
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa
File: 9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa (raw, json)
Hash identifier: qb6Zl286UZOKGYzkqQF15XgKC0veaAGd+u1yqJqnA3c=
Subject key identifier: AE:D3:6B:8C:C9:C4:7D:03:3C:2E:DB:D6:84:DC:04:E9:82:77:EA:F9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EA78713D49D1D516B24E65000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 54253
IP address blocks: 2603:c066::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:13:d4:9d:1d:51:6b:24:e6:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=569ab57b-7d86-434d-bf2f-bef054b2316d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:ef:ca:36:7a:aa:70:11:81:5d:79:af:86:
1c:40:1a:05:4c:e4:f3:fb:3b:53:bc:a0:05:7f:7a:
69:c3:cb:1e:5d:39:23:03:49:28:74:af:cd:5c:d3:
3b:ab:7b:b8:a9:b0:ac:0e:11:b9:a0:77:b1:76:1a:
b3:8c:78:8b:42:5a:30:b2:42:a9:1d:ab:f6:de:74:
eb:72:4d:bc:01:97:21:b9:8f:8f:e7:c0:67:ea:63:
46:af:71:c8:b4:76:db:3c:4b:e3:7f:6a:84:fc:11:
59:b7:45:e7:65:79:8c:01:e5:69:25:e6:30:a6:d6:
42:ad:cf:05:85:4e:74:8d:e7:25:8a:41:07:82:e4:
81:09:0d:9d:73:da:3f:e1:27:2e:34:d1:55:0c:f2:
da:08:1d:9f:09:7b:df:42:6a:6e:91:f8:17:6f:c2:
fe:5b:52:a2:71:0d:38:2d:23:62:d5:c2:1f:a4:d2:
1e:1d:05:d6:e1:d0:8d:8a:23:fd:4d:ec:b4:f5:09:
3b:cd:16:07:e3:83:b3:5f:d7:24:06:31:7d:dd:4f:
72:c9:47:72:dd:39:48:11:77:c2:d5:3c:67:0e:fb:
39:a4:58:e9:ba:d4:5d:75:63:8d:89:55:a4:e2:45:
18:1d:46:ee:72:9a:f1:e9:b4:5d:cb:de:25:e0:0c:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:6B:8C:C9:C4:7D:03:3C:2E:DB:D6:84:DC:04:E9:82:77:EA:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c066::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:46:c2:e2:c7:df:58:e5:5d:64:f4:64:63:88:2e:13:6e:b1:
71:56:06:fe:e9:42:f1:08:db:5e:9d:24:64:14:2e:0f:b7:fc:
2e:fa:6e:55:60:94:3d:e2:8e:3f:e5:2e:08:14:6a:d9:94:39:
52:1b:78:0a:51:27:52:03:a3:ca:af:3b:fc:e7:fd:2f:e0:d8:
e2:d7:38:bb:44:b5:d9:4d:ba:a6:ae:2a:5c:03:a7:76:57:2f:
3f:14:f6:e4:36:66:8d:e2:cc:18:ad:69:1d:18:b9:7b:18:a5:
6a:c4:e9:00:7e:ed:82:17:7e:0e:eb:60:25:32:02:00:35:1e:
bf:13:a1:36:e9:84:b1:44:23:06:3b:5d:43:95:eb:e3:b4:65:
12:45:6f:7e:f3:75:4e:22:f8:41:a2:2f:94:fd:d7:eb:89:65:
32:43:85:70:00:15:84:d8:b5:9c:47:16:32:28:82:b5:97:68:
05:7c:fc:69:2a:44:38:84:78:ea:6d:4a:b7:a2:cd:56:82:3e:
72:26:b7:69:8f:bf:d6:29:df:26:b5:eb:36:03:92:69:96:d0:
26:8d:70:f0:3e:20:15:e4:12:95:57:8a:3e:24:a3:2d:60:8c:
44:aa:97:0b:06:5d:d9:3b:5f:af:ae:01:60:ac:4d:c2:59:88:
49:7e:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:13 2026 by rpki-client