
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa
File: 8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa (raw, json)
Hash identifier: gdi8km6c1ZCDOBJngLGuXA3kojD2/i3F+PYRWPl344Y=
Subject key identifier: 03:3A:5B:54:2E:89:75:62:2D:97:F7:98:0C:DA:65:9B:C5:4F:1F:A3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F4974D9624296A44603923E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 54253
IP address blocks: 2603:c089::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:d9:62:42:96:a4:46:03:92:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ff017734-c597-4412-a4f3-ee4b1c819a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:2d:3a:b5:c9:ed:84:de:5e:b0:48:b6:dd:
07:75:c7:c3:ca:22:cb:26:53:c4:52:e1:69:76:c2:
30:c7:19:f5:41:42:68:11:7f:29:48:40:1c:f2:46:
ad:c6:36:55:5e:c5:d9:86:30:da:3b:b4:28:24:ac:
df:33:fe:4d:02:43:f4:5d:e9:38:14:46:d4:58:59:
d6:70:95:61:3c:26:85:c9:fc:8d:1d:de:59:4f:26:
a6:1a:14:bf:4c:72:73:ad:e1:33:62:0f:a1:b1:5a:
c1:1d:4e:e1:c5:0a:8f:45:4d:b9:ee:b2:c6:8e:f4:
bc:5f:43:06:61:b9:38:6f:03:26:32:db:17:53:64:
47:60:09:c9:c4:5e:25:41:78:a7:4f:bd:11:12:ea:
c2:23:08:69:b2:3d:cf:0c:16:d5:08:9f:6e:6f:8d:
8c:6b:b3:14:ad:ee:75:07:1c:c6:7a:aa:59:7a:84:
27:3e:d6:fc:5a:16:68:0b:a9:5b:65:59:12:0f:5c:
bc:b4:ac:73:90:a2:88:21:7b:21:4d:60:e6:f7:ba:
28:0f:29:08:ea:aa:1b:f5:46:fc:c3:89:12:5d:06:
fa:ad:f0:53:41:62:90:4f:8e:2b:6d:c2:cb:ae:0c:
17:8a:09:8a:fa:c8:e9:ff:2f:78:fd:83:6d:22:65:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:5B:54:2E:89:75:62:2D:97:F7:98:0C:DA:65:9B:C5:4F:1F:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c089::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:4e:e9:1e:13:63:b1:78:5c:05:85:b6:84:16:8a:c6:ab:5d:
1e:4a:01:a2:74:d7:27:1c:05:f1:6f:a7:13:b0:22:8b:28:7d:
17:94:ef:9d:96:e6:69:db:44:d2:66:aa:c9:10:b8:3c:e3:85:
34:45:54:ed:e8:50:4e:2b:8d:eb:7b:be:06:f5:c2:87:00:ee:
c7:54:4e:62:67:a8:4e:93:b6:1d:a2:a8:b3:41:9a:57:36:83:
7e:dc:9c:48:54:9c:e4:8c:b5:b1:16:6e:6e:ff:33:b0:5f:f3:
33:4c:80:b0:71:98:46:5a:39:70:88:9b:18:71:fd:50:34:cf:
64:d2:10:da:7b:39:a0:db:99:d7:c1:1c:db:cb:14:9b:7e:65:
ab:27:b4:ca:6b:c1:6e:53:ff:6c:ba:aa:34:da:4d:33:0b:e1:
27:38:43:29:0a:fc:3a:57:b1:88:a7:b2:96:34:8b:3c:3c:22:
37:a6:1d:db:1a:12:49:34:52:d3:80:00:e3:b4:53:e4:fd:1b:
27:86:66:19:1d:d5:58:64:04:2e:2c:df:a3:68:f5:4d:fc:eb:
fa:4e:34:35:1e:45:cc:5b:01:3d:de:3c:c6:84:d0:c8:fd:6d:
69:eb:da:98:22:c1:b0:11:d4:fe:86:99:3d:14:24:56:6d:5f:
53:f0:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:52:06 2026 by rpki-client