
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0c4abf-4969-361e-852f-996e797c9406.roa
File: 8f0c4abf-4969-361e-852f-996e797c9406.roa (raw, json)
Hash identifier: +VAoExNh/ngCRVBW7t6dG1gr+anC9TxpplZr9nVPT0M=
Subject key identifier: CC:60:2B:90:69:73:D7:A3:F9:7D:2B:F5:A8:D5:01:94:F4:DB:60:4D
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CEBC22AEAF59D059C0E63D010
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0c4abf-4969-361e-852f-996e797c9406.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 54253
IP address blocks: 2603:c09c::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:2a:ea:f5:9d:05:9c:0e:63:d0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=0b25bac2-b1f9-4f76-bdde-bafdc9d2579e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:b8:c2:e8:52:b8:ef:38:9a:d9:ea:48:f6:
3a:6d:c4:92:33:89:6a:c7:3b:74:a9:23:76:72:10:
d6:b5:be:32:bc:01:54:5b:81:e7:b4:c7:b9:91:68:
ca:f7:fc:3e:38:50:f8:c2:af:e4:68:e2:cf:a6:35:
ee:35:ce:bf:19:1f:d0:09:2c:e4:24:83:0f:93:c0:
0b:1b:0a:32:d0:7f:28:42:5b:23:f9:92:49:21:b1:
02:97:f6:61:78:de:d1:83:4e:ce:c7:9e:22:9d:f8:
4c:a6:fb:ee:7c:11:30:a9:12:ef:77:01:05:47:5e:
c7:f8:d0:55:14:d0:09:f6:e4:23:7e:b4:00:04:d4:
7b:d7:a5:9e:70:e9:67:9d:50:f2:a3:46:f6:95:3c:
9f:94:05:99:c9:83:a5:12:c6:20:2a:8e:b4:6b:e9:
c5:1b:70:f5:80:0f:56:6d:f2:4e:69:e6:63:10:c5:
ae:2d:2b:d0:b0:59:4b:ba:1c:2b:e3:0a:9a:e2:75:
99:67:e6:b0:ff:bd:36:da:1a:09:ca:8d:6c:32:64:
24:9c:78:6f:07:6e:db:82:09:a8:7d:00:02:a2:73:
2b:a6:56:57:5c:f6:2f:61:e3:f5:e0:8f:b9:20:9c:
dc:d9:21:4a:3d:c9:d6:34:00:0b:22:e8:64:ed:a3:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:60:2B:90:69:73:D7:A3:F9:7D:2B:F5:A8:D5:01:94:F4:DB:60:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0c4abf-4969-361e-852f-996e797c9406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c09c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:a3:93:48:c0:4f:8c:4a:ba:d4:a5:75:a8:3f:36:53:0c:1c:
ad:b5:32:20:ec:9b:4d:97:1c:59:26:69:73:ac:bd:70:7b:9e:
2a:f2:2f:66:2e:29:ae:7e:df:95:70:1e:f3:98:5c:e6:4a:35:
a2:9a:2f:04:05:7c:35:50:2f:7f:53:5b:2a:6f:f3:c0:f4:60:
96:f3:f3:2b:48:7e:56:7f:f5:63:9d:7a:20:f2:9d:46:42:94:
88:1e:e2:41:5c:b8:52:0e:80:43:76:c9:09:83:c3:bc:95:ed:
25:5c:59:e6:d6:9e:91:ea:51:6b:e0:27:f5:aa:c4:88:7d:75:
24:be:d8:c2:5b:e2:2b:b7:ee:a3:d9:03:bd:b2:d1:7e:23:9d:
42:03:e0:65:6b:29:70:62:e0:22:a4:09:38:f7:ee:53:d2:97:
0e:23:06:17:fb:7b:f3:f4:4c:ee:9b:74:1c:ef:a2:29:79:ca:
38:fc:b1:a3:1f:09:5c:44:f3:63:fd:a3:f5:da:a4:2e:9a:26:
4e:7c:7a:6e:0b:55:7e:61:8a:ba:95:4b:06:2f:37:41:32:cd:
df:81:74:4c:78:4b:c7:85:c8:19:d3:0c:87:9a:93:00:c9:4d:
f8:d3:d9:05:86:68:a6:ac:2f:22:72:4d:03:a2:3b:67:c4:fe:
e4:37:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:50 2026 by rpki-client