
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a916d406-3990-3013-9f15-bb7f41efb9c3.roa
File: a916d406-3990-3013-9f15-bb7f41efb9c3.roa (raw, json)
Hash identifier: E0ZipiXkqaHdv3w+WC4acwhibfVfeRDO8oklqRwD2MI=
Subject key identifier: 59:12:5F:C1:DA:8E:F1:02:3A:D3:B1:F1:E3:6D:85:F4:03:CC:DD:C4
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5E835451F6E50817B58B00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a916d406-3990-3013-9f15-bb7f41efb9c3.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 2603:c010:8000::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:83:54:51:f6:e5:08:17:b5:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=de4c76b5-baeb-4899-969c-b7764dee45c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:57:5f:5e:2f:a2:74:75:37:8b:b5:3c:91:
ba:15:ff:dc:02:cd:06:38:66:60:2e:92:59:2f:c0:
26:68:09:c9:4b:cf:d3:36:44:6c:d2:5c:79:59:7a:
6b:23:7e:af:fa:75:8f:7f:7d:b0:97:c1:eb:ec:1c:
01:bb:92:20:78:af:25:9f:37:3d:76:74:24:de:9a:
af:1c:22:9e:ec:cf:50:ec:48:0f:de:89:35:c5:e6:
00:a7:63:d0:a5:c2:c3:21:4c:aa:d7:8b:bf:0b:97:
96:e4:5d:ff:06:f5:16:5b:bb:06:26:5f:4e:2f:f8:
7d:80:33:55:f9:8b:f5:bc:23:6b:cc:70:6b:aa:8d:
79:85:90:0c:16:f8:f0:a5:8e:9b:39:f2:14:f3:78:
db:0f:97:a7:bd:bf:ce:a4:b8:d8:57:cd:82:ea:82:
02:f6:34:91:4d:24:4c:a2:ca:94:15:89:ff:80:87:
be:e9:ba:42:f7:5d:c1:20:59:53:5b:b6:2f:07:42:
d9:a2:1f:85:e9:ab:a8:ff:4a:06:9d:6f:c2:20:7f:
a2:3d:9a:86:08:f3:53:de:e4:59:80:ed:b5:5e:aa:
67:80:dd:82:4c:00:84:5f:aa:13:a5:03:11:b6:f2:
7b:22:41:3b:3b:2f:75:2c:08:e2:b7:9e:8b:aa:9e:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:5F:C1:DA:8E:F1:02:3A:D3:B1:F1:E3:6D:85:F4:03:CC:DD:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a916d406-3990-3013-9f15-bb7f41efb9c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c010:8000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:1b:c6:9a:bf:68:c1:c1:a2:bb:6d:09:0e:27:fc:85:af:5c:
b0:9b:77:45:0e:5c:24:4f:d8:05:02:7f:cd:13:6e:52:59:b3:
4e:8b:88:2a:00:63:e2:b3:9d:a1:00:17:ee:9d:0a:57:74:08:
71:8a:25:51:0d:d6:8e:e8:3f:0e:86:90:3c:ad:54:44:ba:30:
9f:53:c2:94:71:5e:61:27:56:71:f1:c6:c7:9f:b8:21:03:f1:
c2:ad:9c:64:56:52:94:3f:bc:7e:bb:73:87:84:1d:08:33:32:
b8:0c:4f:1b:e1:f3:7d:f2:7e:d9:79:c9:02:8e:b5:bd:80:2e:
b0:5c:d7:43:bf:9f:e1:12:a6:c7:8f:52:47:29:98:41:09:06:
b5:5a:80:e5:d7:77:f5:64:8c:0f:5a:fa:8d:05:f7:b8:65:10:
cd:30:66:a3:72:46:19:3f:f2:0f:35:18:92:8f:7c:f0:f9:86:
46:2a:41:a9:f3:86:92:06:4f:e7:7e:a1:0e:de:e1:5f:72:bb:
f5:b7:79:71:11:55:a7:ce:c7:fd:8b:5c:ae:18:b0:f7:61:79:
4a:bd:e0:92:bf:28:eb:c7:5d:6d:2c:31:ca:7d:09:61:17:25:
fc:42:e9:db:3d:0f:37:2a:51:a7:90:67:7a:07:e6:dc:22:73:
b5:99:77:65
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuXoNUUfblCBe1iwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZGU0Yzc2YjUtYmFlYi00ODk5LTk2OWMtYjc3NjRkZWU0NWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnptXX14vonR1N4u1PJG6Ff/cAs0GOGZgLpJZ
L8AmaAnJS8/TNkRs0lx5WXprI36v+nWPf32wl8Hr7BwBu5IgeK8lnzc9dnQk3pqv
HCKe7M9Q7EgP3ok1xeYAp2PQpcLDIUyq14u/C5eW5F3/BvUWW7sGJl9OL/h9gDNV
+Yv1vCNrzHBrqo15hZAMFvjwpY6bOfIU83jbD5envb/OpLjYV82C6oIC9jSRTSRM
osqUFYn/gIe+6bpC913BIFlTW7YvB0LZoh+F6auo/0oGnW/CIH+iPZqGCPNT3uRZ
gO21XqpngN2CTACEX6oTpQMRtvJ7IkE7Oy91LAjit56Lqp6TowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFkSX8HajvECOtOx8eNthfQDzN3EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTkxNmQ0MDYtMzk5MC0z
MDEzLTlmMTUtYmI3ZjQxZWZiOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAEIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADxvGmr9owcGiu20JDif8ha9csJt3RQ5cJE/YBQJ/zRNuUlmzTouI
KgBj4rOdoQAX7p0KV3QIcYolUQ3Wjug/DoaQPK1URLown1PClHFeYSdWcfHGx5+4
IQPxwq2cZFZSlD+8frtzh4QdCDMyuAxPG+HzffJ+2XnJAo61vYAusFzXQ7+f4RKm
x49SRymYQQkGtVqA5dd39WSMD1r6jQX3uGUQzTBmo3JGGT/yDzUYko988PmGRipB
qfOGkgZP536hDt7hX3K79bd5cRFVp87H/Ytcrhiw92F5Sr3gkr8o68ddbSwxyn0J
YRcl/ELp2z0PNypRp5Bnegfm3CJztZl3ZQ==
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:37 2026 by rpki-client