
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa
File: 86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa (raw, json)
Hash identifier: GFtBToEmrqzpbii9glJMSHutkNizp6bMw9zqCTDKMHw=
Subject key identifier: E8:D1:F0:4E:20:B7:EF:B9:D7:48:83:A3:D5:FD:82:F6:00:CA:BC:A9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F0D6CF76A1CF87B44DB360800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 2603:c002:1900::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:f7:6a:1c:f8:7b:44:db:36:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=f42ee710-4e2b-447a-af5a-93b970256e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:eb:16:a1:f8:0f:14:46:0d:40:7b:81:fb:
8a:b3:0b:bd:45:28:72:a4:91:06:dc:17:b4:b6:b1:
17:b4:2e:86:16:37:1f:46:64:15:79:2e:6e:93:7c:
b8:aa:a1:aa:0c:f8:16:2e:08:fe:f6:db:74:b6:8a:
ea:5f:01:0d:5e:54:c4:76:19:36:c8:01:b5:f4:60:
d0:54:e7:81:b1:1e:07:95:41:21:4f:fd:48:46:f1:
a2:c1:d8:18:7e:5b:6b:99:30:d0:6f:c7:3a:67:58:
ce:ac:c1:ef:a0:37:24:a3:17:1e:d1:dd:ee:eb:2e:
14:da:95:20:88:1c:c7:9a:79:55:83:98:04:cb:0f:
00:b1:d7:12:4a:a1:9d:26:8d:62:9e:ed:d7:b6:c6:
12:71:ac:2f:eb:27:34:dc:c3:88:33:46:d2:27:26:
60:c6:8c:aa:9d:bf:8a:ed:0c:77:cd:18:2c:da:a6:
e2:2a:3e:f4:50:82:0b:86:89:02:f9:97:8c:c5:c3:
b7:d4:36:01:1e:9c:17:12:51:43:27:b8:46:d0:f0:
3b:fc:1a:a9:fe:de:37:60:5a:2b:ce:7c:8b:e0:21:
8e:cc:06:8e:ea:a5:e8:a8:87:f3:dc:66:38:3c:d0:
f7:f2:80:c1:dd:d6:8f:56:f8:84:bc:f8:cc:f8:cf:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:F0:4E:20:B7:EF:B9:D7:48:83:A3:D5:FD:82:F6:00:CA:BC:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:1900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:4c:45:90:93:21:ab:0c:67:ca:30:8f:91:f3:a1:04:8f:ab:
ec:d3:a3:cb:f8:73:dd:46:d2:f9:be:20:92:43:60:15:47:7f:
9d:39:f4:02:e3:c5:9a:52:1e:51:84:9c:cc:7f:82:06:06:d2:
49:07:e2:ca:f6:5d:0d:81:ad:00:0c:c5:a1:21:97:18:fc:81:
42:8f:16:30:bc:c3:72:ce:13:ae:78:77:96:f3:39:03:c2:0f:
5c:aa:56:75:8a:41:25:d7:26:a1:9d:21:80:e4:bd:64:d0:11:
b4:f3:b0:78:10:f3:ee:f6:71:65:e4:b9:7b:57:3f:31:f1:8b:
5d:a1:eb:0f:12:30:5b:fd:e5:3d:c6:3a:f3:59:63:a9:ad:f9:
1c:10:04:d1:d6:8e:34:36:c3:18:92:1e:1b:cb:2b:90:73:f2:
33:ac:86:2b:be:5d:d2:fe:31:9a:23:8e:3f:e0:13:7b:06:54:
d3:ab:67:3b:00:fa:74:d6:b5:96:8f:13:72:85:8b:6f:6c:69:
95:8d:1d:fc:64:04:d0:7f:2a:99:e6:dd:06:24:c8:ed:a4:26:
3e:27:67:88:ce:18:6f:ec:ac:48:c6:9a:11:16:77:d2:27:47:
d8:a3:2d:35:db:5e:22:34:52:15:94:34:94:e3:1d:78:64:78:
59:94:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:58:15 2026 by rpki-client