
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa
File: aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa (raw, json)
Hash identifier: P9H1mY44l30KXiBTZ/bw1B0mmkXE4X5+oSYjSAjz3Iw=
Subject key identifier: 08:8C:54:5A:F7:C8:F8:12:0D:83:93:EB:E2:A1:75:0F:E2:75:F5:E4
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CE8F75B44D2445F9179798580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa
Signing time: Thu 19 Feb 2026 02:00:32 +0000
ROA not before: Thu 19 Feb 2026 02:00:32 +0000
ROA not after: Wed 20 May 2026 01:00:32 +0000
asID: 54253
IP address blocks: 2603:c080:1200::/39 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e8:f7:5b:44:d2:44:5f:91:79:79:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 19 02:00:32 2026 GMT
Not After : May 20 01:00:32 2026 GMT
Subject: CN=8dcb4f6b-d30f-42fc-a0fb-1e1eb2bda39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e7:8a:9f:c0:49:82:85:fb:76:f4:b4:b9:8f:
ce:31:6e:0c:e2:cf:eb:44:18:db:e3:63:d0:b3:20:
e3:0d:a9:82:49:56:d3:97:6a:b4:4d:f8:14:86:71:
99:df:9d:d2:b9:f3:6f:21:16:8e:c6:96:d6:80:ce:
1d:e6:09:c2:70:87:f9:39:06:d1:b7:9e:60:00:3d:
cd:0d:c8:c1:be:e3:f2:64:75:d3:0d:71:95:c8:08:
39:8d:ed:f4:20:6a:87:7d:ff:fc:16:c7:87:55:8d:
46:1c:be:25:e0:2d:2a:bc:bb:83:7f:0a:ac:03:a5:
d1:42:e0:eb:9b:bd:39:7e:0c:2e:32:9f:29:a6:7a:
df:f0:70:75:d6:5f:9b:25:19:10:64:14:7b:37:5e:
60:e9:b4:d0:97:7e:db:fe:82:e3:23:85:4a:60:85:
91:60:18:0f:7a:aa:13:9f:26:f2:9d:b4:d7:70:30:
0d:c1:0d:30:70:6b:74:54:cb:83:e5:71:dc:0d:78:
48:6e:9e:b0:75:48:7c:87:02:be:f0:ac:3b:ad:f3:
50:46:64:e6:95:d6:9a:f9:1e:8b:b3:7e:39:e7:bd:
21:61:ee:8a:ba:67:35:fa:2f:19:b9:91:24:08:22:
86:2d:8f:34:bc:a3:7b:cc:87:ff:39:0c:9a:eb:3d:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:54:5A:F7:C8:F8:12:0D:83:93:EB:E2:A1:75:0F:E2:75:F5:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aaf904d6-b7da-3c5c-a4c1-cdda78083e5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c080:1200::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:85:39:15:da:47:97:b8:db:79:8c:ea:21:ec:57:ab:f1:38:
a8:b4:9c:4f:a3:9c:8a:78:8a:65:6b:bb:9a:b6:a2:d1:01:6f:
e1:7d:a2:bf:50:1c:27:53:f5:97:bb:66:ee:b7:79:1a:fc:89:
22:99:ac:f9:f2:b9:be:86:08:1d:25:5f:2e:1c:b3:cc:05:bf:
09:4e:75:f7:e5:5d:30:cf:45:27:57:93:ea:20:de:d5:56:0b:
fa:a0:7e:51:26:44:e7:67:47:0e:cb:49:24:ee:25:04:91:05:
4e:39:d9:94:6e:ec:31:ac:57:93:b9:90:94:1d:c6:60:73:bd:
a2:44:0a:1d:3c:61:d2:6a:9f:47:ca:9a:4c:16:b1:ee:88:33:
86:06:1c:33:ca:4a:e5:2a:5c:ee:2f:50:8b:64:bd:a8:e3:4f:
6c:8e:bf:10:47:82:95:7c:0a:1f:fb:f8:91:fd:63:75:be:75:
f6:37:3f:aa:0d:fc:5b:e8:60:d0:7a:30:98:66:79:1a:b3:39:
58:01:f1:a4:83:6d:03:b5:14:e2:ca:cb:e6:10:3f:21:43:0e:
b5:64:eb:dc:9f:2a:73:3a:d9:ba:b2:91:0f:23:74:72:6c:49:
b9:46:4f:51:6d:35:34:04:c8:7f:77:a0:3c:c0:f4:d1:5b:c2:
bd:d8:9f:81
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzo91tE0kRfkXl5hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
OGRjYjRmNmItZDMwZi00MmZjLWEwZmItMWUxZWIyYmRhMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgueKn8BJgoX7dvS0uY/OMW4M4s/rRBjb42PQ
syDjDamCSVbTl2q0TfgUhnGZ353SufNvIRaOxpbWgM4d5gnCcIf5OQbRt55gAD3N
DcjBvuPyZHXTDXGVyAg5je30IGqHff/8FseHVY1GHL4l4C0qvLuDfwqsA6XRQuDr
m705fgwuMp8ppnrf8HB11l+bJRkQZBR7N15g6bTQl37b/oLjI4VKYIWRYBgPeqoT
nybynbTXcDANwQ0wcGt0VMuD5XHcDXhIbp6wdUh8hwK+8Kw7rfNQRmTmldaa+R6L
s345570hYe6Kumc1+i8ZuZEkCCKGLY80vKN7zIf/OQya6z1RWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAiMVFr3yPgSDYOT6+KhdQ/idfXkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWFmOTA0ZDYtYjdkYS0z
YzVjLWE0YzEtY2RkYTc4MDgzZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAgBIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaIU5FdpHl7jbeYzqIexXq/E4qLScT6OciniKZWu7mrai0QFv4X2i
v1AcJ1P1l7tm7rd5GvyJIpms+fK5voYIHSVfLhyzzAW/CU519+VdMM9FJ1eT6iDe
1VYL+qB+USZE52dHDstJJO4lBJEFTjnZlG7sMaxXk7mQlB3GYHO9okQKHTxh0mqf
R8qaTBax7ogzhgYcM8pK5Spc7i9Qi2S9qONPbI6/EEeClXwKH/v4kf1jdb519jc/
qg38W+hg0HowmGZ5GrM5WAHxpINtA7UU4srL5hA/IUMOtWTr3J8qczrZurKRDyN0
cmxJuUZPUW01NATIf3egPMD00VvCvdifgQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:22 2026 by rpki-client