
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa
File: ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa (raw, json)
Hash identifier: w/iA3FBcNsdW+8LtAnNsWsSMizLBBXreO2e9cQtuZRk=
Subject key identifier: A3:B1:F5:9C:17:F0:D8:6C:FE:7C:22:F0:1E:B6:35:0C:C7:00:EB:C1
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CB81C8000F7B158D0BEC34E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 31898
IP address blocks: 2603:c001:200::/39 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:80:00:f7:b1:58:d0:be:c3:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=25e20f92-4745-4723-b133-8439b9cfae0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:12:c7:37:60:f4:d9:db:89:3f:22:e6:0f:
eb:00:a6:f7:a0:a2:56:d7:ed:7b:64:8e:d8:87:06:
8c:33:01:a1:91:e5:04:b3:30:3e:9e:c9:17:6e:dd:
1d:24:67:1a:dd:83:3a:cd:01:69:67:54:a8:ba:4a:
a4:cc:00:70:ee:18:00:46:9d:dd:d8:95:a4:b3:5a:
07:95:db:40:64:72:e6:b6:48:99:78:3e:e9:ea:67:
d0:6b:31:87:1f:8f:3d:6f:2c:a6:8a:3a:99:a0:f8:
5a:3f:27:a9:5b:66:9c:31:fe:25:fa:8c:68:1f:ce:
3d:41:a1:14:ad:49:ad:07:00:82:73:6d:98:1b:3d:
aa:79:04:42:17:28:de:86:3e:bf:95:1c:36:19:2e:
91:3f:aa:9a:42:73:46:90:f0:02:3e:3b:cf:51:13:
6c:6e:36:0d:5f:92:d2:88:86:b2:b6:57:ad:d0:e4:
cc:20:43:b9:48:18:80:15:12:e5:8a:47:a1:e7:a1:
b3:26:9d:2b:94:ba:67:7b:4f:57:ec:68:77:f4:a5:
6d:20:88:47:f3:e4:03:9e:9c:77:71:a7:b3:e8:ed:
52:59:ce:3d:dd:68:d3:81:fe:50:3f:fa:8b:41:9b:
b9:48:2b:3d:72:e3:50:d1:e5:11:bb:f3:cc:43:1f:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B1:F5:9C:17:F0:D8:6C:FE:7C:22:F0:1E:B6:35:0C:C7:00:EB:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c001:200::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a8:ad:73:32:e9:43:9d:40:2c:f4:60:74:17:eb:58:c7:01:
1b:e3:5f:5b:a3:d7:f2:9b:d2:d9:62:b7:83:06:a9:c5:ac:6e:
c0:ab:fa:ea:3f:0c:e4:d9:84:e7:ed:3e:19:46:1d:03:49:c6:
63:90:46:cc:7b:2a:50:b9:f6:05:7a:22:10:82:4e:26:b4:21:
2b:21:74:94:f2:35:85:53:54:0d:c4:a1:71:bd:f5:ae:c1:c6:
9d:7e:1b:e9:53:69:b8:9c:06:e2:e4:60:60:d8:31:d7:22:91:
2c:86:79:31:fa:4e:a2:a6:88:a5:8e:01:d7:61:26:d5:87:0a:
fc:f2:be:ad:ce:3d:95:c3:2d:a3:14:73:ed:12:33:c0:e3:74:
8d:65:5c:06:bb:e1:3c:f9:a1:d4:a1:b3:32:d8:1e:db:5c:43:
0d:06:cc:93:67:3a:8e:4b:0c:89:79:db:fa:3b:0d:93:1f:4b:
69:8f:9b:d4:27:01:ec:07:01:a7:6d:d6:78:bd:a0:78:6b:90:
96:20:6a:77:95:27:d5:78:aa:a1:11:1e:ea:cb:b1:7d:5b:14:
55:fb:6e:88:8f:52:85:d9:eb:f4:8c:47:5b:80:a8:eb:c2:4d:
b8:7c:64:59:16:a6:ea:17:3d:5b:8d:16:7a:fe:30:6c:e9:23:
0a:af:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:04 2026 by rpki-client