
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
File: c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa (raw, json)
Hash identifier: DZBj24rbTTU7nV9ixZTxnJAVvykTp4ik7m5L/29zb88=
Subject key identifier: E7:47:7F:5B:1F:AF:43:EC:51:B3:C0:1D:E7:90:55:A5:CA:6F:21:41
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8EF56A8C2AC8AD1C2F362080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 31898
IP address blocks: 2603:c000:2300::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:6a:8c:2a:c8:ad:1c:2f:36:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=d88f76c3-353a-4bbe-b72b-a0b3753d4a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:55:a0:6e:20:7b:3b:2f:43:67:af:8e:59:
23:2e:e2:50:44:cb:60:97:09:62:13:0f:cd:03:da:
b7:0c:89:9c:a3:23:0d:d6:d7:63:33:7b:0b:d1:5d:
70:13:d8:50:91:f9:df:c5:0a:0f:77:76:1f:e7:62:
3a:88:3c:67:cb:87:af:73:0b:25:98:f8:c6:58:ea:
b5:a3:89:cb:25:28:b2:f2:6b:5c:1f:9e:55:4d:53:
eb:5c:68:e1:8f:6a:70:cd:27:f3:e8:ee:96:82:dd:
f7:b2:86:f9:42:90:32:28:94:2d:89:9a:42:23:82:
96:cc:ad:d6:99:40:3d:73:14:0e:2e:e5:1b:ad:9c:
1d:22:cf:86:94:d9:72:68:0d:db:d5:43:66:6e:e8:
d0:dc:9d:fa:bc:d1:77:1e:98:13:8e:39:4b:8c:8d:
42:9d:7e:8b:32:97:22:98:69:fa:2f:70:c8:cd:0d:
34:e6:02:f7:b0:bf:3f:ca:0d:12:62:da:5b:3e:8b:
11:8f:ca:a4:5f:54:d8:b3:17:f2:1d:c8:68:fd:f1:
c0:42:9b:d5:ab:85:54:fb:95:31:82:71:cd:61:83:
e4:bc:59:7b:4b:6a:1c:25:2f:33:43:1c:1a:ca:c0:
f7:35:77:eb:d3:d0:5d:5c:73:bb:43:98:be:2f:b3:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:7F:5B:1F:AF:43:EC:51:B3:C0:1D:E7:90:55:A5:CA:6F:21:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6aa7be2-fe64-3d63-a47b-84f48062c1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c000:2300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:2e:77:cd:78:9a:f5:4a:99:1e:51:1f:8b:0f:ab:78:0e:89:
f8:b7:51:af:c0:2d:36:bc:7e:95:46:c4:75:22:80:c8:75:26:
37:03:4e:51:57:8b:d7:d3:d1:1a:00:ae:8e:f2:4a:42:82:ff:
4d:bf:cf:34:2e:96:3b:c9:80:2e:07:44:01:39:2e:34:55:67:
90:ee:57:4a:3d:66:8b:36:30:2b:25:9c:7f:8a:98:ec:df:3a:
3d:2f:53:cd:5d:61:c4:f0:31:28:2b:f1:ff:88:48:05:23:b9:
cd:2f:22:b2:3e:0a:ce:00:24:34:0d:a5:bd:20:3b:d4:94:e0:
4b:f4:d7:37:66:e7:9e:53:fe:d3:84:8a:69:af:a7:05:49:5d:
74:31:ce:3d:12:81:73:63:07:2f:99:53:b0:e3:47:5b:5f:fa:
8c:bb:3c:17:95:b1:36:f8:8d:ee:06:bc:0d:3f:97:14:c8:bd:
e4:1c:46:06:97:f8:2e:aa:82:4d:9e:ae:50:a9:fd:47:0c:d0:
7d:21:a6:e2:f0:80:5b:73:75:6a:ff:7c:8e:ce:91:21:50:a3:
99:be:e1:43:60:90:37:9d:4f:3b:e2:d7:6e:20:8e:d6:06:fd:
b2:c7:9b:76:62:0a:ec:3a:40:ef:5f:ca:a6:80:ae:4a:0d:2f:
6c:33:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:04 2026 by rpki-client