
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa
File: 8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa (raw, json)
Hash identifier: XKAIroqj1I4AIYqEjakl+bCibQ4P3qXAgSNQ83sxQtY=
Subject key identifier: AC:16:1D:BD:72:F1:88:82:F4:2C:DC:41:56:1F:3C:4A:C9:F7:BD:44
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584DCC60619A3F4A5531625DF080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa
Signing time: Mon 11 May 2026 13:00:31 +0000
ROA not before: Mon 11 May 2026 13:00:31 +0000
ROA not after: Sun 09 Aug 2026 13:00:31 +0000
asID: 54253
IP address blocks: 2603:c089::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cc:60:61:9a:3f:4a:55:31:62:5d:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: May 11 13:00:31 2026 GMT
Not After : Aug 9 13:00:31 2026 GMT
Subject: CN=0bda9af0-1246-4e70-b55f-6bc356ae99a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:dc:75:5e:5b:e4:c1:f7:24:92:dd:f3:7a:
ff:f6:4c:6a:fc:fb:0d:a9:63:b8:a7:69:05:10:4a:
3b:13:fe:fd:28:6d:06:b5:c5:1c:7f:e3:6c:f4:ce:
46:56:52:fc:2c:88:86:c9:9f:45:b5:4f:63:b2:31:
2a:a1:01:29:79:99:6c:ca:e5:12:9e:53:9d:17:63:
c7:3f:96:bc:72:b3:af:d7:69:40:84:40:83:c7:e6:
c6:8a:3f:24:75:f0:79:7d:70:0f:f9:b0:cc:8c:d6:
fd:50:75:7f:9a:80:98:35:68:d8:a7:4a:d5:77:2f:
7f:83:ab:3e:0a:3c:de:1a:96:4b:f5:a9:e0:1d:fb:
aa:ef:80:15:90:af:30:75:f0:1f:42:7d:55:aa:47:
9f:b3:7e:29:f5:fa:9b:a1:0d:3a:f0:23:e4:e5:d6:
dd:aa:c7:c2:2d:68:28:d0:09:72:74:26:78:6b:97:
30:8c:e9:64:4a:54:01:61:4f:59:a2:14:81:e1:d5:
35:4a:5d:77:ad:76:f6:00:bc:af:12:b0:22:4d:81:
54:fb:6a:3b:a2:a1:5d:09:e6:b2:7a:66:dd:54:34:
e7:3c:8c:f2:63:5c:cf:f7:59:96:03:4b:92:b2:2d:
fa:f0:c1:14:31:af:f0:f3:ad:6e:3f:6d:81:22:a7:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:1D:BD:72:F1:88:82:F4:2C:DC:41:56:1F:3C:4A:C9:F7:BD:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c089::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b9:e4:30:fa:1a:3e:a1:3f:14:da:52:9a:0e:fe:c9:07:29:
8a:61:d7:4a:ba:30:5a:2d:71:a5:5e:43:cf:74:a8:d2:63:74:
bf:3b:81:56:f9:9e:ac:da:30:30:6b:58:12:3f:6f:24:c0:52:
1a:d9:7a:68:c6:a9:b4:6d:b9:54:e9:b0:05:e0:33:5d:46:96:
62:ef:d6:5d:1d:88:c8:8f:16:05:48:46:81:1f:67:e8:20:8f:
9a:62:10:5c:48:cd:03:9d:6c:0e:ee:5c:99:e2:d7:6e:47:c1:
a0:a5:47:6f:21:ff:89:4c:70:5d:48:59:90:ed:84:ed:98:c2:
09:dd:30:e7:80:e5:df:cd:a6:44:42:3a:29:a8:5b:ff:7f:9c:
32:f0:cf:e8:0e:cb:0c:87:47:57:c9:47:c6:6e:51:04:58:c2:
ae:7a:22:36:a0:a5:95:5c:a6:a3:a1:79:d3:46:82:f2:48:e7:
2f:1b:24:c0:9e:60:27:1f:28:33:d7:3f:6c:28:b2:0a:b7:d8:
af:1e:f5:32:97:bb:57:53:39:8b:96:ce:8b:92:88:35:08:df:
6c:be:94:d8:83:c2:ff:c5:df:8f:23:d0:38:1c:b6:09:e1:4d:
77:46:d4:e8:13:55:24:02:73:c4:db:d5:48:3a:89:43:b6:d1:
30:24:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:47 2026 by rpki-client