
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
File: a31ff1ae-befb-3b74-9c35-1231153f8524.roa (raw, json)
Hash identifier: HJ6zV/4BS/p+L/hoKmo8pxD7PxY8BPAyKxGwTY/gWrY=
Subject key identifier: C0:05:B8:48:EC:26:98:9C:D7:79:F9:66:4D:63:8E:61:5D:ED:A7:54
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CACF1B4F5C46B694C53DD5000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
Signing time: Wed 28 Jan 2026 14:00:36 +0000
ROA not before: Wed 28 Jan 2026 14:00:36 +0000
ROA not after: Tue 28 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 2603:c002:9000::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ac:f1:b4:f5:c4:6b:69:4c:53:dd:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 28 14:00:36 2026 GMT
Not After : Apr 28 13:00:36 2026 GMT
Subject: CN=53b0197c-2772-4838-94e0-30f4a9081169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:c6:84:ad:dc:84:2a:9b:b7:f0:8c:cc:0c:
a7:ca:d0:9c:96:9e:31:df:ad:17:bc:e7:71:64:2c:
13:c9:29:06:44:cc:7f:d9:f4:78:54:bb:e1:d7:d9:
c9:a3:97:97:4c:fc:ce:04:89:30:17:24:69:37:7d:
16:e8:bc:4c:ef:97:38:94:f1:c9:a5:b1:13:3c:48:
48:a7:84:3a:c0:df:70:e9:e7:73:a2:80:8f:a8:7b:
30:4e:28:e1:65:3f:b7:b6:be:39:b2:53:a4:f4:d2:
98:4c:81:8b:84:84:cc:4d:3d:b1:ba:ca:52:8a:1b:
e1:22:78:8f:39:0c:ce:ef:32:bb:1f:b5:87:b4:4a:
fa:42:f0:ce:20:b8:cf:22:9a:9b:a5:68:a8:b0:92:
e2:de:e5:e6:ce:ae:cd:05:a4:47:c1:51:d1:c1:9e:
35:a2:b0:49:71:a9:df:99:89:d8:ae:29:e6:d1:c4:
87:1f:66:a4:15:5f:81:51:7e:91:f0:e6:8a:3b:b6:
ba:62:e6:17:ad:2f:31:38:1c:7d:1e:97:86:6e:d4:
4a:c9:20:f0:91:ba:a5:af:35:49:a2:dc:2d:7a:5f:
8d:c4:2b:11:bd:1d:a2:09:5c:a4:35:3f:d9:39:b2:
1f:51:3b:93:cf:5b:0c:f8:33:d0:07:85:7a:79:f6:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:B8:48:EC:26:98:9C:D7:79:F9:66:4D:63:8E:61:5D:ED:A7:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a31ff1ae-befb-3b74-9c35-1231153f8524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:9000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:ce:75:58:a7:df:70:24:f8:e1:25:be:dc:e2:d8:de:52:98:
31:d8:be:9f:af:f1:82:6b:c6:80:ca:86:b5:94:1c:aa:85:66:
42:19:af:93:9e:61:92:2a:eb:1a:e4:c2:72:32:81:7a:ed:50:
58:98:a4:c7:fa:cc:53:61:e4:22:c0:22:61:a0:ab:7a:9c:ae:
48:7a:a2:a1:d1:e1:8f:31:ed:56:39:cb:74:ad:61:a4:69:1c:
96:b2:20:6a:6f:b9:b2:c6:d6:d3:a8:22:83:72:04:a1:0a:4a:
a4:df:56:42:1a:ef:29:b2:46:79:76:50:b1:e6:a9:59:b4:f3:
f1:49:c9:18:da:6b:e1:c1:3b:c7:84:51:c4:b6:20:c4:d1:7c:
7a:32:a2:f3:2e:fa:dc:ca:50:d7:60:10:23:a4:f6:30:d9:fc:
13:2e:5b:77:54:af:86:13:71:c0:4c:8b:e0:ca:52:b3:72:a9:
0d:8d:26:5e:fd:32:73:c3:9b:fe:71:56:01:32:75:05:7b:a3:
ea:11:0f:64:da:9a:79:33:82:15:33:f3:d7:7a:96:3d:1b:f8:
41:6d:41:81:b6:24:11:25:79:32:4d:9b:16:52:dc:20:ef:77:
5e:16:04:f2:7c:6a:87:bc:84:9b:68:1f:d5:56:3f:f3:db:69:
6a:60:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:34 2026 by rpki-client