
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6781a290-8983-3dfc-a889-3990f6de878d.roa
File: 6781a290-8983-3dfc-a889-3990f6de878d.roa (raw, json)
Hash identifier: z8fGqW9QlqjDlfvJ/zpzCJXfvhbmnxbPU5t2esgpzbY=
Subject key identifier: C1:65:6E:A8:21:C3:29:DC:FE:F5:2A:DE:0A:4C:57:5E:14:1C:50:E8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D233AF002053614288112C280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6781a290-8983-3dfc-a889-3990f6de878d.roa
Signing time: Wed 11 Mar 2026 22:53:37 +0000
ROA not before: Wed 11 Mar 2026 22:53:37 +0000
ROA not after: Tue 09 Jun 2026 22:53:37 +0000
asID: 54253
IP address blocks: 2603:c060:2900::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:3a:f0:02:05:36:14:28:81:12:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Mar 11 22:53:37 2026 GMT
Not After : Jun 9 22:53:37 2026 GMT
Subject: CN=d3025a78-cfd0-4298-a68f-f58c9ee97a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:d4:85:b4:a0:e6:0e:18:9b:dc:08:b8:87:
45:c4:f9:c6:d3:54:e1:22:0d:ca:4d:ba:40:d2:e8:
c9:40:9d:73:3e:41:5c:12:2a:be:b1:b7:6a:09:88:
79:1d:8a:fe:35:9d:a5:08:7d:78:04:09:b8:09:72:
a3:c9:8e:7b:64:ff:e0:96:fc:fe:c5:a4:6b:d6:7b:
9e:13:78:f7:f1:9c:0b:fb:b4:47:09:ba:c1:77:eb:
ae:d4:f2:cf:d5:eb:75:1f:5c:fd:c5:62:20:7d:ff:
1b:d1:86:ed:5d:c4:a8:5a:d3:f9:44:4b:00:f8:07:
8a:f3:34:2c:09:99:be:e7:5d:7b:ee:8e:d4:58:39:
d1:8a:39:a1:4a:14:50:be:a1:2c:56:26:d3:e2:e0:
60:cc:1c:1f:98:ee:2e:4e:d5:8a:b7:fd:92:d3:10:
23:ec:c0:f2:28:76:9d:7e:08:05:63:72:5b:02:dd:
7f:36:55:34:ca:f2:5f:cc:c0:49:4f:14:d2:e7:e8:
6e:10:32:c8:e5:50:82:31:f6:2b:17:74:12:21:3d:
b8:e8:50:1d:2c:76:bd:98:3b:0f:b5:b0:58:e8:c0:
70:4a:ca:a5:b7:db:2f:53:36:26:c6:6e:5d:83:3c:
4c:14:a3:4d:22:4e:65:6b:cb:e7:b8:67:b4:7b:e6:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:6E:A8:21:C3:29:DC:FE:F5:2A:DE:0A:4C:57:5E:14:1C:50:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6781a290-8983-3dfc-a889-3990f6de878d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c060:2900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:cb:dd:20:ac:06:bc:72:42:f2:fc:1e:41:84:e2:a1:35:df:
fa:8d:21:9c:a6:6f:c7:e3:ce:17:75:fb:64:6f:b6:2b:5f:d0:
7c:cb:9f:a5:64:a8:af:05:80:27:1d:fb:41:12:cf:68:eb:08:
3c:9b:73:2a:15:3f:dd:1c:9c:23:6f:36:3a:d9:b9:a1:25:fb:
b4:e7:83:d5:fc:14:ae:74:3c:6a:e1:6d:5a:25:c1:ef:25:97:
bc:a5:84:2c:9e:6f:66:ad:05:c2:3e:77:44:1b:98:d7:cf:10:
b3:25:25:9f:e1:fe:a5:b3:b9:14:26:d5:4a:3e:cc:c3:ea:3c:
3c:10:ae:f7:05:8d:c0:43:24:85:90:c3:51:87:1b:80:2c:68:
18:9f:4d:30:b0:ce:11:b6:72:d2:b1:3d:7a:f3:b3:98:47:69:
d8:07:58:82:d4:18:28:97:ad:3e:b8:3a:89:f4:93:cb:62:1b:
d5:4f:a4:d9:0c:10:57:58:2d:63:c0:cc:21:04:13:3c:e3:6b:
3d:cd:9d:09:31:b2:4f:0a:d1:ae:ec:b5:53:ab:17:b1:ff:7b:
97:2d:e6:ad:cc:ef:65:bc:ec:6a:7a:1c:f7:88:26:be:a3:d8:
d8:3e:76:2c:50:ae:9e:30:9b:24:a9:22:36:64:d8:4f:5c:c5:
b7:54:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:54:17 2026 by rpki-client