
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
File: 60a3455f-331e-3a81-91e5-291220065e1c.roa (raw, json)
Hash identifier: vNwpRTdMNvAUcABMtT3T4XwRupasgYUFNtPO7pGq+OE=
Subject key identifier: 95:99:3B:3E:1A:1C:F8:E4:66:3A:92:68:B4:CC:5B:14:C4:4B:74:17
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F093D17ECEF3BBA3126D89F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 2603:c002:8c00::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3d:17:ec:ef:3b:ba:31:26:d8:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=bf1b6263-99f1-43ef-96fd-539401e531d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:96:a7:68:b5:93:18:c0:d2:8e:92:4d:d6:64:
b7:ee:a0:ec:88:ac:83:20:50:70:b3:d3:e9:53:9a:
a9:71:83:5e:39:b0:ce:48:58:eb:07:6b:8d:2c:62:
ea:83:6b:2d:47:f3:16:6d:2e:07:47:9d:e6:03:d0:
af:69:34:2d:6f:f2:da:1f:be:6b:36:82:6d:c2:bf:
cf:da:ff:72:ed:57:2a:4e:31:03:5e:77:8a:66:b3:
ec:95:ee:86:45:20:7d:4a:70:24:91:0f:ab:98:65:
3a:33:80:29:de:45:f8:7d:98:a3:82:74:ef:e1:0a:
54:df:7e:4a:09:5d:48:fd:f9:f4:f7:f1:f5:1b:e6:
1e:12:df:e5:f5:e7:b8:51:60:49:7f:32:28:6f:4d:
d5:0c:bb:86:58:1e:35:b1:77:db:98:02:84:02:5c:
81:dd:ef:1d:50:22:58:1f:98:fd:01:b0:19:f7:d8:
06:56:d7:32:16:2e:4c:69:d6:c6:35:c2:41:fe:24:
b5:a5:5b:ba:04:74:dc:6d:7a:d3:ba:68:ee:a2:67:
4d:8d:1c:66:91:43:1f:6f:b8:1c:25:d3:08:7c:e5:
26:8a:50:51:2c:77:02:90:51:d8:cf:29:cb:57:8e:
94:50:82:dc:9b:80:d1:14:ea:6d:01:a5:57:3c:3d:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:3B:3E:1A:1C:F8:E4:66:3A:92:68:B4:CC:5B:14:C4:4B:74:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60a3455f-331e-3a81-91e5-291220065e1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:8c00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:3c:76:47:eb:24:df:1d:7f:10:9a:65:0a:88:87:24:1c:b7:
d4:b2:94:ea:75:c4:5a:61:aa:b2:fb:54:e9:17:ad:37:ca:14:
89:73:8c:6a:96:14:c7:ee:ac:9d:86:70:ca:bb:8a:66:47:9a:
2f:b2:23:17:d8:eb:c2:35:b3:63:33:66:05:bf:dd:27:d4:43:
f1:b7:b8:07:e2:c1:c5:2e:ea:ea:a0:34:a9:c4:e3:9c:6b:3d:
26:c6:94:ca:d2:11:9d:aa:d5:bf:11:43:f6:06:92:29:02:9c:
e1:a2:c7:dc:32:c2:6f:3e:94:94:44:1e:eb:cd:ae:cb:69:3f:
f7:25:94:72:68:8e:99:0f:60:53:ec:71:62:04:31:e3:67:e9:
72:d6:86:09:57:8b:7d:ec:b1:af:de:60:93:24:16:0a:a3:e9:
6c:68:49:42:c9:3d:37:5d:32:11:ae:be:3e:41:81:b3:ca:57:
23:12:79:71:3d:a1:9c:cf:41:92:4f:cf:ac:c2:62:31:af:d2:
99:8d:c1:6a:69:ea:1c:3e:ab:2f:09:0c:8e:db:0f:6b:c3:d7:
37:51:54:51:04:53:91:fc:35:01:b5:4a:18:e0:75:4b:59:35:
fb:ca:03:26:c4:6b:06:89:24:d6:4b:d3:67:9d:e3:cb:de:b5:
6d:2a:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:56:06 2026 by rpki-client