
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa
File: ffcf3028-3ee2-3714-a697-77e69a103ad2.roa (raw, json)
Hash identifier: H/5Dm0FgB/ikJkUpHot5Fb7nu/petsOE8KRe3/+ZGlc=
Subject key identifier: D3:EE:D7:FB:53:18:51:F0:B1:0B:FE:75:85:2B:E1:BE:A5:8F:F5:2A
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CBDB1CEE41673670DB0B14B00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 31898
IP address blocks: 2603:c002:3300::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b1:ce:e4:16:73:67:0d:b0:b1:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=b0254320-e502-4349-81c2-496d8145b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:7d:f2:54:6f:c1:21:05:4d:cf:9d:be:bf:
6b:d2:97:8d:f6:c7:de:78:bc:78:61:8d:c3:3e:b7:
0a:b3:d2:c8:d1:2a:e8:46:40:f8:bf:45:1f:d7:0c:
94:c3:f0:14:15:62:ed:6e:07:1b:26:b5:29:39:57:
d9:61:ca:63:11:6d:ab:38:2d:04:51:a4:01:d9:34:
34:84:00:2a:d6:65:88:49:3c:fe:86:ec:ca:39:ef:
9c:9c:41:16:fc:bc:64:8b:fd:ab:cf:2f:67:e2:f6:
65:4f:ae:21:a4:9b:07:7a:92:db:3b:02:2b:83:fd:
bf:4e:a4:30:8e:3c:53:9e:b6:ca:19:b2:64:58:72:
f3:49:50:70:42:f9:76:84:9c:75:e0:5e:d0:70:69:
bd:3b:e7:74:8a:df:ea:52:e3:0f:59:6e:ff:f6:6e:
5a:3a:f6:64:26:79:8e:a1:21:29:37:a5:fa:94:fd:
11:e2:bf:a4:bf:ae:ba:7e:c2:fd:1c:7d:55:50:e8:
45:e2:97:77:64:94:88:9b:c7:b6:49:4b:33:2b:b6:
8c:69:35:b6:36:f7:cf:b6:ca:c0:c7:af:48:56:af:
f4:85:68:5e:70:54:ce:c4:a9:94:3c:d1:99:05:4e:
a0:08:64:d8:71:29:88:f8:54:8d:f1:71:35:31:13:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EE:D7:FB:53:18:51:F0:B1:0B:FE:75:85:2B:E1:BE:A5:8F:F5:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:3300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:4a:fd:a4:37:2a:b0:71:c8:39:e7:63:c5:93:72:57:14:e8:
ea:75:f6:ed:da:3d:e8:09:8f:67:53:5d:80:b0:ae:f4:5a:45:
46:ba:2b:b3:e5:c3:b9:fc:5d:6f:10:7a:f6:ac:60:e3:a1:79:
44:3f:4d:70:5f:0b:38:27:23:ea:e4:29:01:6f:88:27:7c:02:
60:a4:ad:01:e6:1b:26:2e:5a:93:51:f1:97:c6:22:7c:2e:70:
75:3e:fb:83:ec:2c:31:21:81:ab:35:3b:c1:95:62:03:45:03:
82:2e:69:3c:4d:bc:e3:09:b0:b4:35:aa:ac:2a:87:97:e4:c6:
05:a9:b8:3a:0f:bf:24:92:1f:e5:a3:7b:f5:6e:b2:23:23:46:
33:b8:bc:9c:e5:29:ff:b4:69:9a:2e:2b:ae:1b:3c:ad:1c:82:
9d:0b:bf:b1:a0:4e:bd:7c:7d:89:5b:c3:a7:0b:05:99:58:0b:
ec:d9:e5:d3:d4:a4:b5:70:00:2f:71:8f:2d:51:00:fd:4b:26:
68:3e:1c:29:13:9f:04:16:ef:95:e0:13:f3:d9:e5:d8:90:dd:
43:79:13:ce:0c:3c:32:c5:30:93:93:18:01:8c:de:03:cd:d8:
c7:92:09:40:1f:42:15:34:8f:7f:3b:46:b3:10:d9:7e:7e:c1:
f5:30:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:32 2026 by rpki-client