
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa
File: ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa (raw, json)
Hash identifier: FRbjkRHDifBMBEMLAW6zPM1H46StmKfvQlTrA4756j8=
Subject key identifier: 28:5E:39:25:9E:72:8D:7A:B1:F7:5B:AF:B4:F6:F4:CB:6E:21:08:35
Certificate issuer: /CN=1a7077e9-a4f8-4399-b93b-258103b803bd
Certificate serial: 010D0C9F4328584D9CEAB673961E93AF9B2C4A00
Authority key identifier: 0D:BD:CA:53:85:C1:EB:0A:63:AA:8B:38:53:E5:B8:84:F8:19:8F:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa
Signing time: Fri 24 Apr 2026 13:00:31 +0000
ROA not before: Fri 24 Apr 2026 13:00:31 +0000
ROA not after: Thu 23 Jul 2026 13:00:31 +0000
asID: 16581
IP address blocks: 2602:817:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/1a7077e9-a4f8-4399-b93b-258103b803bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/1a7077e9-a4f8-4399-b93b-258103b803bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9c:ea:b6:73:96:1e:93:af:9b:2c:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7077e9-a4f8-4399-b93b-258103b803bd
Validity
Not Before: Apr 24 13:00:31 2026 GMT
Not After : Jul 23 13:00:31 2026 GMT
Subject: CN=5e7096ed-b1da-40d9-90a7-f9efa32c21f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:b6:29:78:7d:bb:6e:fd:c6:ba:7c:3f:98:
de:6e:ec:aa:b6:ce:05:a9:f8:ce:86:8c:20:48:f0:
e6:64:65:e7:93:9a:9a:de:ef:c0:38:9b:e9:89:82:
ef:e4:b1:51:6d:3c:da:4b:da:b4:2e:56:4c:26:bf:
96:b5:83:27:f6:4f:59:36:9f:71:84:4d:a1:14:fc:
de:5b:fa:d6:94:8b:1d:f8:9f:2d:c9:93:7f:76:fc:
98:37:95:0c:c1:25:94:77:9e:23:7d:ad:09:e6:66:
fd:39:a7:fa:36:a6:96:b9:71:22:26:54:c4:4a:75:
5c:4d:27:3e:66:60:1c:07:ad:76:4c:ad:8a:14:fc:
35:5c:80:24:f5:08:fb:63:8d:c3:f0:42:51:10:a3:
99:a4:2c:28:b4:53:97:2b:81:84:0d:cf:a2:5b:a9:
0e:40:ab:9f:e3:a2:44:d6:dd:10:8b:35:6e:a8:4a:
d4:58:e9:bf:8a:f3:06:3c:70:f5:fb:84:fe:8a:89:
61:db:63:c6:4e:09:53:f5:3e:5a:00:b5:7c:10:25:
51:a9:99:45:1a:00:41:ec:97:54:8f:cc:a9:f7:15:
e3:1b:d4:68:b5:66:d5:5e:df:ee:00:37:2f:32:ed:
c8:30:26:8e:9b:3e:3b:22:7c:92:7e:4e:58:bb:d8:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:39:25:9E:72:8D:7A:B1:F7:5B:AF:B4:F6:F4:CB:6E:21:08:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/ec2f6d87-a4cb-3d05-bb57-f4f190561eb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd/1a7077e9-a4f8-4399-b93b-258103b803bd.crl
X509v3 Authority Key Identifier:
keyid:0D:BD:CA:53:85:C1:EB:0A:63:AA:8B:38:53:E5:B8:84:F8:19:8F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1a7077e9-a4f8-4399-b93b-258103b803bd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:817:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:57:ec:be:a9:a4:8d:47:cb:b6:cb:b9:16:69:be:62:3a:0d:
8f:ba:9e:e8:a0:39:61:83:e8:65:97:2b:71:7e:01:8c:b1:6c:
3a:d4:44:15:13:37:95:12:6d:8f:ab:80:14:c8:f4:c5:a7:08:
14:de:37:e9:f7:c5:a7:f3:3b:33:0c:07:78:61:3f:15:82:02:
a8:4a:55:60:fa:fe:34:d8:cb:0f:ef:13:41:3b:d2:8c:a8:9d:
79:de:e9:fc:4e:a3:86:66:29:42:08:4c:df:64:99:00:41:90:
d5:aa:81:b2:86:70:60:a4:90:a4:bf:aa:8e:c2:38:76:a5:fd:
a8:1f:fc:44:64:5d:11:e1:c4:78:fe:53:92:73:c5:e6:47:bc:
68:d8:ad:6a:4c:60:f1:32:12:78:f4:4a:99:f4:6e:4e:64:04:
04:14:39:37:fd:7a:d9:84:98:17:fd:fd:7c:c1:50:2b:08:b2:
f1:50:a7:78:55:9a:82:c0:8a:67:cc:5b:13:03:87:8a:a4:ee:
16:37:62:6d:28:e3:28:65:2f:63:1c:e9:9f:7d:31:d0:fc:50:
d4:bd:a6:fe:05:15:8e:b9:22:09:68:93:13:19:d4:69:82:9b:
53:9c:c3:0c:a6:1b:75:1e:86:86:69:37:a9:f5:5c:45:da:4f:
ae:d8:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:35 2026 by rpki-client