
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bf1d6b69-a971-3d0c-99a1-743fa2d568cc.roa
File: bf1d6b69-a971-3d0c-99a1-743fa2d568cc.roa (raw, json)
Hash identifier: g0GXxBEZpOPlbP3KExWASSR4qbbRfm0Exxa2MYCElFo=
Subject key identifier: B5:B5:62:02:61:95:B1:62:93:58:97:AA:9F:09:4A:E6:47:AE:F2:8F
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F14679ACDE7588F1AB636D880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bf1d6b69-a971-3d0c-99a1-743fa2d568cc.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 31898
IP address blocks: 2603:c000:3700::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:9a:cd:e7:58:8f:1a:b6:36:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=598bcc87-3b65-494e-af86-eb24c96633ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:0c:ac:ba:0f:75:cb:07:49:c0:36:82:d4:
14:1b:7c:5b:83:cb:c1:50:21:6d:b5:02:23:7a:05:
7d:b6:6e:96:e1:71:e9:0f:a0:66:63:8f:dd:c4:cb:
df:07:85:f5:0f:5f:d0:16:f9:29:27:2e:c6:ad:1f:
06:b2:8f:e7:d6:95:83:49:fb:ad:2d:6c:e4:52:17:
a4:d6:2f:69:eb:5e:c7:19:3b:38:22:8c:64:a8:69:
79:89:82:d8:72:6c:3d:45:cb:b6:84:80:f8:64:8c:
a5:62:ac:14:dc:4c:88:77:f0:8b:f0:bc:0c:e3:bc:
33:1b:2c:87:77:7b:4e:b5:a4:56:47:06:c9:5a:24:
01:8a:c5:a1:cb:cb:69:4b:14:e4:b0:35:6f:05:fc:
53:eb:3f:37:61:d8:72:e2:2c:6f:b8:e3:8e:15:72:
9c:95:6f:fc:a6:2d:59:61:75:5c:61:bf:18:fe:03:
c8:9f:a0:2b:76:c3:49:a5:ed:a8:60:0f:28:64:da:
9b:f5:96:87:5c:1c:04:b0:2c:46:c9:a7:3c:fd:42:
6d:22:59:90:cb:7e:c8:50:71:a6:fa:dd:f3:77:60:
4c:19:61:eb:c2:a2:2b:24:70:42:d9:49:cf:ad:be:
83:4c:42:12:51:ed:4b:76:fc:43:7a:84:9b:d4:73:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:62:02:61:95:B1:62:93:58:97:AA:9F:09:4A:E6:47:AE:F2:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bf1d6b69-a971-3d0c-99a1-743fa2d568cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c000:3700::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:29:ef:cc:a5:e4:93:8e:2d:5e:bd:76:04:84:c6:80:31:d7:
95:7a:7c:44:d6:e1:55:f6:44:f4:02:f5:d5:48:fc:8e:b6:78:
ae:54:73:1e:8f:38:9d:96:67:6e:36:ef:bc:8f:18:69:7d:d3:
91:b3:4a:1f:b4:ab:55:5b:64:a1:97:55:91:75:99:00:ef:18:
4e:89:7a:98:52:11:22:1c:a8:5d:f7:e9:7e:6b:1a:43:12:0d:
93:05:ac:a2:85:95:bf:db:cc:d6:22:d7:4a:5c:13:62:35:4d:
54:53:02:87:ac:b8:56:e3:99:51:a1:ff:4d:9c:44:73:5a:fd:
03:45:b7:43:b7:48:5a:66:80:42:93:56:6f:62:dd:44:9c:48:
5b:a3:09:42:8d:ce:c7:c8:2f:a4:b0:da:57:18:db:f0:5e:80:
6d:27:88:52:1f:54:d4:d4:36:02:5e:e8:3c:c7:5e:b2:bc:9f:
25:3f:9b:23:3e:d7:7f:11:87:0e:81:98:46:a5:ef:37:de:de:
bf:9b:b7:2f:86:82:43:0c:d9:48:11:34:a5:75:b2:77:68:d6:
16:0e:4b:3f:77:ee:55:65:f9:32:58:05:3e:57:df:4c:2f:ae:
53:31:2f:3f:1d:ea:b1:3a:7f:77:3e:36:44:17:fb:ca:06:37:
e6:b9:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:08:30 2026 by rpki-client