
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32170c7f-29df-356a-9036-5f9d22c428f4.roa
File: 32170c7f-29df-356a-9036-5f9d22c428f4.roa (raw, json)
Hash identifier: Z+ZXNXpioOYV/5RKIt9xdjTN6+gQcDlQl/xQjPdX/sg=
Subject key identifier: 24:1B:9B:66:B0:F5:EC:95:50:40:9F:21:60:30:A3:88:01:FA:65:31
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EED51FA083E3B66449BB8C700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32170c7f-29df-356a-9036-5f9d22c428f4.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 54253
IP address blocks: 2603:c045:2000::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:51:fa:08:3e:3b:66:44:9b:b8:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=eab67df7-7d3b-47f0-b5ef-c69f8f9e43c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:20:15:b8:2a:b6:4d:f3:d8:48:31:fa:31:
fc:0a:ab:78:15:14:03:00:ba:c6:04:63:8c:be:5b:
73:fd:1a:9b:a0:a4:0d:a4:45:ee:5c:bb:5a:d8:5a:
2a:d5:9a:e1:42:82:06:50:5f:34:b1:89:06:2d:0c:
d3:27:44:26:2e:7a:99:36:43:c3:d0:7d:a6:8f:f0:
a8:39:a4:25:38:10:03:a6:5f:09:8e:e9:0f:57:40:
cf:4c:1f:3d:bf:67:17:2e:da:09:38:08:06:06:31:
5b:8a:ab:73:b6:94:56:99:a8:b3:c1:39:a3:9d:1b:
14:4c:cd:52:ad:e8:02:61:7c:1e:07:99:44:29:ca:
f0:01:06:80:84:c3:f3:e6:d6:c4:93:96:d0:0a:8f:
7f:80:f2:77:98:cd:7d:6a:59:37:57:6a:e5:35:e7:
fc:01:28:74:46:45:92:8c:ef:24:f8:59:b4:c9:fc:
34:84:e7:2c:b5:85:58:96:af:ea:b1:87:3d:e4:11:
aa:45:0e:a6:91:55:9d:50:08:cf:3e:80:0f:70:a1:
a8:c1:c0:66:5f:eb:4a:aa:d6:89:00:9c:cc:d3:d6:
75:ed:b4:4b:8a:3b:d9:bc:f2:a0:f9:2b:e4:18:db:
98:3b:88:8a:d6:5b:cc:e1:e7:f3:b8:d8:64:e8:65:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:9B:66:B0:F5:EC:95:50:40:9F:21:60:30:A3:88:01:FA:65:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32170c7f-29df-356a-9036-5f9d22c428f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c045:2000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:98:48:f7:9a:d7:a2:52:e1:35:a6:7a:e6:05:c8:92:81:83:
19:d5:85:f8:57:cf:c3:54:32:67:76:1d:a9:f2:d1:03:7d:d1:
64:c6:17:96:06:ce:1e:d6:90:d3:b1:2a:84:87:6f:83:fc:e0:
24:de:03:19:58:c4:a0:4b:4c:57:e4:13:3a:a5:05:0d:cb:75:
1b:20:0a:c8:31:80:cc:3c:d5:f9:75:e8:79:39:98:83:97:c2:
00:6e:d6:4e:5a:b2:23:c4:79:36:cc:ce:0a:37:05:34:2e:5a:
7c:cc:f3:65:49:0d:a1:b1:06:fa:1e:a3:0f:5e:e3:8f:45:84:
77:b8:fd:90:b2:55:32:26:c3:66:31:f9:37:57:11:61:76:8d:
06:bc:91:a4:34:ba:03:4c:b6:41:0b:77:33:81:57:5e:31:a3:
03:9c:25:f8:0a:2b:e1:00:b6:ba:96:35:e5:1d:07:8f:c4:1b:
32:40:a9:55:ae:27:5f:65:df:75:06:e2:e8:ee:8e:5f:93:fb:
9f:8a:10:e1:16:5d:e5:34:32:c1:3a:e5:95:a9:00:f5:7f:03:
ca:6b:00:df:7b:06:69:9c:03:5c:f9:f0:7a:6f:cd:d6:5a:94:
e3:57:fa:78:2b:bc:cb:d1:76:d3:57:67:49:36:24:89:e6:55:
22:b7:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:28:41 2026 by rpki-client