
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1f64223-04ea-3806-a558-e23057abb201.roa
File: a1f64223-04ea-3806-a558-e23057abb201.roa (raw, json)
Hash identifier: C7DwPVftF3oeV/mgFRpSqd+lJQYMuSUS4/KPC+ooA2U=
Subject key identifier: 15:30:BA:7C:38:3A:F5:17:B8:7C:A3:3C:A8:C0:E0:6D:38:08:1C:FF
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F024240073063FF9539288910
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1f64223-04ea-3806-a558-e23057abb201.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 31898
IP address blocks: 2603:c000:f00::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:40:07:30:63:ff:95:39:28:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=a2fc7e62-4f30-4b69-84db-e78d1859ac0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:fc:86:e9:b8:75:33:91:1c:e5:26:3f:52:
8c:48:56:04:e0:09:95:d7:df:08:31:54:f8:6b:7d:
40:e5:98:dc:3d:07:60:0a:2b:e3:19:34:06:bb:75:
0e:18:39:17:56:56:e9:bf:cb:72:ab:d8:81:a9:ad:
a8:89:83:b4:12:87:20:d0:98:71:c0:71:c6:e9:87:
7f:2a:11:da:10:61:f9:09:a9:02:52:a6:45:54:71:
c8:28:aa:9f:79:60:5c:f4:c9:aa:9c:24:f6:b0:8a:
6b:57:12:af:a7:5d:60:18:58:14:c4:a2:2d:b4:b4:
6e:61:be:e4:82:21:6b:c0:5b:ac:19:3b:44:3b:5c:
d3:6d:aa:3b:f5:5f:c4:d1:d1:54:27:a0:8a:45:bf:
97:4e:35:58:25:d4:36:3a:31:19:c8:77:46:a6:a3:
28:bc:98:84:8e:12:f6:82:51:d9:0e:06:2e:b1:02:
2a:d8:66:05:3e:6c:63:2b:98:0f:74:51:24:ce:7c:
c3:fd:6e:30:ad:58:e8:b3:c6:a0:53:66:85:ff:4b:
4f:26:38:f3:70:70:51:19:d2:a6:67:4d:d8:20:08:
6e:08:fb:41:d2:6f:6a:0c:af:d3:09:48:34:22:26:
f4:69:9a:81:90:24:57:13:21:23:7e:85:d5:34:58:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:BA:7C:38:3A:F5:17:B8:7C:A3:3C:A8:C0:E0:6D:38:08:1C:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a1f64223-04ea-3806-a558-e23057abb201.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c000:f00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:dd:ed:d3:f4:f4:d7:75:69:91:92:24:82:9b:09:95:93:1f:
97:5f:cd:3a:6b:ab:97:24:5f:19:76:97:e9:2e:70:14:50:9d:
86:50:64:14:98:a7:0c:ab:54:67:12:6e:1c:2b:58:e3:51:5e:
3b:b4:7a:5b:d7:b5:4f:e9:b1:cc:19:7a:5d:50:b0:01:1e:3a:
eb:22:59:bf:8b:33:89:e9:f5:0e:44:90:03:10:81:b1:97:a8:
bd:75:95:12:ba:31:be:5d:42:93:0e:90:f5:dd:3c:c1:63:0e:
2f:e6:71:01:03:6a:a8:9a:07:0a:de:d5:c2:d3:5a:b3:8f:50:
5f:f9:c7:0c:6b:8a:34:03:f7:4a:90:4f:99:0d:73:51:0f:02:
c8:c9:63:66:4c:8a:18:6f:23:ce:27:70:7e:95:74:9c:fc:0e:
03:d5:88:ca:22:a5:75:5b:42:61:25:a5:c3:7d:73:a9:99:80:
88:cb:88:c7:9a:11:c4:70:d6:d5:ec:de:bb:9d:23:68:04:d2:
c4:cd:05:80:ca:0a:3f:80:90:9e:90:33:03:5a:aa:f9:fb:a9:
fd:2c:79:71:a9:f3:93:e7:60:1f:28:0d:40:da:e7:d2:e3:d7:
63:eb:03:bf:f5:e0:12:ff:3a:39:fe:95:a3:6a:6f:55:bf:7e:
97:8c:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:26:38 2026 by rpki-client