
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4df666e1-05a2-3fc7-b730-e13cd7856b67.roa
File: 4df666e1-05a2-3fc7-b730-e13cd7856b67.roa (raw, json)
Hash identifier: 6XWhcpWBrfHkQXyTZLtW9HuOGAu1jEhQBIZ64dZg5u8=
Subject key identifier: 9E:CA:34:2C:4A:F4:36:DD:4C:F4:A4:E9:50:C9:1F:F4:8B:C0:3A:A0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA2704B29F334E5894A58E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4df666e1-05a2-3fc7-b730-e13cd7856b67.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 2603:c022::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:04:b2:9f:33:4e:58:94:a5:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=87be1046-59b3-4383-81c6-24e46661e434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:2a:d0:60:b3:55:9e:69:51:cb:26:06:8f:
9a:be:19:62:80:c8:74:eb:61:74:1b:7b:b6:c6:8e:
67:6b:5d:98:96:ce:c5:c9:01:7e:3c:cb:57:4c:b0:
2e:49:cd:c1:93:eb:2c:33:23:f0:7c:0c:28:c6:14:
38:c9:bc:c4:44:d5:74:82:b4:95:7c:6f:f1:b3:e9:
69:57:85:82:b7:74:4f:73:03:b8:1e:e2:bf:da:d3:
07:c5:f0:b1:3e:55:c0:6e:25:60:02:73:23:f3:60:
68:4b:f2:05:5a:83:b8:6a:4d:0f:63:94:ab:3d:ee:
79:dc:2f:09:73:ce:3c:31:9d:6a:a5:b3:94:1d:92:
17:49:5b:80:c2:bc:0a:57:da:22:8a:87:00:c1:87:
0c:1f:73:4a:e6:7e:96:36:70:66:09:62:7e:bb:47:
d5:64:21:00:bc:95:ea:9c:83:c6:19:0b:67:90:1c:
b6:77:21:61:22:41:91:4e:dc:0c:4b:23:37:a7:1b:
2e:fc:d9:70:0c:91:8a:d1:07:f7:11:b7:97:66:db:
81:7e:b0:37:c8:25:5c:a4:b9:ff:f7:66:8c:86:88:
06:7c:af:28:23:f6:4b:20:72:a6:f7:0c:43:4c:c3:
5e:5a:c9:eb:aa:fa:e9:42:f2:3f:80:52:1c:31:7b:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CA:34:2C:4A:F4:36:DD:4C:F4:A4:E9:50:C9:1F:F4:8B:C0:3A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4df666e1-05a2-3fc7-b730-e13cd7856b67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c022::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3f:83:0e:e4:da:6e:5a:30:06:b4:0b:e5:53:6e:cb:70:95:
32:4c:bb:4c:40:81:0e:fc:87:71:38:ee:97:9e:ee:cd:09:1b:
31:c5:56:73:77:4e:e7:63:79:4e:1e:a1:50:48:1e:da:17:6e:
3a:37:b7:5b:84:fb:79:97:c4:05:01:42:21:59:b8:80:b0:94:
6f:43:4f:33:ac:a0:02:dc:d4:0a:d2:ba:8d:34:10:9d:e9:cb:
83:27:fa:bd:f9:a5:29:ab:88:d4:b9:64:b5:4a:91:fa:b1:86:
b8:1c:6f:c9:3b:f8:33:25:91:52:1b:38:82:a1:d0:21:65:f9:
6d:5e:75:19:df:7d:2b:94:92:10:c8:bb:c0:2b:d7:5e:a6:4c:
02:5f:10:83:5e:2c:00:0a:95:dd:c2:ab:21:49:bc:19:58:0f:
b3:3e:3d:81:9e:c6:d6:00:e9:6e:b8:32:04:dd:14:e0:5d:e3:
f3:d1:f8:48:b5:52:eb:d2:95:4e:0a:c9:50:01:fa:30:95:37:
60:d5:44:a9:21:cc:b5:8c:d6:35:32:5c:84:3a:4d:bb:5d:0a:
47:c7:8f:0e:0c:e4:ad:eb:50:26:a3:c4:65:0f:77:7d:67:45:
2d:d7:87:9b:71:7f:26:2f:58:50:d7:63:a2:36:79:e9:28:eb:
1c:a9:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:32 2026 by rpki-client