
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cefabb65-e5a2-31a8-87df-2324468bd69f.roa
File: cefabb65-e5a2-31a8-87df-2324468bd69f.roa (raw, json)
Hash identifier: 39nhKdMymroE4ufm+6StRMyA92uGwuIPGec18aBVtKk=
Subject key identifier: 3C:F3:CA:42:34:30:67:3E:31:25:F0:B4:C8:15:14:E9:51:67:2F:58
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8AC52CBA8A81E83DC08E7B00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cefabb65-e5a2-31a8-87df-2324468bd69f.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 2603:c001:3200::/39 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:2c:ba:8a:81:e8:3d:c0:8e:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=392c4b00-5e8b-4254-95da-2c4b89daba26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:65:49:c6:12:7f:84:dd:9b:59:a9:ca:08:
3e:eb:16:a1:41:6a:ff:25:a2:8e:a0:b1:55:35:18:
cf:07:e7:85:0f:e7:a0:fa:1d:d9:9a:86:ea:08:e8:
21:80:d7:9a:5e:9d:83:f3:b1:d6:8d:98:04:89:9b:
e8:2c:71:d6:03:be:5e:00:11:f6:dc:27:fc:4f:9e:
82:50:d5:79:91:42:6d:07:4a:64:9f:61:bc:19:84:
f7:48:f2:b7:2d:c0:cd:99:46:35:66:a1:cb:bc:c0:
01:21:41:e7:82:3a:32:a9:1c:a4:06:6c:a9:c0:8e:
44:e1:8d:83:e6:aa:39:ed:42:4c:07:00:4b:48:28:
50:33:ba:b7:d9:e1:ea:31:fc:ae:bb:9c:7c:cd:d2:
15:c8:d3:a6:51:c1:90:2b:f5:ff:08:19:ee:99:ea:
d1:56:f8:d9:9c:8c:b4:12:4b:7d:05:bf:46:c1:4d:
88:8e:a4:b7:8b:7f:74:7c:8b:07:5f:95:e8:b7:c3:
3e:f6:a9:d8:6c:ce:7c:d6:a2:5b:0d:a1:a3:5a:b5:
f1:25:dc:9d:3b:ae:4b:f6:6a:22:ed:ec:f6:96:3f:
4e:39:0c:7d:04:a4:57:95:57:d7:ce:4f:85:23:be:
a7:cf:46:6a:04:49:99:3e:9a:dc:a8:91:39:29:3d:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:CA:42:34:30:67:3E:31:25:F0:B4:C8:15:14:E9:51:67:2F:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cefabb65-e5a2-31a8-87df-2324468bd69f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c001:3200::/39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:30:98:cd:fa:5d:ee:a6:f6:ac:9b:b7:eb:0c:d4:80:f2:a9:
4b:37:e8:63:be:c1:2b:83:9b:91:de:0a:61:63:e9:c7:24:78:
02:59:14:59:bb:69:52:2a:00:9b:d2:99:06:4a:18:97:37:fe:
e1:9e:3a:d6:43:61:99:26:77:19:48:49:d6:c8:de:40:94:c5:
fd:68:57:49:fe:3e:fe:d5:f8:70:fc:75:de:a4:cb:c3:45:2d:
54:72:3f:e3:da:dc:50:96:e5:73:7a:6a:2e:ef:df:a3:c0:02:
34:cc:54:6d:9e:35:87:1f:e7:05:5c:64:e8:f9:db:2d:94:d6:
8d:6d:08:5a:d4:cd:6b:08:74:08:89:46:bb:90:35:2e:54:4e:
05:b7:c7:23:1d:40:d4:b3:6d:09:bc:26:e9:46:12:f1:89:48:
75:92:cd:7e:84:c4:7e:25:26:e7:1e:a1:01:30:d3:3f:28:56:
80:ef:10:4e:91:51:9c:a4:e3:1c:98:8a:fb:18:d2:ed:a8:4a:
38:bd:65:43:1a:24:05:b9:02:88:15:65:7c:da:92:82:73:75:
92:6b:a6:5c:fa:83:dd:71:a2:ae:24:ca:c7:10:27:bd:96:1a:
c9:16:08:d3:18:75:db:f8:0b:30:3a:19:6d:75:4d:57:e9:3b:
56:11:77:a7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2KxSy6ioHoPcCOewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
MzkyYzRiMDAtNWU4Yi00MjU0LTk1ZGEtMmM0Yjg5ZGFiYTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFNlScYSf4Tdm1mpygg+6xahQWr/JaKOoLFV
NRjPB+eFD+eg+h3ZmobqCOghgNeaXp2D87HWjZgEiZvoLHHWA75eABH23Cf8T56C
UNV5kUJtB0pkn2G8GYT3SPK3LcDNmUY1ZqHLvMABIUHngjoyqRykBmypwI5E4Y2D
5qo57UJMBwBLSChQM7q32eHqMfyuu5x8zdIVyNOmUcGQK/X/CBnumerRVvjZnIy0
Ekt9Bb9GwU2IjqS3i390fIsHX5Xot8M+9qnYbM581qJbDaGjWrXxJdydO65L9moi
7ez2lj9OOQx9BKRXlVfXzk+FI76nz0ZqBEmZPprcqJE5KT21WQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDzzykI0MGc+MSXwtMgVFOlRZy9YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2VmYWJiNjUtZTVhMi0z
MWE4LTg3ZGYtMjMyNDQ2OGJkNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAATIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaTCYzfpd7qb2rJu36wzUgPKpSzfoY77BK4Obkd4KYWPpxyR4AlkU
WbtpUioAm9KZBkoYlzf+4Z461kNhmSZ3GUhJ1sjeQJTF/WhXSf4+/tX4cPx13qTL
w0UtVHI/49rcUJblc3pqLu/fo8ACNMxUbZ41hx/nBVxk6PnbLZTWjW0IWtTNawh0
CIlGu5A1LlROBbfHIx1A1LNtCbwm6UYS8YlIdZLNfoTEfiUm5x6hATDTPyhWgO8Q
TpFRnKTjHJiK+xjS7ahKOL1lQxokBbkCiBVlfNqSgnN1kmumXPqD3XGiriTKxxAn
vZYayRYI0xh12/gLMDoZbXVNV+k7VhF3pw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:32:45 2026 by rpki-client