
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
File: 42982f4e-96ee-395d-8bf7-2f63618018bc.roa (raw, json)
Hash identifier: mVmeEcZVbOcNRXfiHwqfcvpddgm+ES8/I4T9oITSM8g=
Subject key identifier: 31:D6:D7:80:04:84:0E:23:B9:E5:A2:16:4E:E8:A0:C4:22:59:53:A7
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F498783BAC57EDB79DDF14340
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 54253
IP address blocks: 2603:c0c6::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:83:ba:c5:7e:db:79:dd:f1:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f0da7a8c-d4ad-4e16-b535-7b39f15c4074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:b6:55:cc:f2:18:94:4f:c7:a0:45:ac:b7:
34:da:d2:58:7b:58:70:b9:59:32:a0:51:46:c8:4a:
25:37:16:ed:ce:53:e9:cb:7e:a5:e0:bd:a5:79:ed:
38:b6:91:d6:dd:7c:3f:5d:ef:d8:13:5f:83:a5:95:
c3:0b:50:99:38:e1:d8:d2:7e:a5:95:bf:4b:05:3b:
b1:f6:97:9e:f2:bb:20:98:22:c8:74:c2:44:4d:91:
a1:f8:05:3a:c4:aa:b8:8d:de:37:b9:2e:a6:09:2b:
fb:66:4a:f8:ea:65:46:fe:27:7a:c6:ad:83:1a:c3:
d3:2b:8a:de:0e:3c:3a:e5:1c:bd:88:07:68:df:f9:
e3:e5:ba:e1:77:d7:af:df:47:a8:8d:f7:67:e5:e9:
c6:1f:29:35:3e:ff:e5:5b:b5:5e:b8:57:fc:6e:e9:
46:63:fd:85:41:e9:c1:cd:ad:2a:0e:53:e6:8d:65:
c8:d3:ac:61:9c:9e:e1:94:d1:06:14:d8:41:a7:3e:
e6:21:45:d8:b8:0b:6e:85:f1:63:a6:7f:6f:98:3b:
ed:bf:01:0b:a5:0c:a2:74:46:18:1f:72:a8:99:70:
75:3f:d0:3d:6d:36:42:92:04:68:5e:04:d9:84:98:
6b:8a:26:d2:56:e7:db:55:25:9c:05:00:c0:d2:a3:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:D7:80:04:84:0E:23:B9:E5:A2:16:4E:E8:A0:C4:22:59:53:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42982f4e-96ee-395d-8bf7-2f63618018bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c0c6::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:54:ee:28:28:35:bf:15:9b:c0:82:ec:1e:aa:d0:c9:c8:04:
8e:91:ac:63:ac:cb:90:3e:de:56:05:d1:ba:94:44:fe:98:21:
83:62:8d:3a:6a:34:37:03:b4:2b:d0:8b:c1:e7:48:97:e0:fb:
78:06:8e:bc:e7:c6:7c:94:6f:6d:27:d4:6d:69:ae:da:18:c2:
ef:c3:6c:c3:77:b9:1b:f5:10:81:ca:ff:64:4d:89:1f:4a:c4:
42:a6:c4:54:99:b9:05:86:49:a4:61:36:77:ed:b4:65:2e:f9:
6d:57:f1:1a:56:99:61:fc:25:d4:0c:78:ea:f1:d0:72:10:ff:
ca:1d:83:4e:3f:11:c3:30:f8:7c:fc:86:54:cd:fa:f5:fb:af:
23:cd:ef:fd:d9:bc:d4:bb:fa:10:09:20:ef:62:42:09:9d:d9:
98:92:6c:ac:a7:70:59:b0:60:8a:69:80:a7:7f:2b:50:75:da:
06:d1:d7:7b:f0:68:b8:fa:2b:9f:c2:79:05:e0:9e:52:99:a1:
4f:d5:43:58:7f:20:69:c3:7b:86:18:e3:1d:ac:82:76:5f:8c:
c9:70:06:da:1b:b1:e3:c0:27:09:3b:7d:5d:a5:e1:3b:8f:dc:
07:51:ee:aa:2d:95:9b:93:26:a0:17:64:76:30:d1:b8:c8:0d:
2e:77:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:57:33 2026 by rpki-client