
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88fba034-50c0-3871-bc60-34e74ae98149.roa
File: 88fba034-50c0-3871-bc60-34e74ae98149.roa (raw, json)
Hash identifier: tE1QB6IIEK/4jVgnSnCd7M78+qCDOibgERRCyOwva2Y=
Subject key identifier: EC:FE:67:89:29:67:89:11:B8:18:1A:F0:50:2E:A5:9B:84:00:8B:CB
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F4974C0879E804809224A1340
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88fba034-50c0-3871-bc60-34e74ae98149.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 54253
IP address blocks: 2603:c060:1200::/39 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:c0:87:9e:80:48:09:22:4a:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9bd605e5-9941-4aa0-912d-6954b834a91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:c4:94:38:2f:7b:53:6a:9f:ad:48:9c:a3:
89:34:aa:03:e8:07:a6:3f:57:e0:3b:21:00:b9:9a:
99:4e:c6:04:db:12:5e:fd:b6:6e:dd:78:1d:78:07:
3b:e4:f8:35:81:5a:79:03:14:2b:91:ec:83:e3:9e:
5b:29:44:da:d3:30:54:8b:9d:ca:e7:34:ff:00:e4:
50:99:8e:5c:a0:d8:83:ad:33:4d:e2:68:32:44:77:
82:2a:43:5e:03:53:b5:bf:aa:3a:1e:b4:fe:db:cd:
03:63:d0:64:aa:81:69:18:42:84:3f:8d:83:b3:9e:
b2:eb:76:db:9a:03:e9:9f:73:ca:a2:9d:ec:6b:fe:
ab:4b:ce:9a:b8:09:83:4b:6e:3b:27:6d:a9:ba:02:
06:38:cd:fc:a9:1d:1b:03:03:02:31:40:d5:30:80:
24:af:9b:26:d9:44:d7:0a:b3:87:23:ef:fc:bc:6a:
f2:91:07:4d:0e:06:b6:04:36:66:b4:64:9a:b8:08:
19:ec:98:e9:49:63:d7:a9:1e:67:ee:e4:b1:45:93:
e7:8b:92:55:4e:4f:a3:f9:d6:83:a9:64:40:a9:ef:
01:0a:2e:51:d3:99:ac:ae:0b:8a:40:c8:ec:b8:73:
2e:2b:24:ea:2d:03:4a:f9:55:39:bb:d3:e0:ac:26:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:67:89:29:67:89:11:B8:18:1A:F0:50:2E:A5:9B:84:00:8B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88fba034-50c0-3871-bc60-34e74ae98149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c060:1200::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:96:c5:f3:9a:0a:88:fb:4c:41:58:ed:be:3c:20:2f:72:be:
aa:82:69:d1:86:8e:b6:cd:b0:76:cf:74:3d:0c:73:95:cf:9c:
1a:fd:64:4d:f2:c6:5f:00:e7:02:c8:87:17:47:07:23:d9:2e:
53:56:d3:33:72:a6:a1:f6:e6:3d:a0:2c:ad:f8:48:e1:70:58:
aa:0f:99:f7:e4:35:7f:c7:85:97:b9:6c:11:7b:70:8c:26:42:
6e:d6:a2:06:24:3b:73:98:09:00:05:be:8b:c2:49:57:85:06:
9e:a0:81:c2:be:17:70:55:a2:68:c8:97:33:50:46:67:84:ba:
88:8c:1d:66:b8:79:51:d7:ed:7d:bf:bd:c8:c3:7d:e8:ab:cc:
0b:ca:94:b8:42:08:b8:9d:16:ea:ca:44:01:0e:28:5c:b8:90:
42:7a:7f:a5:2a:ea:10:a2:bf:89:e3:8b:f1:3d:f4:e8:6b:10:
3a:49:c8:da:47:7e:d0:2e:a9:8e:09:62:cd:ec:04:a9:8c:5d:
60:51:d4:e2:a6:b7:07:1a:c2:71:0c:2d:68:41:8b:55:7a:a0:
f5:a5:96:dc:67:e5:75:93:fb:b0:96:3f:50:bb:67:66:55:66:
1b:69:63:8b:85:04:93:fb:6c:55:2a:80:06:03:32:6d:b9:f5:
b3:a9:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:01:07 2026 by rpki-client