
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a40f4963-3da7-322d-b0b6-4ad887798e20.roa
File: a40f4963-3da7-322d-b0b6-4ad887798e20.roa (raw, json)
Hash identifier: 57b9+QNYnbnLK1K2idkLMeXoMASbNZyr6ZjbkGLXMR0=
Subject key identifier: FF:0C:DB:4C:33:14:6E:3A:C2:AA:E5:AE:AF:09:B3:B4:E5:A6:35:79
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8AC535CA2AE5047F6DA35400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a40f4963-3da7-322d-b0b6-4ad887798e20.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 2603:c011::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:35:ca:2a:e5:04:7f:6d:a3:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=a9a5c024-c2df-4a8e-9856-76c2263cbff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:15:d0:3a:09:9e:8f:16:a7:47:c0:72:50:
b4:60:8a:e3:18:57:54:e8:f5:0a:27:7c:1d:49:00:
92:29:ed:61:f1:8d:61:5e:83:7b:fe:77:0f:d5:47:
80:e6:6f:c0:d7:3a:f4:85:4b:57:05:50:d3:83:65:
55:a6:b2:5d:64:7e:e1:96:e7:ba:c5:d5:c1:39:8d:
f0:ed:b3:c5:19:4b:7d:98:1c:89:7f:d1:e6:60:94:
53:48:01:ed:55:ef:0c:f6:85:b6:cb:5f:ac:81:61:
0d:21:14:02:17:d4:7c:67:0e:d0:de:1a:24:46:3f:
14:e9:ab:c8:e6:d9:4f:4f:16:32:05:3d:41:9d:f1:
c0:b9:79:20:6a:9f:4a:a3:1a:4f:e4:1c:de:84:d0:
4b:d9:18:f9:6b:94:52:0e:ec:69:88:b2:19:2f:d5:
ce:43:56:b2:9b:97:a8:66:70:6d:30:aa:34:36:9b:
20:f9:0e:3b:e6:69:76:c3:d2:3a:79:79:53:26:9b:
b8:3a:7f:46:d9:8e:a3:26:b1:af:58:f5:b5:3c:72:
a5:74:eb:0a:d1:c4:be:ff:44:7f:85:91:64:90:0d:
d8:88:e8:29:67:72:c0:15:e2:cf:99:dd:d5:fe:93:
1c:22:1d:6a:31:6a:71:19:c4:98:c8:3d:4d:0b:cc:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0C:DB:4C:33:14:6E:3A:C2:AA:E5:AE:AF:09:B3:B4:E5:A6:35:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a40f4963-3da7-322d-b0b6-4ad887798e20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c011::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:72:0e:02:a9:21:d5:fb:a5:72:4c:ff:2f:2b:32:cf:fa:9c:
2f:55:54:62:4d:8d:d6:c1:ca:73:0f:d9:2c:07:b9:20:83:38:
83:bd:42:87:f0:72:66:fd:73:b7:a9:f1:ad:f7:f6:85:94:9e:
91:65:15:52:45:52:f8:74:55:53:36:cf:4a:5f:ab:96:14:e0:
0a:65:ec:ba:a6:cc:61:c4:ec:8c:f5:ca:aa:05:aa:34:f6:23:
b0:2b:3b:21:02:05:64:c6:77:cf:2f:cc:cb:81:47:f8:98:38:
8a:02:92:34:52:c8:0f:15:9e:be:89:35:47:99:65:ef:07:66:
13:db:42:f7:44:cb:95:b2:22:1f:3a:78:2c:c8:1f:8a:7f:47:
d8:38:39:44:ba:fc:28:64:46:ca:6d:5a:23:70:33:00:98:36:
2c:e2:8d:59:6a:8b:5d:d8:ae:44:2b:64:8f:33:cd:5f:06:70:
c2:e6:ee:d7:ed:f7:8a:85:95:ef:de:00:e7:05:6f:05:21:dd:
49:be:29:7f:98:ad:88:ad:da:5d:79:c5:bf:6d:c4:12:92:76:
68:8a:46:2b:cb:ad:9e:b4:7e:7c:a8:51:18:1c:8b:94:c9:c4:
fb:a1:ff:d6:b5:b9:39:72:b6:6c:48:42:9b:a8:3b:0c:76:99:
c9:38:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:39 2026 by rpki-client