
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a90a3a9-ea30-31a4-bb6a-124cab820284.roa
File: 8a90a3a9-ea30-31a4-bb6a-124cab820284.roa (raw, json)
Hash identifier: 28mOVuoUuPfDGdt+hyVD/N32WGI0AMVtVLPkCEfL65Q=
Subject key identifier: 11:02:69:33:E5:28:DA:63:AC:29:1E:1B:1A:56:9B:AA:3B:D1:DE:C8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584DD4C081353782DCFB5C3779C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a90a3a9-ea30-31a4-bb6a-124cab820284.roa
Signing time: Thu 14 May 2026 13:00:31 +0000
ROA not before: Thu 14 May 2026 13:00:31 +0000
ROA not after: Wed 12 Aug 2026 13:00:31 +0000
asID: 54253
IP address blocks: 2603:c0c4:2000::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d4:c0:81:35:37:82:dc:fb:5c:37:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: May 14 13:00:31 2026 GMT
Not After : Aug 12 13:00:31 2026 GMT
Subject: CN=f4c8abfd-4eb6-4930-9ff7-0054917e4564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:eb:a6:8c:8e:e2:6d:fd:28:62:3b:16:18:
87:46:cb:02:cd:74:16:5a:1f:31:32:b4:11:c8:22:
17:1e:b6:d0:b6:ef:6d:ac:56:d3:00:8f:85:9f:58:
0b:25:a8:c3:e3:1e:4b:84:04:7a:25:ae:01:b0:18:
ee:81:06:42:ec:32:9d:58:72:13:63:35:81:0d:9d:
15:8a:f3:b7:40:39:3c:32:4b:09:05:b5:bf:66:be:
7f:29:6e:b5:88:02:c0:ce:c5:28:dc:3e:81:cb:d2:
6a:df:03:b3:fb:ec:30:4b:f0:40:56:44:23:08:5a:
fe:05:4a:86:62:5e:74:bc:4d:36:48:ba:1f:10:2d:
45:81:35:67:da:a9:a4:78:72:82:32:d2:e4:20:84:
89:a5:fc:6b:96:f0:dc:f1:b3:08:b2:e9:d6:e4:6b:
28:7f:9d:ae:c0:ea:3e:83:3e:c8:11:e7:cd:aa:4e:
35:08:24:f5:0b:23:e3:4e:21:f6:cf:40:2d:50:86:
a0:b9:24:1d:43:33:d2:f5:e3:a8:12:9b:c0:a0:5e:
e5:4f:65:c9:80:d0:fe:32:bd:dd:46:c4:7a:2d:d8:
dc:bd:82:d8:6b:08:db:aa:6d:f5:93:9a:c7:ba:d6:
2f:c8:b3:ca:92:d4:69:eb:0d:3a:27:db:24:b4:8a:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:69:33:E5:28:DA:63:AC:29:1E:1B:1A:56:9B:AA:3B:D1:DE:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a90a3a9-ea30-31a4-bb6a-124cab820284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c0c4:2000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:d5:65:a5:84:44:73:f0:c1:cc:42:49:37:b3:e9:93:71:07:
c7:3c:5b:2a:a9:26:af:d8:48:4d:c1:e3:aa:29:32:5a:e0:c0:
e9:30:69:b9:1c:01:65:7f:d8:a4:60:dd:a2:52:41:89:8d:a1:
13:94:97:bd:52:3a:c0:0e:87:85:2f:e7:48:55:a5:cf:c5:b2:
3d:75:66:51:91:74:7b:c4:6d:3b:28:3c:f2:b5:d6:18:01:c4:
17:49:66:74:df:de:ee:1c:f3:c5:d7:2b:3d:ef:a7:36:3c:5f:
f5:77:23:c5:04:d2:77:ac:18:39:be:b2:2b:9a:ba:1d:19:64:
e5:1a:a1:bf:51:f4:ab:73:dc:f1:ce:5c:23:d3:27:6b:02:be:
e4:bc:26:4f:27:22:f7:5c:7e:5b:c7:65:88:76:7b:a3:a7:73:
bf:7a:3b:9c:ed:3a:98:19:d0:c0:fb:40:87:41:eb:78:f5:ff:
24:02:66:17:36:45:a5:a0:d0:f0:ad:4f:cb:8b:e3:4a:05:1b:
a9:fb:d8:69:cb:c6:fa:7e:0a:b1:08:a7:71:95:21:b6:76:63:
12:d9:e6:38:2b:09:6d:fe:a7:32:c9:3d:67:d5:a6:eb:69:4d:
53:8a:ca:aa:26:3f:9a:b7:c9:5b:1a:53:03:80:ca:d2:fc:85:
31:be:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:04:25 2026 by rpki-client