
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa
File: 02e76f99-30f1-31f2-8aec-76417ad71599.roa (raw, json)
Hash identifier: 2j4z/lAdmN9vTa2IJ+pFyORURqk6gbsazru2ICt6QJ8=
Subject key identifier: 2B:3B:00:7E:1E:49:F8:4E:E3:01:43:A5:55:50:85:EC:5A:80:8C:EF
Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial: 010D0C9F4328584DA11AB51D113308415B3D3980
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa
Signing time: Sun 26 Apr 2026 01:00:25 +0000
ROA not before: Sun 26 Apr 2026 01:00:25 +0000
ROA not after: Sat 25 Jul 2026 01:00:25 +0000
asID: 22611
IP address blocks: 2605:f400:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a1:1a:b5:1d:11:33:08:41:5b:3d:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Validity
Not Before: Apr 26 01:00:25 2026 GMT
Not After : Jul 25 01:00:25 2026 GMT
Subject: CN=28ed819f-25ce-4502-b8d7-29e3dae4ab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:cb:d5:76:a7:f1:fa:e9:f9:36:55:39:68:
af:52:e6:1b:f7:ab:ca:2c:e4:f4:c5:0f:98:89:30:
08:4d:f5:5a:5e:53:3a:6d:dc:bb:ee:e3:c4:bd:cc:
4a:b3:12:8e:98:8d:b4:8d:29:ce:07:10:f9:ea:32:
1d:48:ef:47:88:80:4f:cd:66:8b:c8:49:95:e0:8e:
33:26:c2:d3:ee:d7:79:99:d6:0e:e7:fa:a2:1c:11:
71:32:17:ef:a0:ba:cd:bd:da:e7:9f:51:33:c6:a0:
87:21:f0:69:36:6f:88:45:52:e5:72:4a:89:63:fc:
39:59:29:ab:91:e7:17:d6:a4:c7:23:05:a1:9a:09:
38:6a:67:7b:5c:73:36:da:3f:91:6f:9e:23:de:66:
e8:41:43:6e:94:b6:7e:ad:aa:13:6c:44:81:2e:98:
7f:45:5c:1d:90:0d:b6:2c:0c:0f:62:ac:6b:ea:a5:
8b:11:3e:2f:db:38:6a:2f:05:5a:d5:f2:2f:69:3d:
75:a2:d4:d1:5f:b3:44:22:7f:26:b4:26:19:a4:d5:
dc:07:eb:42:64:db:83:e4:4e:50:03:23:df:7b:d0:
38:3f:b6:1e:f3:b3:c4:d3:5c:93:2a:16:ad:12:db:
77:d1:9b:3a:e3:b0:ef:43:b9:7b:7b:b4:03:eb:5f:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3B:00:7E:1E:49:F8:4E:E3:01:43:A5:55:50:85:EC:5A:80:8C:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/02e76f99-30f1-31f2-8aec-76417ad71599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
X509v3 Authority Key Identifier:
keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:f400:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:63:4a:86:b2:e1:59:a7:18:c6:00:80:b8:97:39:94:e1:d2:
64:5a:37:a2:aa:ef:f9:20:9b:02:a7:a2:83:28:d9:e9:f9:0e:
d1:b6:16:f8:1e:1d:4b:d1:f2:94:65:72:7e:e0:fa:47:67:3a:
b5:3b:ab:c9:b3:fb:0d:93:48:dd:d1:64:10:5d:1f:cd:e8:53:
67:30:9d:b9:e1:3b:21:3f:12:b3:55:a4:62:3c:82:ac:a5:45:
5c:41:38:6b:0d:5f:ea:bb:02:21:f1:fc:08:05:70:c4:8e:00:
82:3e:11:d4:e6:fa:d9:f7:ac:aa:d2:31:7a:fb:73:b9:98:28:
78:1b:31:eb:1b:54:4e:c6:30:9b:12:a8:d1:31:23:bd:99:71:
79:79:a1:c7:98:fa:49:e6:29:88:fe:9d:1b:59:39:62:56:d1:
3c:af:e0:75:5e:55:99:06:b2:d7:04:55:64:5a:b2:28:83:db:
f2:10:df:44:64:14:84:de:eb:fc:37:1c:41:5d:70:cc:0c:15:
f0:11:1e:70:bf:f0:c6:d3:e3:71:aa:c4:ac:65:60:14:af:90:
c4:eb:0f:07:18:af:61:9b:06:6d:9f:1e:79:14:7d:dd:d6:30:
f4:d3:e0:f6:69:bd:02:c0:38:9f:63:30:f6:cf:91:a8:ed:88:
37:12:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:34 2026 by rpki-client