
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
File: a31ff1ae-befb-3b74-9c35-1231153f8524.roa (raw, json)
Hash identifier: hz9bisVw3mmNfUshIuFnX9LXaxBK1lFALJrOLjT/9G0=
Subject key identifier: FE:BC:57:58:50:06:1F:74:00:16:E5:DE:92:5B:FF:B4:6C:AC:81:59
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F103789C0420920E8A92BF940
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 2603:c002:9000::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:89:c0:42:09:20:e8:a9:2b:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=a4a54816-1164-41fc-a672-9fd07854eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:b3:9c:2b:f9:0b:ee:c6:26:6e:49:63:b0:
1a:6e:0d:0f:9a:7f:ae:ca:dc:81:83:1c:40:1d:fb:
11:45:0f:ff:4a:b4:46:51:eb:4f:1a:ba:77:36:b0:
dc:50:3d:cc:f3:fc:26:0e:bc:65:58:d0:70:98:6b:
63:e7:60:a0:ff:ed:47:47:b6:7b:1c:11:24:6e:5e:
45:17:34:7b:ab:70:fa:76:de:50:7e:1d:47:2b:9a:
0b:e5:af:8c:05:15:9f:6e:6f:29:40:67:a7:d1:40:
c7:a2:cf:ae:88:02:85:ee:1a:f8:db:76:f4:57:9b:
a4:9f:9f:6e:a2:e7:09:74:70:1b:08:53:cc:4c:f2:
64:52:0c:5e:27:25:5b:97:e6:06:50:cf:3e:90:be:
f7:32:29:d8:7a:cb:57:bf:4b:ab:f3:b4:9c:d6:55:
06:c3:20:2b:20:17:6a:6a:f8:f2:ee:70:68:30:4f:
e4:6e:5a:9f:c1:91:65:a8:42:f5:fb:6d:07:a6:74:
02:1d:b3:4d:ff:c3:c1:47:b6:fd:c1:2f:1a:bb:33:
79:18:d5:18:57:68:26:39:c4:9f:9a:90:bf:34:b5:
3b:9a:17:38:90:69:b7:4e:10:66:00:98:a0:0a:1e:
70:6e:11:b0:4e:66:83:9e:8f:4c:ff:df:80:fd:58:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:57:58:50:06:1F:74:00:16:E5:DE:92:5B:FF:B4:6C:AC:81:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:9000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:fd:d6:68:80:48:92:7d:e7:bc:70:7a:93:5e:68:2b:61:d8:
b5:06:b3:33:5b:1e:a9:b5:de:3b:41:83:bf:22:46:47:5e:02:
46:d3:b3:77:f1:0d:a8:91:e7:48:e4:fd:19:d0:45:e3:2a:44:
76:6f:8c:48:dd:8a:5b:b1:b3:4f:92:08:01:01:80:ac:db:35:
98:10:95:2f:4d:77:02:9f:6d:7e:9d:ef:04:60:8b:32:9b:c5:
c1:05:b7:4a:c8:7d:9a:53:fe:d9:d5:e8:ac:fb:1a:f7:50:03:
f6:5e:f2:d1:ff:f9:9e:72:39:1c:16:bc:d0:cc:b4:78:9e:38:
f3:ac:f4:de:5e:75:b9:2b:d9:a5:86:d6:25:d9:fd:66:d9:41:
a0:83:02:46:89:b5:b8:89:6b:b9:32:ae:42:b6:cc:fd:b1:83:
83:d2:9f:66:d4:89:17:c9:92:f2:a9:dd:bb:bf:05:aa:bb:35:
58:d7:bb:8f:7f:27:03:26:3b:ec:65:c8:25:00:8c:41:c4:b7:
37:e8:ce:d8:3d:94:61:c7:e9:9f:64:fe:17:26:c5:25:0c:c7:
0d:fb:93:14:fe:7e:a5:a3:9e:cb:d0:01:71:5b:14:84:b4:a8:
63:3e:ff:3a:94:d9:b2:d6:41:07:9f:06:b7:54:1b:ad:68:f5:
17:03:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:24:17 2026 by rpki-client