
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa
File: 5b4385d4-3792-3f26-9dea-55e5f859a324.roa (raw, json)
Hash identifier: ALa1yV77u7PYoSWg36Odl7wK2lK8hYSZLA6eBNzQTSA=
Subject key identifier: 8F:0D:5E:46:A4:22:AF:17:1B:3D:0B:31:7D:88:62:4B:8A:B0:A0:13
Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial: 010D0C9F4328584D746FC107D61A054F5DAE72E0
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 16509
IP address blocks: 2606:7740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:c1:07:d6:1a:05:4f:5d:ae:72:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=0a227ad6-6d54-4179-b7b7-3c40261a07b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b6:57:bd:c9:42:d0:dc:e5:64:0e:fd:09:a6:
5d:03:51:c4:b9:47:04:bd:c2:1e:f8:0a:2b:d2:fd:
18:5f:35:35:a1:79:e2:70:be:9d:e6:16:69:49:a2:
f5:ed:75:2e:ed:e6:33:42:54:5e:04:6e:7b:6c:23:
71:99:81:63:51:33:ec:f6:71:d7:e5:6e:e5:3c:04:
0a:a6:5c:d2:68:7b:75:ab:f1:ae:90:b0:84:52:bb:
e7:e4:16:fe:1f:2a:90:b7:9a:88:37:d8:78:c1:a4:
43:5b:c9:77:2d:de:38:32:c7:cb:22:77:2b:b3:1e:
6c:0f:6c:20:37:28:f7:6a:2a:c9:24:db:30:ed:46:
0f:5f:75:e2:3f:ab:54:21:89:e4:d3:bf:6b:1b:51:
98:9f:af:85:ba:9f:79:06:bb:15:5b:9a:51:2a:9a:
8f:c3:5f:dc:0d:4b:a2:b2:41:f9:00:a2:ce:cb:27:
59:23:4a:1d:e1:bf:b8:71:5c:b4:c7:f2:52:dc:ea:
5e:23:86:af:c3:cf:b9:2c:ae:7d:3f:97:4d:17:23:
81:fa:a1:45:22:c4:4a:45:72:71:5b:d7:81:49:0e:
63:bd:73:a4:df:a7:c1:99:11:7d:8e:06:2f:ea:dd:
89:d1:63:9c:bf:94:79:8b:50:10:88:dd:9d:59:fa:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:5E:46:A4:22:AF:17:1B:3D:0B:31:7D:88:62:4B:8A:B0:A0:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
X509v3 Authority Key Identifier:
keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7740::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:35:25:af:2e:ae:4d:11:f1:8d:66:df:70:59:da:87:14:97:
08:bb:06:bf:2a:6f:b1:39:49:c5:8f:55:d3:23:2b:b1:82:b1:
c8:e4:03:8c:3e:55:43:68:c0:83:e9:9b:55:03:f4:52:9c:a8:
b4:07:56:cc:73:6c:83:89:4a:a2:28:cd:a1:a2:9a:53:d3:40:
71:60:bf:d7:71:16:6d:44:cf:0a:f5:d2:49:79:2e:86:2d:ae:
94:21:ab:d5:47:5a:c6:f1:93:45:64:0d:18:a8:49:a0:ba:d7:
80:f6:96:e8:db:0f:cc:b6:22:00:88:55:a4:de:81:e2:ef:97:
fa:03:12:9d:f5:6b:57:67:53:60:c7:04:e2:1a:6e:82:ae:c9:
ea:36:41:22:e5:ba:41:45:b6:0b:cc:5d:a3:a6:6b:ba:26:f6:
8e:2e:25:4a:29:3f:73:69:6c:80:55:2c:ec:93:c6:0b:64:5f:
62:9e:88:0e:fc:21:21:44:7b:89:2c:27:90:49:3c:60:a1:7d:
9c:e3:22:e1:92:38:cb:00:3e:f0:7e:b3:c3:2a:4f:e3:c5:92:
d9:c5:24:8b:c8:21:b3:94:61:72:db:1f:23:a3:af:8d:be:84:
6f:5a:7f:55:dc:05:57:85:01:27:9e:bb:48:8d:1e:db:dc:90:
e0:cd:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:28 2026 by rpki-client