
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66cec16f-f182-303c-95ec-18ad0932cd8f.roa
File: 66cec16f-f182-303c-95ec-18ad0932cd8f.roa (raw, json)
Hash identifier: bfhDph8WvlbCxVtepiIo5M4r+ZYRelhFJnYVvxzOy0w=
Subject key identifier: AA:EE:63:CA:28:04:45:9D:AC:35:7E:DA:AA:A1:44:C4:41:85:4A:F1
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA273232BA3324E0BBA3DEC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66cec16f-f182-303c-95ec-18ad0932cd8f.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 2603:c000:1b00::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:32:32:ba:33:24:e0:bb:a3:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=dc132b13-6328-4f7f-84b9-51fca3e97053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:ca:d6:93:c0:7b:9c:44:8b:53:13:9e:ab:
79:84:23:a6:bb:5d:a7:38:0c:3f:ea:a2:13:be:8b:
15:37:cd:3e:18:3e:96:1d:43:2d:4c:67:d8:95:16:
b3:b9:5d:4c:93:1b:c7:61:f5:f7:c7:04:9f:44:bf:
f3:ce:ba:35:5b:22:2e:1f:c1:cb:e7:36:ae:86:d4:
4a:a1:f6:b1:09:66:f7:b4:52:48:39:bb:8a:af:bd:
0e:41:74:0a:63:79:7c:62:86:a7:f0:f2:97:e9:37:
88:6d:ba:1a:87:dc:e1:cc:9d:1d:9f:33:de:f1:e0:
59:c5:61:06:31:25:53:4f:37:24:45:39:b7:d0:29:
a6:fb:3e:03:7a:c4:37:e6:24:48:38:82:82:10:51:
36:fb:02:db:a7:0c:0c:c8:00:4f:ee:b5:81:32:c8:
fb:2c:19:cd:10:2f:05:07:2d:4e:f5:8e:08:f9:6f:
0f:53:19:00:34:5e:f6:97:f1:e1:dc:4e:10:2d:4c:
dc:c3:c1:ee:be:25:db:8d:a7:d5:50:32:0b:7b:53:
9d:98:14:22:8f:af:f6:c1:f4:74:69:5d:30:33:97:
89:5e:3e:b4:88:29:59:91:cb:ba:ab:43:34:03:2f:
29:eb:fd:ea:be:57:b1:7a:bf:dc:3a:2e:0c:ef:86:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:63:CA:28:04:45:9D:AC:35:7E:DA:AA:A1:44:C4:41:85:4A:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66cec16f-f182-303c-95ec-18ad0932cd8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c000:1b00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:14:45:f3:ff:af:7b:2a:59:81:a3:03:da:41:11:68:f9:2c:
d5:d2:2c:34:ba:5c:fe:82:1c:ff:64:cf:fb:ff:0d:57:9a:01:
af:0e:c2:0c:1e:b1:fa:4b:32:7b:2d:5c:54:fb:fc:1d:0f:dd:
56:3d:e3:0b:0c:cb:10:44:33:65:a1:45:43:22:8d:c9:65:4e:
71:c4:20:61:28:e6:dd:08:b5:b8:8f:b9:8f:71:33:e6:c6:9c:
55:40:1f:c0:6d:e0:93:62:b9:d8:d1:83:e2:3b:bd:f8:af:5d:
d8:c6:f2:04:ad:76:b6:49:cb:ea:a7:ae:2e:dd:58:4d:a6:bf:
69:f9:cc:9f:61:0c:d0:02:49:42:d4:99:30:27:5d:a9:2f:1c:
7d:ee:ce:5c:ed:f0:84:73:ec:33:01:97:fa:a9:58:26:c6:f5:
36:51:37:fc:45:fc:ae:35:f8:6d:89:5d:7c:6c:01:a6:18:f4:
d5:5e:39:9c:4e:8d:06:c2:34:2c:25:67:17:3d:bb:8a:e8:98:
0b:20:9a:54:b9:be:4f:d1:08:84:34:5a:2c:88:71:1f:dc:36:
80:04:64:81:28:95:56:f4:e2:8d:02:d6:61:02:d9:aa:e3:bd:
bb:19:0a:aa:a2:0e:2d:b3:ee:16:cc:43:b7:0d:b2:7c:e8:4c:
39:1a:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:59 2026 by rpki-client