
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2328ef54-a563-3592-82fc-a414dd746420.roa
File: 2328ef54-a563-3592-82fc-a414dd746420.roa (raw, json)
Hash identifier: A9n9l8aNy3qdasqtqXxnY2gDS+vTLFst7ceae8yMUE0=
Subject key identifier: EB:2A:44:1D:05:C7:01:82:90:09:D3:94:50:94:50:8E:D2:10:C6:83
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F0242224ED2AB8486305B1D80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2328ef54-a563-3592-82fc-a414dd746420.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 31898
IP address blocks: 2603:c024:8000::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:22:4e:d2:ab:84:86:30:5b:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=c549c16c-2f58-4e22-8bda-7e0983f9c1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:ff:08:34:31:bd:71:38:8b:51:65:95:b0:
57:b4:e0:a7:59:d5:98:e1:c3:4d:fb:54:1a:6e:c6:
72:10:72:2d:cb:97:99:8a:2a:30:d5:7e:19:1c:5a:
1f:8e:dd:34:64:69:c1:3c:e2:f8:a8:2c:7e:a2:ec:
60:77:b0:0c:28:73:e7:06:a5:09:b2:04:9d:65:de:
70:0c:2c:7c:c8:52:bd:b8:39:c6:1c:40:53:7d:5d:
37:ba:38:4b:74:a1:22:b6:aa:1b:f1:d4:b7:f0:be:
69:4f:de:89:e8:b2:64:ef:af:4f:7d:f3:9a:51:c1:
b6:b7:a9:cd:bc:ff:c9:b1:60:7d:da:e2:00:9a:d5:
18:b5:de:9b:37:5c:5e:24:aa:31:30:2d:9f:1c:28:
2e:04:8c:63:d6:cf:28:67:88:46:c0:b6:1a:d0:de:
65:54:9b:3d:27:2c:75:02:19:f4:3e:37:bf:d8:0f:
b3:61:bb:b5:5b:31:63:ca:eb:b8:49:d8:bd:88:cc:
b2:20:b8:92:92:ee:00:5b:c0:b8:a7:0e:cc:7b:83:
e6:5d:18:93:12:8f:a9:2b:b5:12:c1:ba:9d:36:41:
e7:d8:10:a8:00:6a:16:eb:81:ca:f8:be:fb:e8:e4:
b1:ee:9d:27:e4:69:a9:b6:9b:1b:26:0c:b3:52:bd:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:44:1D:05:C7:01:82:90:09:D3:94:50:94:50:8E:D2:10:C6:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2328ef54-a563-3592-82fc-a414dd746420.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c024:8000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:e8:20:ce:1b:b0:f1:98:1a:fb:35:22:04:4c:a0:af:4e:3c:
af:7f:5f:49:ee:1e:87:ef:99:26:c8:67:0f:7c:fe:bb:cb:a5:
40:c2:e4:a0:7d:cc:3d:cb:14:1f:a1:99:f5:d4:49:47:c8:53:
3a:d5:6d:db:ca:b9:ae:06:dc:93:2c:a6:aa:92:85:9c:cb:02:
66:00:65:be:db:9b:78:3f:f3:4d:f1:c9:7c:bc:31:39:90:40:
37:08:82:02:ee:e1:98:f5:40:50:ca:51:2b:2e:8d:ad:70:59:
9d:28:12:82:fa:e1:1a:fd:2b:b7:9d:18:48:56:4e:62:68:b5:
99:e3:24:51:17:67:80:0b:41:30:05:92:30:a7:22:01:25:3c:
db:12:e9:ed:7b:e2:cb:70:15:d7:d2:30:94:c4:03:39:6d:7f:
7c:ca:c7:3a:c5:63:81:0a:fc:ec:8e:23:cf:23:7b:71:a0:45:
75:4e:d9:1e:6a:50:72:1b:f2:9c:39:42:fe:1c:b9:45:94:46:
59:8e:fb:b1:3f:8a:9c:b0:32:0c:9b:aa:51:e8:75:34:e6:06:
04:43:86:40:73:09:84:4f:c4:80:6b:58:0d:b2:88:25:71:3f:
75:f7:bc:c5:b8:ab:ab:d4:e0:19:93:cd:5d:c4:12:53:ec:fb:
0c:01:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:50:56 2026 by rpki-client