
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
File: 56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa (raw, json)
Hash identifier: jEMKXeJoAol6BbG2J1sEyQkT4gXFactSsHa03aATKWQ=
Subject key identifier: D8:00:66:7C:BC:74:EA:6B:6D:22:0A:E0:49:5A:54:9C:06:1F:87:DF
Certificate issuer: /CN=df17821c-c81a-4f1b-baba-e8419dc81508
Certificate serial: 010D0C9F4328584D8EF98ABA50E99B9647B1C900
Authority key identifier: EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 23307
IP address blocks: 2620:8b:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f9:8a:ba:50:e9:9b:96:47:b1:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df17821c-c81a-4f1b-baba-e8419dc81508
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=07a114d4-9a17-4bbb-a11d-0f0f0b341cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c6:d4:b1:1e:45:49:bb:61:08:86:0e:25:e9:
d2:49:00:55:c7:0b:00:16:28:77:b4:7c:77:e1:1d:
ea:83:6c:fb:70:df:88:70:a4:2e:72:67:2c:04:55:
fa:25:7d:c6:c3:e7:0d:e4:4c:87:bc:1e:3b:03:92:
e0:77:4f:7c:1b:24:4c:c2:5f:fa:ed:a5:cf:11:28:
5d:ea:a7:1a:07:ed:c2:63:d0:ea:e5:49:a8:1f:0e:
3d:b5:d7:a5:76:95:20:9e:d4:a4:79:c6:48:63:0e:
ac:9c:b7:4f:14:8a:2d:65:23:d6:c6:25:5a:ee:dc:
d3:ae:97:54:7f:cf:e0:9d:c7:f7:90:0d:61:89:c7:
07:a9:45:a2:dc:36:1a:ba:40:97:1a:58:b9:a4:aa:
cc:b2:29:0b:ae:cb:cc:e7:22:08:ba:19:62:4f:16:
bb:2f:69:73:da:b5:41:e2:f0:b6:c7:6c:df:22:5e:
f6:fa:1a:9d:7f:3b:de:f9:dc:51:86:a6:d0:18:dd:
94:8b:86:02:da:f7:65:e5:1a:32:b0:89:6d:ac:da:
73:84:54:4b:b8:fc:fe:08:ae:36:e4:68:c0:ab:5b:
87:8d:bd:ca:fa:86:2a:dd:9a:63:75:ca:9a:a2:c0:
25:17:19:25:70:db:fa:c7:4e:7d:1f:d4:6d:ab:03:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:00:66:7C:BC:74:EA:6B:6D:22:0A:E0:49:5A:54:9C:06:1F:87:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl
X509v3 Authority Key Identifier:
keyid:EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:8b:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ea:db:52:9f:21:2a:c6:8f:72:5e:0a:90:38:5b:89:52:e4:
2b:a7:3c:c5:62:50:0d:d6:e2:e7:a6:c5:70:ad:bb:74:91:6e:
5d:57:09:09:3c:9a:73:1c:87:9a:a5:8e:c4:12:0f:3f:99:75:
64:11:db:70:b2:6c:b6:52:c2:2f:d8:90:02:5a:0a:91:17:8c:
6c:84:71:6e:5c:83:a3:c4:c0:90:c3:1c:e2:f6:a3:63:a6:5a:
cf:60:38:9f:0c:d0:85:b8:0f:7a:a4:65:d3:e0:42:ed:60:3c:
ed:55:63:0a:64:93:0c:8a:22:dd:c6:79:c4:e3:4b:fb:d5:8b:
7d:36:b6:2e:fd:c0:bf:a8:4a:fa:05:d0:f8:9f:d6:c3:0f:07:
23:58:d9:2e:80:66:b3:56:2e:12:cb:ff:68:c3:c0:63:e0:e8:
97:49:6f:96:a3:55:4a:a3:4f:21:c2:9b:60:b8:84:bc:f1:f6:
04:69:ac:93:a5:d3:1e:29:d8:e9:8d:17:6c:d4:cc:51:7c:67:
2a:ea:d0:1d:ef:89:2f:32:a0:38:e6:ac:2d:40:72:65:48:75:
2b:9f:b5:78:00:f2:79:2b:69:99:79:f7:d7:eb:08:21:da:63:
51:71:d2:c1:e8:78:89:50:de:2f:63:d6:7b:fd:25:99:d3:d1:
b3:94:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:20 2026 by rpki-client