
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56eee50-ce20-3aea-9849-34e21edfe84a.roa
File: d56eee50-ce20-3aea-9849-34e21edfe84a.roa (raw, json)
Hash identifier: cSyjqXvK+pvXmvtQ8gFnbrMI/OvJsS5P1j19zQDQud4=
Subject key identifier: 1F:B9:69:83:86:C4:EB:B3:46:CE:2B:29:7F:0B:ED:76:4D:0B:05:A5
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D12A9DE41AB4553E324352D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56eee50-ce20-3aea-9849-34e21edfe84a.roa
Signing time: Fri 06 Mar 2026 00:28:23 +0000
ROA not before: Fri 06 Mar 2026 00:28:23 +0000
ROA not after: Wed 03 Jun 2026 23:28:23 +0000
asID: 54253
IP address blocks: 2600:2004:100::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:12:a9:de:41:ab:45:53:e3:24:35:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Mar 6 00:28:23 2026 GMT
Not After : Jun 3 23:28:23 2026 GMT
Subject: CN=3d67dcfa-ff48-46d2-b8a1-ead8f9b4fffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:3a:bf:b1:94:18:d9:98:04:fc:59:eb:72:
1e:45:57:10:f8:40:43:51:dc:2f:cd:41:a3:b7:96:
66:68:f0:2b:88:d5:ec:ea:50:52:27:ce:39:1c:4f:
98:5e:b6:9f:e2:71:9b:63:fa:14:fe:f0:ba:45:67:
f9:8b:8a:89:14:65:a6:d9:27:dc:58:64:00:14:0a:
7e:75:aa:b8:35:6a:6f:cd:96:ff:b2:ab:97:23:64:
15:0d:87:2c:d8:a1:02:12:36:e4:56:68:ab:18:43:
75:95:22:ae:26:ec:18:04:d7:23:53:3e:bf:b2:0f:
1c:f4:c9:b2:12:49:30:b2:d4:6d:dc:aa:ed:51:56:
bf:ef:31:3f:57:7f:56:73:b1:8f:4b:9a:68:44:6d:
ba:d2:50:0d:1a:3e:03:b3:01:2d:27:72:f9:8f:b9:
08:69:51:e4:f6:6f:8a:25:d8:9f:f9:9d:d7:bf:8c:
fe:0e:b4:c4:d7:0d:db:e2:31:a4:77:02:35:3f:0a:
1f:64:cc:5d:8e:b0:ef:74:8a:ba:2f:72:01:74:85:
df:36:6a:46:a6:da:1e:a7:dc:8b:fe:c3:ae:58:fa:
90:2b:74:67:3b:22:51:16:ca:60:b6:d1:10:2a:b3:
c5:48:38:da:8d:ed:26:c4:77:fb:6e:10:aa:e4:aa:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B9:69:83:86:C4:EB:B3:46:CE:2B:29:7F:0B:ED:76:4D:0B:05:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d56eee50-ce20-3aea-9849-34e21edfe84a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:2004:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:42:e2:09:52:cd:e8:8f:00:8a:0e:f8:75:fe:57:4c:a4:c4:
ae:41:4c:04:c5:16:21:26:91:5a:4d:97:c3:aa:16:3f:60:73:
01:1d:32:56:fb:d4:51:25:12:4c:fb:3c:cb:c9:ae:42:3e:73:
29:20:da:fa:27:c0:43:2d:45:fb:7d:60:67:40:bc:1b:31:1c:
70:21:25:21:ba:54:4f:70:22:85:fb:52:28:80:1e:56:ce:09:
5f:d1:b7:0f:25:23:d0:bb:18:37:55:6b:10:21:ca:fa:f0:30:
3b:25:18:76:67:b1:c7:ce:b8:96:d5:26:f7:f3:e9:7b:a3:20:
b1:f5:26:32:b3:39:b9:05:74:51:82:90:98:23:e5:b4:20:df:
c1:bc:4f:01:d3:12:73:3f:e4:d8:89:6c:1e:84:cd:ad:46:32:
1a:7c:fd:a6:78:7e:4e:42:59:92:2b:17:af:c0:d7:ba:2a:3b:
ca:b8:6a:72:45:01:4b:57:0b:8b:6d:45:be:fe:52:22:a3:1e:
ef:80:a8:00:60:c2:94:a0:d9:6d:17:8f:ac:38:1e:6c:8f:83:
dc:39:d3:7d:37:a6:17:14:22:d1:b3:fd:10:c4:a4:02:e7:f9:
e1:8b:d8:ec:b9:6f:73:a3:8f:e2:53:75:c9:89:45:cc:62:8d:
ff:8f:83:7c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0Sqd5Bq0VT4yQ1LQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDMwNjAwMjgyM1oXDTI2MDYwMzIzMjgyM1owLzEtMCsGA1UEAxMk
M2Q2N2RjZmEtZmY0OC00NmQyLWI4YTEtZWFkOGY5YjRmZmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXQ6v7GUGNmYBPxZ63IeRVcQ+EBDUdwvzUGj
t5ZmaPAriNXs6lBSJ845HE+YXraf4nGbY/oU/vC6RWf5i4qJFGWm2SfcWGQAFAp+
daq4NWpvzZb/squXI2QVDYcs2KECEjbkVmirGEN1lSKuJuwYBNcjUz6/sg8c9Mmy
EkkwstRt3KrtUVa/7zE/V39Wc7GPS5poRG260lANGj4DswEtJ3L5j7kIaVHk9m+K
Jdif+Z3Xv4z+DrTE1w3b4jGkdwI1PwofZMxdjrDvdIq6L3IBdIXfNmpGptoep9yL
/sOuWPqQK3RnOyJRFspgttEQKrPFSDjaje0mxHf7bhCq5KrULQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB+5aYOGxOuzRs4rKX8L7XZNCwWlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDU2ZWVlNTAtY2UyMC0z
YWVhLTk4NDktMzRlMjFlZGZlODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAgBAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJULiCVLN6I8Aig74df5XTKTErkFMBMUWISaRWk2Xw6oWP2BzAR0y
VvvUUSUSTPs8y8muQj5zKSDa+ifAQy1F+31gZ0C8GzEccCElIbpUT3AihftSKIAe
Vs4JX9G3DyUj0LsYN1VrECHK+vAwOyUYdmexx864ltUm9/Ppe6MgsfUmMrM5uQV0
UYKQmCPltCDfwbxPAdMScz/k2IlsHoTNrUYyGnz9pnh+TkJZkisXr8DXuio7yrhq
ckUBS1cLi21Fvv5SIqMe74CoAGDClKDZbRePrDgebI+D3DnTfTemFxQi0bP9EMSk
Auf54YvY7Llvc6OP4lN1yYlFzGKN/4+DfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:10 2026 by rpki-client