
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68d0087b-768b-3b00-b09b-33d8d73eebc6.roa
File: 68d0087b-768b-3b00-b09b-33d8d73eebc6.roa (raw, json)
Hash identifier: 86CUvjN9Z40tFShqsJ1aXY5dzuu2F2dV2jTrhfvF+24=
Subject key identifier: E1:B9:0C:E8:40:44:4B:8C:D7:33:6B:8D:25:55:F5:32:99:BD:4A:D1
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F1037915472E27E512E631A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68d0087b-768b-3b00-b09b-33d8d73eebc6.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 2603:c013:4000::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:91:54:72:e2:7e:51:2e:63:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=2eb42e5d-4b7a-492b-b6c3-02300ea0788a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:ce:e0:92:42:22:47:ec:13:f9:ab:39:96:
62:0b:70:0c:c3:b8:3e:17:93:8c:be:55:a6:03:10:
90:33:25:7c:e0:93:81:9f:80:73:77:b7:bd:6f:76:
11:7d:25:74:51:39:b1:95:3a:f9:75:02:1f:62:42:
b5:91:10:be:a0:29:dc:7a:5a:25:c9:89:1d:80:14:
7c:c6:2e:58:d3:0e:25:36:71:11:99:de:61:1a:c0:
76:16:62:00:8e:86:0f:dd:71:dd:27:2b:04:2e:5c:
1a:80:b7:11:9c:32:ec:27:47:48:31:b6:bc:a6:44:
ba:db:f3:93:39:b6:14:75:7b:60:91:b0:ab:14:33:
54:e3:c1:5c:0d:51:bf:f2:28:f9:a4:f0:66:4f:d1:
4c:38:37:39:2d:3b:dd:e7:dd:0f:43:ca:f0:63:b0:
eb:bb:58:fd:01:c3:43:c9:bc:b0:38:26:f2:8f:9c:
24:88:3e:e1:7f:f5:f1:9b:82:e2:4b:46:a0:4a:fe:
80:ca:24:10:a0:4a:34:f4:d7:77:d5:81:16:20:66:
16:a9:65:25:d9:8c:d5:68:97:28:43:3c:19:d0:fe:
38:22:0d:cb:4c:76:50:ac:88:7e:ca:21:d7:11:ea:
05:84:8c:68:1a:fb:8b:46:d1:42:2a:61:35:1f:cb:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:0C:E8:40:44:4B:8C:D7:33:6B:8D:25:55:F5:32:99:BD:4A:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68d0087b-768b-3b00-b09b-33d8d73eebc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c013:4000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:89:4e:2b:78:69:f7:71:18:d4:1e:e4:cf:aa:3f:c2:b4:67:
a8:05:65:97:54:dc:7b:38:47:a6:96:3e:3e:cb:23:43:11:46:
0c:f7:a3:e2:f2:b3:4f:83:f7:72:dd:c0:8d:aa:9f:63:d8:17:
94:95:c7:6c:80:4b:e1:bd:d9:b3:50:8e:ff:e6:65:88:15:58:
4e:c0:2f:43:a8:f1:20:d2:56:58:99:1b:a5:cf:72:89:0b:e7:
22:c1:ce:3a:71:3b:e3:1e:d4:0d:a0:4f:10:98:32:a1:c8:e9:
f6:11:82:60:f9:8c:c0:66:7c:4b:c7:e9:c9:6a:4d:bb:39:4b:
16:42:a4:95:c4:c2:c8:96:49:65:aa:f9:d0:0c:88:d0:d6:04:
20:2c:fa:1c:9e:a3:62:81:35:2f:d2:22:ef:f5:49:a8:ec:4f:
08:e1:6c:58:36:01:02:0b:f0:6d:31:6c:5d:d6:ef:5b:56:b4:
22:bf:f6:c0:cd:f0:32:59:82:3d:83:c4:23:4a:51:e5:9c:06:
88:e7:51:40:72:78:bb:16:2d:66:20:6d:12:8a:0b:9f:24:1e:
ff:f4:a0:ce:73:49:21:50:ea:f2:d1:69:ec:47:0d:56:fe:b4:
58:51:6e:c4:66:2a:ab:72:5c:d3:54:36:b5:b6:c0:70:6d:9e:
4d:da:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:57:10 2026 by rpki-client