
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd88cb46-e19b-3251-ab0f-fc0949a3623c.roa
File: fd88cb46-e19b-3251-ab0f-fc0949a3623c.roa (raw, json)
Hash identifier: kkkJpCniuBr2jZJeeplU5Ws0fvYkzmC2mZeB9MQHeaw=
Subject key identifier: 83:E6:79:B6:77:E8:26:B1:4D:09:3D:AF:CC:44:E8:88:44:51:2C:1C
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F0ED232AFA3E1A4A88BA83660
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd88cb46-e19b-3251-ab0f-fc0949a3623c.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 2603:c028:8000::/35 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:32:af:a3:e1:a4:a8:8b:a8:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=fdb18d77-cf9d-47ae-a668-36f279176d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:de:c0:87:64:d8:08:6a:22:8d:1c:b8:d1:
38:99:5a:8b:dd:14:b7:3b:dc:d8:c7:04:98:c5:c5:
53:20:41:be:df:89:33:ce:3e:64:9d:e7:5b:04:6d:
bc:a1:c4:c2:02:26:39:0c:a5:fb:21:35:15:e2:7b:
fc:93:9a:ea:8d:92:35:23:77:3a:b3:a0:c1:45:d7:
8d:a8:0d:94:e4:1c:93:95:8d:55:c1:50:f5:d2:94:
3a:55:1d:2f:b6:18:79:b6:ac:d7:65:d1:b2:4c:14:
8e:1d:94:79:60:5d:90:ab:70:d7:12:38:d0:bd:6a:
42:aa:08:da:4b:5f:61:5d:56:65:76:73:b0:bb:9a:
61:71:95:f9:9f:a9:50:1e:3c:b0:d7:63:01:5d:54:
35:82:08:e8:db:b9:43:85:ad:1f:7e:85:72:79:75:
3a:22:73:fb:6f:c3:12:c4:2e:ae:9f:d8:35:14:de:
21:6a:5b:36:e1:3d:91:36:b8:29:de:8e:35:d0:88:
8e:5c:94:d6:49:f1:6c:f5:0a:46:6c:6d:a2:42:a7:
f0:34:0d:5f:2f:cf:7a:1d:0d:48:c4:01:1a:fe:d0:
64:8e:4c:62:e0:74:14:2d:78:1f:5f:07:ee:28:f1:
5c:10:46:43:33:97:8d:7e:cc:34:d0:d3:11:1d:a9:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:79:B6:77:E8:26:B1:4D:09:3D:AF:CC:44:E8:88:44:51:2C:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd88cb46-e19b-3251-ab0f-fc0949a3623c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c028:8000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:52:b2:70:48:98:0f:40:c2:d3:fc:e3:9b:98:1e:4c:07:f6:
66:35:58:40:91:cb:51:57:78:1a:eb:13:ec:7b:1b:d3:ce:af:
0a:ea:7b:97:25:44:06:47:0f:42:08:d6:5c:5e:b1:27:5f:b9:
7f:9f:0c:a7:00:a4:30:21:84:d1:9e:30:ef:1b:fc:d4:bd:eb:
3d:a7:38:a6:b5:09:68:11:a8:21:09:68:e9:3d:81:f3:69:04:
eb:c6:0f:c9:79:0a:21:a6:b3:08:8e:da:cb:96:c5:27:2e:df:
b9:ca:9e:4f:ec:98:1b:e7:b2:79:25:2d:e2:bb:41:1e:f6:d8:
79:1e:93:95:eb:55:a6:d5:82:bf:5c:d4:e7:0c:52:05:fa:e0:
76:4c:88:03:03:c1:8e:d5:66:82:6e:a0:81:1d:dc:a1:79:23:
e4:34:62:08:55:ca:62:68:75:e7:18:d0:61:bd:43:2c:88:fb:
57:a5:33:00:42:aa:ee:ab:12:f4:ef:d1:7b:11:e8:2f:cf:84:
7d:ab:bb:74:bd:dc:c7:9f:0f:64:0a:eb:4e:4d:4f:64:45:ef:
b5:47:15:74:d1:f4:b5:61:6a:f1:22:6f:9f:39:dc:1d:82:58:
99:64:4c:3d:f1:33:b4:98:e3:64:f7:19:19:5d:9f:f5:47:7e:
98:5f:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:39:46 2026 by rpki-client