
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffedef33-2fb7-3ccc-af47-97eef0c97160.roa
File: ffedef33-2fb7-3ccc-af47-97eef0c97160.roa (raw, json)
Hash identifier: f5IvNMWnY8fHW5tou6K3bTHV8Wvkosehzp9PoRJG+Xw=
Subject key identifier: AB:C8:41:28:99:46:27:4F:20:DB:7D:16:43:B8:AD:F2:56:CC:64:A1
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D932569632C36CDED5A25B600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffedef33-2fb7-3ccc-af47-97eef0c97160.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 2603:c01b::/36 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:69:63:2c:36:cd:ed:5a:25:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=68ca2f2b-96b7-4625-b86b-1df07bfd277c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:4c:6e:5e:3c:61:b9:d6:06:82:0f:48:2b:
3b:8a:4c:1b:ad:61:d8:c0:a3:a9:84:bf:3c:13:ab:
38:eb:c2:48:58:d8:f9:22:c3:82:03:5a:43:04:6a:
8e:52:eb:74:29:9c:19:bb:46:6a:f2:bd:87:24:68:
1a:b4:b9:79:ca:61:f8:b4:37:60:f7:5b:53:c6:ca:
d5:7a:2b:c2:c5:69:f2:0d:69:b6:7d:c0:6a:15:88:
3c:81:67:cd:b6:ce:9c:de:38:99:21:fe:b4:7b:c4:
a6:20:21:f6:cf:04:bd:d7:f6:a3:67:4b:4b:a3:4e:
5a:79:6a:5e:00:ba:5f:30:47:c4:eb:47:3a:97:e1:
62:46:14:c3:3a:62:2e:ac:51:cf:12:df:81:4e:1a:
5a:fc:c6:67:3e:9a:5a:83:93:3b:c1:c1:45:75:d5:
93:98:e6:ef:89:99:0a:ba:81:4c:08:75:71:61:33:
20:ed:49:79:7d:d5:e3:83:c0:c1:d5:9a:88:16:e7:
9d:10:b2:82:80:f6:d1:81:df:93:11:9b:58:0f:a0:
f2:3e:96:36:7c:60:2c:de:e5:aa:1f:c7:a2:a7:3d:
53:6b:e3:c0:95:be:6e:5e:77:b5:b6:48:08:24:78:
ad:a4:88:e6:61:09:ce:94:a8:e0:85:1d:26:13:98:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:41:28:99:46:27:4F:20:DB:7D:16:43:B8:AD:F2:56:CC:64:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffedef33-2fb7-3ccc-af47-97eef0c97160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:c01b::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:1f:92:33:d6:08:57:00:9f:c6:e8:df:9f:fb:c4:5e:cf:90:
f8:4c:c5:19:35:cd:8b:9a:19:0d:df:c7:af:f0:7f:4b:7e:77:
d6:0f:bf:fd:b2:cb:2a:d5:ea:c5:01:df:52:17:1d:d8:20:7a:
34:d0:73:f7:4b:de:3d:b7:2e:66:d4:6c:20:6a:37:52:65:c0:
ef:81:2c:db:0c:e0:e9:6e:a9:4a:bb:3f:e0:31:75:42:ff:5a:
32:03:f5:aa:4f:a7:d1:27:d1:f4:69:4a:7b:16:f2:2d:70:e9:
12:ab:57:ce:5f:ee:e7:54:e3:f1:c3:fd:4a:42:66:2a:04:15:
f2:02:a5:ae:d4:63:f6:97:44:81:b5:37:84:76:03:6d:9e:09:
99:c8:f3:e4:2f:70:39:23:60:7a:f2:ca:f8:39:b6:d1:7a:2f:
65:55:0e:f4:13:c5:6a:d7:16:32:ad:0f:db:e9:f0:d0:a2:da:
7a:dd:cc:5f:e3:21:51:b7:e0:55:b9:f5:3f:86:ad:f8:bc:47:
ba:ac:12:eb:c1:07:36:b0:07:5e:2e:1d:76:e8:ef:34:b4:3c:
46:bc:96:2d:f2:d2:6d:b5:2b:ed:4c:17:1f:1d:f3:cb:7a:0a:
50:8c:68:ea:44:7f:06:fe:de:c6:d9:45:89:82:4a:67:e5:13:
25:9f:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:47 2026 by rpki-client