
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa
File: b20e4012-fff3-3e25-924a-a029bf37b709.roa (raw, json)
Hash identifier: 7ug/NVwiO8/4piLzcI865wWQA76cdSqyGCglQHVkxF4=
Subject key identifier: 3D:9C:60:C4:DE:8D:72:1C:A3:6A:8D:77:73:7C:1F:38:69:48:21:01
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CACF1C86DD10026F1C4BCFC00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa
Signing time: Wed 28 Jan 2026 14:00:36 +0000
ROA not before: Wed 28 Jan 2026 14:00:36 +0000
ROA not after: Tue 28 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 2603:c02b:4000::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ac:f1:c8:6d:d1:00:26:f1:c4:bc:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 28 14:00:36 2026 GMT
Not After : Apr 28 13:00:36 2026 GMT
Subject: CN=8d22561b-6133-40c6-9a71-f2186d0db7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:16:85:41:e7:0b:c9:ab:54:41:7a:5b:50:
e3:40:8e:30:10:35:e5:1c:f3:5e:6e:88:23:3d:7b:
0c:ed:25:91:49:a9:f5:4c:b5:48:3d:bd:86:ec:11:
71:55:cf:a3:98:a9:c9:06:6c:5e:a2:ea:ac:f2:98:
d6:0d:6a:4d:65:c3:5a:d0:e9:7a:e3:15:53:b4:45:
cd:9f:73:99:8a:f4:8c:32:32:85:52:35:80:c7:a2:
bc:02:8c:b3:03:7c:a6:76:da:6e:17:d6:ec:e2:56:
9a:b4:34:1f:01:27:31:35:d4:96:86:e3:b1:16:b6:
55:1c:2a:a8:a2:be:b9:17:e5:6b:45:30:ab:fb:d9:
aa:08:b6:cb:1b:a5:ed:4d:7d:f1:5a:b1:37:cb:29:
71:10:06:b1:cd:b2:6a:70:17:5e:35:4d:7e:19:e9:
cf:f5:16:f6:03:90:68:92:b8:97:d2:a7:b0:d6:09:
4e:6e:c9:18:5d:cc:bd:4b:2f:c4:1e:19:60:04:0a:
3f:20:4f:d8:bb:c2:d0:80:7f:8f:79:5f:ec:e8:0c:
14:8d:86:68:99:61:b3:6d:71:3d:36:8f:57:be:99:
a9:88:cd:5a:f6:2e:d2:0e:cf:99:fb:81:d9:34:af:
ae:09:0b:ee:6f:4e:c3:45:0c:f0:63:4d:9b:10:59:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9C:60:C4:DE:8D:72:1C:A3:6A:8D:77:73:7C:1F:38:69:48:21:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b20e4012-fff3-3e25-924a-a029bf37b709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c02b:4000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:36:2c:fd:b8:6c:ae:6d:4f:0c:c3:7a:2d:47:f6:26:8a:df:
92:c4:8d:71:d9:d3:9f:6b:e4:b1:08:fd:9f:05:ad:cb:22:89:
13:6c:63:3f:27:02:18:a2:28:17:fa:db:43:ca:92:8c:1c:46:
28:0e:da:40:13:04:c1:8c:b5:d0:27:bc:6e:b3:8d:43:5a:d9:
3f:30:1a:30:2b:2d:b7:05:1d:de:f1:1e:1c:ff:6c:0c:d5:1b:
ba:85:1a:a3:68:12:bf:69:ab:06:cf:ee:34:26:67:bf:bf:39:
4c:b3:7f:ff:21:65:27:bc:de:73:d7:77:b9:7e:33:7c:b5:d1:
54:bc:9a:e0:44:db:a3:e6:b8:6b:1a:bd:1f:66:0c:67:bd:f2:
91:e1:55:bd:37:f7:5c:8a:fb:7f:ca:30:69:de:7a:e4:5d:9b:
ff:99:51:9a:0d:15:7b:02:8c:89:a0:03:38:2e:2f:06:ad:98:
52:a2:77:f5:74:01:bb:0f:77:70:e9:4e:2e:f6:83:80:17:99:
24:f7:95:5a:f6:65:d9:8c:ad:6d:7f:28:89:9e:35:70:2f:92:
4e:a3:3d:14:bb:1f:1d:c5:b1:8b:69:cf:54:8d:ad:71:75:dd:
20:7f:6e:2e:da:25:c6:56:03:aa:8b:6d:0c:03:a3:9e:af:9e:
a6:e8:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:28 2026 by rpki-client