
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa
File: ffcf3028-3ee2-3714-a697-77e69a103ad2.roa (raw, json)
Hash identifier: ulasJrSRXeWKI941pJ/GUMVdaes+pmXEP2B7phAOR+A=
Subject key identifier: A7:F6:34:D6:92:72:C0:C6:1A:4E:56:34:54:3E:3E:DA:EB:31:6A:A8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E7E94DC6E3684A5FFD7A31A80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 2603:c002:3300::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:dc:6e:36:84:a5:ff:d7:a3:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=c052a624-e1f6-4b4c-8f6e-f87f03a0f4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:24:94:03:18:e8:2d:a1:1c:68:3f:50:b5:
71:52:7e:91:f3:6d:26:93:3e:20:9d:46:3a:28:d7:
24:36:34:70:aa:e5:5c:23:84:8b:47:8d:42:d8:ab:
ed:2a:06:42:1b:6f:24:34:52:5f:e5:93:69:4a:37:
0c:2c:c0:fa:8d:6d:d8:17:7d:03:e2:ce:80:f4:ec:
6c:c3:ef:96:8d:91:5c:2d:87:71:5b:4d:8e:45:c0:
12:b6:fb:a2:2a:85:9d:3e:55:e2:0b:53:d9:3e:f8:
d2:87:51:ac:78:62:d1:aa:ef:37:40:26:f7:60:a6:
b4:b9:18:fe:fa:88:92:12:e5:46:fd:cf:2c:9c:e6:
db:08:52:37:71:58:c7:bd:44:38:de:91:39:00:cf:
56:fa:30:08:f0:9f:32:9a:ca:86:dd:ab:0c:39:11:
e3:48:da:a3:6d:e6:5a:c8:76:05:82:5e:f4:01:aa:
48:27:97:81:3f:9a:78:22:01:e4:1f:0b:be:5b:e6:
be:a2:8f:80:8c:6f:73:28:06:38:df:60:ef:0d:5d:
97:7b:1e:1e:25:3f:4e:5f:bd:5e:f7:1c:c8:fc:59:
71:7c:70:f0:b3:f8:6f:ea:64:62:52:57:96:48:af:
0b:33:b5:79:6b:bc:cc:7d:47:bd:7e:6c:8a:39:5d:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:34:D6:92:72:C0:C6:1A:4E:56:34:54:3E:3E:DA:EB:31:6A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c002:3300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0a:f8:47:35:f0:48:13:db:ea:93:1f:c3:5c:33:4b:44:f3:
3b:a5:2d:e2:fd:2f:23:82:84:6c:a1:e4:ac:ba:c9:e4:66:d6:
28:c5:af:8a:7b:33:a3:9b:78:46:9a:d7:81:7b:86:39:86:3c:
f7:25:78:dc:e5:ba:78:15:20:76:ba:57:d8:07:ce:cf:79:9b:
32:5f:96:c9:d2:ab:4d:79:60:ad:c9:bd:bf:62:49:5e:8c:67:
ed:45:43:fc:0f:36:be:ab:aa:18:2c:fa:1f:f5:22:8d:50:59:
de:04:f5:31:02:92:28:db:bb:b9:80:98:b3:d5:9c:e1:59:07:
a5:6b:55:13:fe:81:f0:12:4f:f6:3a:53:a9:28:ac:17:21:7c:
c5:a8:87:a8:c0:e1:76:97:77:65:70:c1:0c:c9:50:90:10:8a:
c0:4b:f8:1d:e1:b1:1e:b9:5c:56:1a:e7:78:2c:ae:7f:d5:07:
13:55:9a:55:d9:16:4f:8a:59:7e:f3:02:6a:db:5d:63:85:51:
1e:3d:25:c3:09:d6:95:63:41:7b:93:ec:1b:09:61:6f:a6:6e:
50:c5:62:f9:e1:f1:8f:41:62:23:1b:9e:fa:24:92:a2:7b:c6:
79:42:ee:e6:59:76:57:36:d9:6d:2d:f6:01:33:fb:99:7e:d3:
6b:d7:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:25 2026 by rpki-client