
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa
File: e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa (raw, json)
Hash identifier: fBmErT15+n1f8VvHYhHZfzXpK7KHANxZOoIWrXtg4EQ=
Subject key identifier: FC:27:C5:BE:A2:DA:FE:37:3C:68:45:59:DC:9F:B4:78:20:1C:55:3D
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F7BB302E9E02F2DBDAF253580
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa
Signing time: Tue 13 Oct 2026 01:00:14 +0000
ROA not before: Tue 13 Oct 2026 01:00:14 +0000
ROA not after: Mon 11 Jan 2027 02:00:14 +0000
asID: 7203
IP address blocks: 23.19.53.0/24 maxlen: 24
2607:f5b5:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7b:b3:02:e9:e0:2f:2d:bd:af:25:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 13 01:00:14 2026 GMT
Not After : Jan 11 02:00:14 2027 GMT
Subject: CN=81ea81b9-45bc-4b1e-a901-c00b55319be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:25:c1:52:5b:09:b6:d2:30:68:11:6f:9b:
51:08:fd:06:af:c4:6c:46:61:ff:a6:cb:e8:04:03:
7e:1d:b7:4f:62:70:9e:7c:33:a0:97:64:fa:60:f8:
d2:f8:4e:cb:82:3f:c0:d8:fa:ee:0f:ae:9d:28:ec:
af:89:87:7e:66:66:ed:39:d9:71:73:5b:90:db:81:
98:91:bf:cc:a5:78:15:f4:2d:21:3f:fd:1c:14:b8:
b6:c3:cb:c8:1b:e6:07:c2:bd:ff:4d:40:e9:b1:62:
30:b4:8c:de:f8:ca:2f:98:77:36:58:70:a5:08:54:
8b:9c:86:b5:43:77:78:a0:07:27:8e:4a:25:fc:e6:
9b:28:c1:f2:fb:29:63:fd:2d:97:c2:d0:2d:ad:27:
01:15:83:a6:84:96:85:67:cb:c5:6f:50:ef:14:66:
ad:bf:4e:da:cb:10:eb:1e:5e:13:30:9a:f9:c1:7a:
8b:cc:d6:62:58:51:d7:f1:91:15:52:cc:77:b9:19:
8a:cb:6b:7e:98:9c:21:23:e4:1c:11:a4:42:0a:ef:
28:c6:0c:d2:fa:ba:af:4c:6b:8d:64:7f:f0:ee:26:
d1:bf:36:21:42:7d:b6:f3:02:6f:f0:15:f8:05:8d:
8b:ae:40:44:ca:cc:dc:dd:a5:a2:6a:51:f5:da:88:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:27:C5:BE:A2:DA:FE:37:3C:68:45:59:DC:9F:B4:78:20:1C:55:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.53.0/24
IPv6:
2607:f5b5:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:e8:35:ed:cc:80:13:a2:e9:44:4d:f7:d4:44:5a:11:74:2a:
06:46:d0:88:e4:f8:f9:48:e8:70:c1:4b:50:23:78:df:2c:98:
2c:d9:9a:e7:56:10:22:25:80:d9:d2:a5:68:d0:c2:27:7e:33:
38:7b:78:6d:9b:89:ae:e8:f9:19:3e:05:79:d5:e6:3c:01:36:
43:4e:37:03:87:01:35:d7:48:a3:69:62:a1:ad:2f:56:12:3c:
44:4a:ba:3d:a6:68:84:6a:90:39:15:44:97:e9:40:3c:e5:1d:
33:3d:49:4b:af:3b:22:b1:09:96:e2:50:f6:f1:d9:f3:5f:e9:
12:58:43:7a:e4:b3:86:ce:f8:7d:1b:3f:3d:9a:35:c6:79:d7:
ab:36:32:61:20:c9:de:1e:29:2b:65:14:c2:c0:e9:95:79:4f:
53:b1:b5:3b:5f:58:ba:d3:52:c6:45:e5:28:2d:b4:af:06:98:
0c:5e:9a:69:c5:c9:79:76:79:57:9c:1e:0b:b1:fb:95:5b:c7:
61:fa:4b:b7:79:39:d6:82:02:cb:3a:ec:96:1a:18:d5:3e:f2:
3d:87:b8:bb:08:22:6a:ff:f7:37:41:cd:89:44:c7:2a:66:a1:
d7:be:eb:b2:b3:38:b2:11:a0:3d:d6:72:36:eb:ee:a2:04:b6:
69:71:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:12:56 2026 by rpki-client