
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
File: 4721ce1e-db3c-323a-81b9-82a9284f2c47.roa (raw, json)
Hash identifier: ZabZOilMj3Qr+hADecKXPEKzgr7hy9uiF3Z5KrY/jHY=
Subject key identifier: 16:E2:05:49:CE:83:BE:75:CA:3F:49:24:15:EB:E8:7A:D7:6D:DD:8A
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8D8FF33E925F21DC4BFA8E48
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
Signing time: Sun 19 Apr 2026 01:00:23 +0000
ROA not before: Sun 19 Apr 2026 01:00:23 +0000
ROA not after: Sat 18 Jul 2026 01:00:23 +0000
asID: 31898
IP address blocks: 2603:c002:2800::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8d:8f:f3:3e:92:5f:21:dc:4b:fa:8e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 19 01:00:23 2026 GMT
Not After : Jul 18 01:00:23 2026 GMT
Subject: CN=3bffff6a-9537-4544-98c9-ece322333daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:3b:82:ee:53:75:70:98:26:6b:5e:66:df:
e7:fb:17:03:00:62:e0:e0:76:41:dd:c2:96:0b:df:
c8:68:28:32:07:ca:90:e6:2a:93:f9:88:b5:47:66:
98:b6:92:a4:b1:dd:c9:9d:e9:9d:f4:6c:da:f0:9c:
99:fd:03:29:64:e0:2b:30:52:35:38:2a:16:95:87:
3b:f0:5c:51:00:2d:45:e8:01:66:a6:24:eb:fd:f1:
78:8c:8d:88:94:71:06:59:fa:37:28:4a:65:9e:e6:
fa:8a:41:64:f1:f5:67:77:79:ed:32:06:d0:81:25:
62:c6:2b:c9:41:80:be:b7:8b:3d:c4:e2:20:92:d3:
4a:ed:73:15:38:6b:c4:5f:0f:6d:f7:9c:af:ff:75:
aa:3d:f1:69:c8:df:39:cc:7b:f7:52:e6:6b:ab:6d:
f7:36:b9:4b:cd:86:69:55:22:13:32:8d:c9:04:41:
32:27:f1:ea:c5:b5:48:44:bf:69:a9:7c:8b:11:3b:
57:06:b8:18:4f:e6:83:1f:f2:5d:47:d8:69:e6:0b:
d7:66:d9:d5:a5:f1:23:8f:49:ac:44:c3:1c:f9:f6:
ea:0e:dd:32:0d:fb:52:b5:01:c0:4d:fc:d6:82:59:
7b:80:66:72:2f:24:70:7d:91:e8:3a:e1:65:1b:5a:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:05:49:CE:83:BE:75:CA:3F:49:24:15:EB:E8:7A:D7:6D:DD:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4721ce1e-db3c-323a-81b9-82a9284f2c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:2800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:9d:9a:d3:e7:43:c4:aa:7b:d4:82:2f:6d:98:9e:55:87:93:
00:1d:28:25:2f:a6:c9:a3:76:7c:55:a4:93:61:f9:ea:be:ff:
15:86:c6:22:31:0d:9f:01:c2:35:3f:3e:44:51:42:85:5f:d5:
70:cb:84:b7:99:96:60:6e:16:2c:73:01:e1:6d:1a:23:44:a3:
9c:16:45:66:fd:cb:f2:b0:f4:f8:5f:1d:18:a5:bc:d5:ba:74:
33:ca:ff:eb:85:da:a1:f2:a1:46:01:45:92:c8:23:50:d0:b8:
36:82:65:76:4e:49:c8:91:f7:32:e1:ff:48:21:48:b2:11:58:
20:93:61:a9:7b:c9:15:02:5d:c8:8a:26:73:00:27:fd:cd:dd:
93:cf:a6:bf:cf:16:ae:05:1c:23:b0:18:07:7d:1a:31:7f:be:
de:a2:a2:a3:91:8f:d4:d7:8f:46:e2:86:b1:66:be:88:84:ea:
7e:97:10:31:03:5b:dd:89:2a:ad:66:dd:ef:83:40:57:a7:bc:
86:11:e1:9d:8a:ac:cb:5a:8f:19:f7:fe:69:e7:28:43:e0:9a:
41:65:74:3f:3d:21:4d:2f:2c:de:56:21:fe:e0:8a:97:73:f4:
5e:aa:80:66:66:f4:3f:a5:3c:d9:4c:b0:91:6e:a9:55:3b:62:
b2:10:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:10 2026 by rpki-client