
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
File: 56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa (raw, json)
Hash identifier: +VbFcpik8wZ+JaJEIu9uVSK+0rau+UFm1qDBfwhgv48=
Subject key identifier: 9A:7E:AB:DF:BF:07:88:D3:47:5B:71:3A:27:83:72:91:01:C5:64:31
Certificate issuer: /CN=df17821c-c81a-4f1b-baba-e8419dc81508
Certificate serial: 010D0C9F4328584E6F3EB7A54322C91202D45700
Authority key identifier: EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 23307
IP address blocks: 2620:8b:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3e:b7:a5:43:22:c9:12:02:d4:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df17821c-c81a-4f1b-baba-e8419dc81508
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=c43a0dca-2f67-4811-8941-fac3b8eb2563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:24:d9:dc:c6:78:cb:53:fe:2b:80:81:12:
01:96:0a:a8:39:03:77:79:86:c6:28:59:08:2b:92:
64:ee:24:91:29:f8:fd:5f:7f:15:d9:03:a0:29:eb:
6d:05:b5:8d:9f:2a:11:93:97:cd:54:ea:9a:0e:c4:
ac:c8:1d:4e:55:eb:dc:e7:96:0e:b9:c8:42:86:b6:
a3:2a:08:3b:7c:f7:60:3b:3a:17:db:c9:2e:cc:02:
57:b4:1c:79:65:90:48:3c:09:0f:09:f1:d7:ff:fd:
64:07:1a:b8:2e:ce:9e:fd:0f:d9:ee:dc:10:d2:94:
11:14:cf:93:64:c3:15:a1:87:e2:0d:5b:c6:52:da:
25:a8:a4:39:15:a1:61:28:8a:7f:0a:df:90:d1:42:
f7:ca:2e:a5:97:28:ac:d3:4e:01:86:5e:f3:d9:74:
29:9a:98:8b:eb:39:29:16:75:ca:e1:97:b5:02:47:
46:49:16:f8:4e:34:b0:f6:77:c4:d7:d8:8a:e0:e9:
32:26:8b:d5:f0:16:ca:fb:c1:33:58:c8:65:d3:23:
41:41:98:8c:4d:d8:7f:89:21:47:1e:59:45:54:05:
ff:22:46:2a:4b:c4:a7:9b:19:d6:f3:2b:64:27:75:
86:62:77:5d:21:87:ae:4c:5f:10:31:36:4c:1e:0f:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:AB:DF:BF:07:88:D3:47:5B:71:3A:27:83:72:91:01:C5:64:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/56b8d91a-4f70-39ad-ad3d-f3a20189fbdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.crl
X509v3 Authority Key Identifier:
keyid:EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:8b:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:2e:64:d1:6f:59:ac:78:ca:cc:5a:e1:f4:b3:1f:f9:8c:58:
7e:c8:39:92:75:08:27:0a:73:2d:e9:d9:4a:1e:eb:ad:a0:10:
96:00:1b:91:16:dc:c0:e3:d5:61:e4:b2:40:10:5e:da:5d:0b:
16:93:7b:2c:ee:c0:56:a1:5c:d6:0e:90:65:38:8c:94:58:0c:
cb:5a:0e:ae:a3:c9:79:e6:42:a6:71:27:5b:3c:cf:cc:43:e3:
c9:a7:fe:82:4f:ab:8f:2f:8e:a7:08:13:12:ad:98:3f:cd:ff:
22:92:52:74:3e:75:7a:bc:f2:3b:46:2e:9f:42:01:17:f0:9b:
e1:18:79:7c:2a:0c:6c:ff:82:88:75:2a:2a:07:84:53:e7:dc:
5e:9d:bf:48:25:9b:45:2e:b3:01:f9:f4:97:7f:31:36:fe:b4:
e7:88:ba:28:f7:7a:3f:58:25:ad:9f:e1:d1:5d:00:20:bc:49:
7b:04:c4:35:8c:8e:da:10:d3:61:3d:4a:72:79:c4:68:eb:7a:
82:e1:7b:64:ca:a4:79:53:7d:3c:94:d4:ca:85:ac:85:1d:ad:
30:1c:6c:b8:e7:1b:04:e8:ac:af:b0:c5:36:f0:8e:6e:38:0c:
06:ec:f7:b7:12:78:d9:5f:dc:83:c4:3b:ed:71:87:4a:61:1b:
6e:67:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:14 2026 by rpki-client