
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa
File: ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa (raw, json)
Hash identifier: 9nT9XdqjMPW+lAIxazXGnrk0g6yilAsS543qXnNEc3s=
Subject key identifier: 1C:FE:BE:44:D9:83:1B:E6:BC:11:95:0B:05:B4:B8:62:E8:C3:73:DD
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8AC52C2574E1911B62F33180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 2603:c028::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:2c:25:74:e1:91:1b:62:f3:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=ec58f97b-5005-4879-83a0-082d910be58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:40:f4:59:c3:38:cb:06:1e:2b:79:a1:b1:
21:aa:0b:0c:36:bc:fd:a8:f3:40:ef:6d:87:00:b8:
6f:6e:24:d2:19:da:6f:91:65:a9:93:63:32:ef:72:
a5:98:1e:3e:19:7b:ca:3e:cc:24:62:9c:80:31:7d:
7a:9f:d9:d9:86:7e:ed:55:f1:90:b2:2e:62:fa:4d:
84:9d:74:1e:4a:03:54:2b:77:16:fa:8c:89:e5:b2:
c5:7b:69:b1:26:be:2b:63:95:97:be:d3:6b:29:45:
25:48:65:5d:ab:d5:0f:0d:8e:7f:0b:7c:4c:fd:22:
4e:f2:db:26:85:1a:26:90:40:5a:fe:7a:f7:d5:d2:
05:f5:fd:9f:2a:0e:0c:10:ef:a5:bf:d2:f8:b5:c7:
0b:6c:1c:c4:42:7d:a9:bb:cd:be:94:be:fd:a8:b4:
a6:a9:2c:2e:84:c8:ce:b8:ca:b7:fc:07:1f:16:05:
5f:21:d8:e4:dc:67:1c:2a:72:5d:e4:02:d7:f6:cb:
93:59:76:82:f5:62:e9:ef:2f:bc:d3:16:da:06:1b:
66:3f:e5:8e:56:80:50:76:df:a2:99:32:be:ea:17:
d1:d9:93:11:75:19:c9:e7:91:c0:63:7b:6d:8f:dc:
c9:af:ed:e1:de:be:69:2a:57:75:70:71:b5:2a:3e:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FE:BE:44:D9:83:1B:E6:BC:11:95:0B:05:B4:B8:62:E8:C3:73:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c028::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:78:63:c9:1b:00:31:84:b2:b8:79:49:a8:f9:54:73:d2:a0:
1b:dd:e2:0a:6a:8f:83:9d:f2:70:1b:da:dc:1c:f3:7d:a8:66:
45:d5:02:49:86:04:d9:c2:dd:97:a5:71:a8:10:f4:f8:05:bd:
07:d6:74:43:04:0f:d4:c5:99:70:b1:ac:11:37:77:8d:97:01:
13:4e:1e:cf:be:b4:ef:3a:6b:a9:53:b4:f7:97:0a:ae:fe:ba:
fc:c6:1e:06:f9:9c:25:e5:33:8c:f5:b7:59:b5:3e:d4:53:a6:
4a:03:d9:00:d6:33:83:74:b3:26:21:94:43:f3:a9:32:9f:a0:
4e:68:67:67:45:04:0b:2b:c0:92:ed:4b:fc:13:de:b1:6e:9e:
48:8c:6b:6b:81:ec:51:2b:4a:8a:3c:c9:b6:ad:d7:7b:f4:c4:
76:f3:cb:cb:3d:70:e1:f2:d7:d4:c2:21:0e:c1:1b:d3:2b:bd:
0e:d3:8e:29:8a:58:10:a3:55:17:02:ef:28:ae:b3:f9:1a:72:
2c:3c:65:76:21:7a:49:bb:d2:a8:58:7a:c6:c0:64:66:ea:86:
2c:4d:ac:22:5a:c8:2c:9a:e8:03:99:c3:91:a2:12:30:e7:46:
24:46:1a:05:00:4e:5c:94:d2:f6:1f:96:a7:33:13:df:4b:e0:
ea:96:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:54 2026 by rpki-client