
55:27:4e:d8:53:8b:01:11:12:63:99:1a:ab:af:c6:77:f4:f3:
c1:d0:2a:40:87:3d:3f:f5:72:d7:57:4f:46:31:86:f8:60:8f:
fe:15:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:51:45 2025 by rpki-client