
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
File: b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json)
Hash identifier: tN+kGRdHD/cU7UpNSIxrwUK5r563qzNPN4FIusNktww=
Subject key identifier: 5B:8F:97:05:F7:18:70:D6:29:5E:AE:11:0C:BD:C0:10:9D:C8:0F:50
Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
Certificate serial: 010D0C9F4328584D75D52D400C38BCD84433CF80
Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
Signing time: Fri 10 Apr 2026 13:00:31 +0000
ROA not before: Fri 10 Apr 2026 13:00:31 +0000
ROA not after: Thu 09 Jul 2026 13:00:31 +0000
asID: 53507
IP address blocks: 2604:56c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:d5:2d:40:0c:38:bc:d8:44:33:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4
Validity
Not Before: Apr 10 13:00:31 2026 GMT
Not After : Jul 9 13:00:31 2026 GMT
Subject: CN=cd7b68cd-7f26-4b79-9c3d-84b3107af240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:69:10:5f:c8:0c:38:9e:64:a0:48:75:b9:
d5:de:23:af:21:e3:df:bb:60:bd:6c:21:16:3f:4e:
2d:10:9a:5d:ff:b2:58:c4:c4:c4:28:55:2f:f5:63:
8c:74:3c:c6:8e:f3:92:1e:77:c6:13:73:b6:b5:ec:
0e:b6:17:50:6d:b1:9f:1c:fc:9e:0e:87:1c:a8:64:
33:2e:00:a5:60:de:2a:b1:c4:47:77:7e:48:a5:70:
c2:fe:7f:9d:48:1b:d0:cd:4f:8d:3e:43:5f:3f:81:
b5:39:48:14:35:13:86:1b:da:9d:7b:84:60:51:00:
cb:72:23:28:77:b5:0f:b2:c7:45:81:c8:68:5f:62:
fc:76:3d:44:bc:d4:74:4a:21:42:60:58:67:fd:5a:
21:27:bc:1a:b8:65:13:fa:ce:87:8d:86:8c:4b:9c:
24:7b:e9:c3:86:fe:b4:39:10:e3:dc:dc:b2:ac:a2:
f5:79:0e:27:cd:81:5a:8d:0a:50:a1:c2:e1:61:bf:
52:2e:cc:18:7c:1a:8b:8a:9b:f9:0f:ea:5d:4d:e4:
cf:5e:83:39:f7:18:04:e5:f5:9f:de:dc:b4:7f:8b:
3f:62:e1:49:6e:1b:9c:89:de:91:48:12:7d:b8:53:
f7:fb:55:ab:e1:4a:f9:0e:34:7a:54:07:c6:aa:4c:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:97:05:F7:18:70:D6:29:5E:AE:11:0C:BD:C0:10:9D:C8:0F:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl
X509v3 Authority Key Identifier:
keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:56c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:2a:46:a1:a4:bd:c9:5f:6f:ec:c5:67:6c:ee:1f:53:6a:ca:
57:b7:3f:eb:34:61:e9:d8:55:b7:90:b3:dd:d7:1c:2e:a3:14:
f1:2b:fa:b9:df:ef:7e:a8:a7:01:67:6a:54:1f:9e:ae:3f:ec:
1d:38:80:45:7a:74:22:59:c3:86:49:e1:0d:cc:bf:66:f1:4a:
22:5f:20:02:cd:7e:b1:d2:86:0f:58:56:61:19:a8:5f:49:56:
5e:59:6f:0b:c5:f5:60:45:53:41:41:97:0b:de:7e:c6:a8:14:
22:34:49:7e:2f:da:5e:9b:0b:82:ed:bb:4b:69:a8:55:85:52:
13:dc:86:3d:aa:67:51:d1:3f:7f:21:4f:55:5f:17:c2:25:d4:
79:61:12:93:de:59:32:90:0c:37:f8:52:1a:7b:9d:22:42:52:
17:82:f5:4e:dd:c6:81:17:66:54:92:5a:d3:47:be:9c:e7:77:
76:01:e1:b7:64:85:7b:f2:f3:23:58:17:3d:df:ac:94:93:2a:
78:52:7f:4a:2b:80:5b:00:93:8e:a0:f3:63:84:e9:c4:8b:4e:
9b:5c:fc:84:c3:e5:67:eb:3f:4f:02:39:54:70:d8:fb:90:1d:
3b:c1:0d:c0:ee:9f:84:ef:40:73:b0:1d:f7:ac:41:d5:f8:0a:
ba:09:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:34 2026 by rpki-client