
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ef2b9a7e-6c52-390c-b55a-98a8cfb2b6a3.roa
File: ef2b9a7e-6c52-390c-b55a-98a8cfb2b6a3.roa (raw, json)
Hash identifier: zUfiV+3gC5WwxOfiPbIvcdHWf5pnobxWH2FK7QiW3mw=
Subject key identifier: A5:CA:05:77:91:9D:81:13:2A:B6:79:AF:F1:D0:94:F5:48:D5:6B:77
Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial: 010D0C9F4328584D852FD92AFDD68FE2C8334D80
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ef2b9a7e-6c52-390c-b55a-98a8cfb2b6a3.roa
Signing time: Thu 16 Apr 2026 01:00:23 +0000
ROA not before: Thu 16 Apr 2026 01:00:23 +0000
ROA not after: Wed 15 Jul 2026 01:00:23 +0000
asID: 400919
IP address blocks: 2602:817:2009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:85:2f:d9:2a:fd:d6:8f:e2:c8:33:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
Validity
Not Before: Apr 16 01:00:23 2026 GMT
Not After : Jul 15 01:00:23 2026 GMT
Subject: CN=a1b916e5-2442-42a4-9032-5fe34919ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:26:c8:b1:e5:c8:44:44:41:37:85:27:a9:
65:68:25:ca:e4:b7:b2:fd:9b:98:69:17:8c:60:65:
cc:2d:f1:c5:61:d4:31:b9:47:fa:67:d3:8f:b1:3b:
8c:47:d8:ed:9f:02:57:53:f3:f2:3c:84:d8:53:ca:
c6:07:87:54:cd:df:91:c3:1d:89:88:3d:c3:12:df:
78:6c:3c:aa:8a:af:84:93:ec:0a:32:ee:17:5d:88:
dc:7e:e4:a8:e9:0b:93:67:cf:17:5d:ae:56:79:d3:
1e:bf:7a:7a:b2:81:46:28:5b:95:80:f5:a7:3a:20:
ba:9a:44:cf:61:fe:81:b8:b4:f7:a0:ae:ee:a5:04:
86:10:a2:c9:48:93:86:40:3b:7f:0d:af:81:ed:72:
96:00:98:99:ea:bb:ff:07:70:96:d1:17:07:05:28:
b9:ec:2e:38:38:5c:1a:6d:50:b8:71:09:48:6b:9f:
bc:31:8d:77:96:f9:00:74:b6:0a:dc:69:7a:1b:4a:
5b:c5:a9:d7:64:c7:f7:2f:72:17:05:ae:c3:8b:63:
00:a8:a6:5a:f6:29:6b:82:ae:e6:f4:31:d1:d5:41:
b2:7c:ec:63:7e:b7:af:75:a5:ab:27:69:10:05:ba:
4d:89:06:77:9e:cd:5e:26:2a:0e:ee:52:3a:e3:19:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:05:77:91:9D:81:13:2A:B6:79:AF:F1:D0:94:F5:48:D5:6B:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ef2b9a7e-6c52-390c-b55a-98a8cfb2b6a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
X509v3 Authority Key Identifier:
keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:817:2009::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:c7:d5:17:34:1f:13:6a:3b:de:a3:4f:a6:ed:34:c4:f0:88:
fa:ce:c6:d6:85:84:6f:6a:0e:0e:fa:3d:c9:fd:ef:60:47:98:
f9:59:69:40:9a:e2:db:71:63:21:de:d2:61:7f:e9:4f:35:22:
a0:c0:95:3f:93:12:a9:a6:42:d2:d3:75:be:2e:83:9a:af:25:
9f:93:64:f9:c0:b4:16:14:b7:12:13:ae:55:08:d1:4d:0a:36:
ee:e9:cb:44:95:f1:a8:37:33:a2:49:32:14:e6:f5:77:2e:86:
4e:07:49:b8:f7:1c:d5:50:78:7b:ae:71:78:fd:e7:52:80:f9:
c0:26:24:53:21:62:80:06:29:ad:63:b2:50:29:5e:3a:94:39:
3d:77:ad:e1:72:68:af:8a:0b:ed:77:0e:c5:ad:1e:d5:d3:b6:
42:18:76:2e:5f:93:78:ee:5f:72:d7:d2:60:e0:2a:bc:6f:a0:
e8:78:f5:0c:41:64:23:0b:9e:be:95:1c:96:e4:42:b8:e6:0d:
d4:27:d0:e1:2c:02:74:21:d5:75:20:a5:e5:b2:c9:57:07:88:
9a:45:ac:1a:d8:ad:f5:0c:28:3d:7a:67:67:b7:f7:64:36:ae:
cb:ab:20:3a:ff:08:d8:90:30:42:a0:14:0b:a2:e6:ce:96:a2:
73:89:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:11 2026 by rpki-client