
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa
File: bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa (raw, json)
Hash identifier: YGU0hcAqXdJI2HYFvZDFXECRQD8XEXBO+Dnid9/3HZo=
Subject key identifier: A5:1E:28:ED:EB:A6:48:A2:53:F1:A9:23:EB:9E:92:9A:5F:0D:C0:55
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584DC565CB5294D9543791579210
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa
Signing time: Sat 09 May 2026 01:00:25 +0000
ROA not before: Sat 09 May 2026 01:00:25 +0000
ROA not after: Fri 07 Aug 2026 01:00:25 +0000
asID: 31898
IP address blocks: 2603:c000:2e00::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c5:65:cb:52:94:d9:54:37:91:57:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: May 9 01:00:25 2026 GMT
Not After : Aug 7 01:00:25 2026 GMT
Subject: CN=d2edcf64-7e1d-47b6-9406-eef06810b1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:9d:57:88:4d:80:4b:8e:e8:7e:24:06:3a:
63:52:09:12:d6:c5:81:fb:76:72:a6:b6:7c:7d:7a:
10:68:94:8b:d6:35:36:36:12:fe:b4:cd:15:4f:15:
20:0d:96:73:91:c9:49:dc:4a:14:ad:67:13:7b:56:
ff:6b:2d:7c:f8:04:7e:35:14:b5:a8:d4:cf:2d:cd:
31:7c:79:e6:42:05:15:6c:b3:3c:3b:e0:27:d8:fc:
22:76:c9:28:fe:ee:fe:90:97:36:03:66:89:8a:b0:
c5:f9:97:b9:54:15:fd:2e:e1:cc:a2:11:b2:75:ca:
16:83:fb:1f:51:55:88:8d:45:15:00:21:7b:58:4d:
0e:ec:d6:60:07:cd:29:f5:37:cb:ba:bc:fa:dd:14:
a3:df:90:0a:0d:8c:fa:9b:88:21:01:a5:70:2f:22:
5d:c4:e6:31:9e:89:4d:dd:eb:49:26:29:92:20:62:
7b:f6:41:be:ea:16:03:d8:61:8d:4c:46:a1:ee:c8:
ea:ff:06:4c:73:27:b8:b7:75:85:b8:f6:a7:48:9d:
fa:ba:63:01:77:65:5e:dc:ad:2d:27:6c:2f:47:01:
d4:f7:55:91:61:8e:eb:a4:ca:9d:9d:b3:08:77:04:
13:2f:e4:84:9a:46:19:37:90:87:38:53:3b:ad:dc:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1E:28:ED:EB:A6:48:A2:53:F1:A9:23:EB:9E:92:9A:5F:0D:C0:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c000:2e00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:db:a9:87:8d:44:b2:27:23:4f:6b:18:07:20:4b:3a:b8:d7:
7f:90:a0:1e:ba:95:c3:8d:4d:da:f9:df:7f:14:96:cc:a6:70:
61:12:3c:8b:58:a2:13:d7:93:b6:75:7a:98:3f:6e:b5:92:86:
cd:b8:65:f5:cb:ef:af:d6:7b:d7:11:b4:ef:29:bd:96:ac:7f:
c4:be:fc:cd:7f:1b:86:a1:b3:60:75:c3:3d:d1:94:72:61:72:
c5:3f:db:e3:25:7c:96:36:04:7a:86:51:af:ed:d6:bc:5c:3e:
40:d3:dc:fd:54:2f:a5:eb:aa:51:e8:0e:2b:af:80:dc:74:cc:
df:fb:d3:8e:1b:15:45:20:5d:fe:8f:58:30:2d:e7:72:a5:46:
6e:0c:18:46:66:d0:ce:5b:7f:18:e8:04:b2:39:43:61:21:86:
f6:e9:62:d1:9f:96:88:1a:06:f6:d7:e7:23:07:07:97:16:f8:
2d:5c:a3:be:fe:5f:aa:dc:f4:33:ac:c7:cb:8a:3e:2e:77:7e:
51:1a:a1:9d:3d:6b:50:97:99:5a:9c:58:7a:ae:6d:0f:3d:2c:
dd:a1:09:1d:f0:e1:be:cf:9f:2c:09:4a:93:5a:ad:ed:8a:4f:
0e:3d:6f:ee:c6:3e:14:97:14:f2:2f:35:ec:7d:b0:82:4d:e1:
3b:f9:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:30:35 2026 by rpki-client