
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa
File: baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa (raw, json)
Hash identifier: TP9TCdZJaJecv5DnV22safvEWY/WK5wjuBEl9GOVse4=
Subject key identifier: 59:94:63:0C:21:9B:DF:52:DB:BE:60:C5:6B:8A:10:3B:A6:91:94:5B
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E5D14A8D0FCF49D6ED4A0EBC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa
Signing time: Thu 02 Jul 2026 09:00:12 +0000
ROA not before: Thu 02 Jul 2026 09:00:12 +0000
ROA not after: Wed 30 Sep 2026 09:00:12 +0000
asID: 31898
IP address blocks: 2603:c02d:8000::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:14:a8:d0:fc:f4:9d:6e:d4:a0:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 2 09:00:12 2026 GMT
Not After : Sep 30 09:00:12 2026 GMT
Subject: CN=1f6172e0-b820-4840-b587-b52702ff34e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:69:6d:98:44:48:31:cd:f4:c3:96:90:53:
3d:6c:bb:a4:f6:71:81:67:4a:d9:c5:bd:ab:61:78:
58:9d:93:bf:c0:09:49:e5:8b:86:6a:e9:1f:be:5d:
02:df:07:8c:b5:76:7e:8d:7b:fc:31:e8:5f:d7:26:
c9:5a:52:21:4a:41:04:50:7d:65:16:4c:5c:74:a6:
0c:d6:73:04:44:a3:b2:2f:49:ec:9e:84:2f:18:a7:
99:96:48:34:52:39:a3:b5:e2:a4:50:ee:02:ef:b3:
fa:ce:ae:b2:1d:3f:44:c0:03:ed:19:27:24:54:63:
a5:5d:f9:2c:44:35:18:9f:2c:0c:0c:0b:6e:93:29:
42:5a:7b:5a:3c:0c:c3:86:53:e9:5e:95:a0:36:af:
80:d9:30:d1:90:c1:83:26:0d:f9:f1:be:73:7b:20:
ba:6d:4b:22:d9:ed:5c:4d:f9:ea:86:e1:e0:54:00:
9f:8b:e0:99:1e:84:0b:3c:9a:8a:e1:b6:c9:19:7f:
47:43:a1:1c:fb:9d:3c:26:42:4b:75:6c:0a:93:f2:
6a:d2:d3:4e:02:74:1a:74:31:20:b0:5d:92:ac:58:
06:1d:f7:6c:9a:c1:33:af:2c:cf:1a:6a:84:b6:89:
89:2b:d9:9e:d0:9f:7d:3a:24:64:81:7a:2d:7b:c6:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:63:0C:21:9B:DF:52:DB:BE:60:C5:6B:8A:10:3B:A6:91:94:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baac5437-1589-37c4-83fe-d61d6ee5ebb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c02d:8000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:09:86:f6:12:59:cf:5c:09:9a:5f:d3:fc:b5:be:bd:52:03:
32:3e:88:a2:30:3d:dc:aa:22:e1:d3:22:6e:40:f2:6d:08:f0:
4f:22:fe:5a:f8:a1:4e:a5:b9:f6:92:c5:34:ff:b9:60:73:1f:
b7:d7:f9:95:fd:7c:08:2f:69:60:a8:f9:e3:9c:16:44:8a:86:
cd:1e:8f:33:a8:4a:f0:b7:f7:30:c1:6c:46:94:e0:a4:33:af:
1a:4f:93:35:28:56:3c:50:93:37:f1:df:09:3a:99:c4:e3:5c:
e8:a3:9f:f1:8a:a7:93:72:85:2b:95:9e:0c:49:f4:6b:24:d5:
ab:da:57:30:22:fe:7f:5e:9e:fa:fd:7e:ea:57:74:cb:99:19:
6b:a2:43:8a:7c:ba:9f:6b:c2:db:a2:fd:a9:74:14:53:b6:a3:
4b:d2:1e:db:fb:a1:72:ea:e1:72:a2:b2:7c:5f:aa:00:97:08:
c3:a1:55:aa:a6:bb:a4:bb:40:6a:b6:6b:ff:41:0a:bb:a7:f3:
be:58:88:b2:91:49:32:88:32:de:d3:74:ab:9a:72:66:34:fd:
29:2b:a7:7b:e5:b8:59:73:fb:0e:e3:ae:ad:14:24:0c:a6:d1:
5a:0b:20:74:01:ce:49:74:21:4a:9f:22:21:cf:91:f7:bf:10:
f0:86:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:33 2026 by rpki-client