
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
File: 27872a34-19cb-38ff-9f2b-60c884e32b1a.roa (raw, json)
Hash identifier: 38ecuGzb847/EnK5vNtjHzj4bk3L4+KPNqhHR8hmR6I=
Subject key identifier: D5:5D:79:B4:40:7E:82:E1:D9:21:DA:4C:C2:20:A4:6E:BA:1E:1B:3B
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F4328584EFE1221508404DFDDA7308F00
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 400544
IP address blocks: 2607:76c0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:21:50:84:04:df:dd:a7:30:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=2aea74ed-0e27-4562-9dfe-375524fe90c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:2a:66:d4:ba:45:09:27:3b:9b:d0:f6:b0:
58:6d:2c:58:38:33:19:d1:b1:df:58:b3:c7:57:c8:
c7:8f:d8:fa:da:27:49:fe:f3:62:d7:61:4d:57:2f:
37:0a:03:a2:e4:5b:50:16:42:86:43:82:88:85:44:
7e:74:ab:64:9b:d4:94:29:14:a3:b7:fb:49:f6:d1:
56:f1:79:18:bc:59:5d:40:fe:eb:5d:25:cf:77:6e:
ff:2c:ee:9a:34:05:57:a0:da:b2:4e:03:39:93:b1:
b8:ea:90:83:84:8e:db:fe:79:82:04:d5:d7:b1:2e:
02:29:e2:77:38:bb:d4:9f:86:06:78:60:b6:dc:81:
46:ba:eb:0d:5c:3e:f7:a9:14:60:ec:0c:95:41:61:
20:93:0e:00:94:16:eb:af:16:09:fa:8b:97:2b:0c:
0b:f3:fb:22:a1:5a:49:6e:f1:4f:96:97:0e:db:10:
e2:b0:7b:4e:0a:b5:f7:fb:e6:de:64:cf:35:27:b6:
02:d5:8e:05:2c:c5:36:09:aa:c6:b7:7e:e8:7e:c2:
43:f4:d2:44:aa:2e:93:96:cb:85:9e:10:57:4b:a7:
20:20:f8:7c:4c:14:ac:1a:7b:42:7f:c9:56:a3:8b:
e1:64:7f:96:7b:c0:dd:1d:00:f7:92:ad:29:3b:cf:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:79:B4:40:7E:82:E1:D9:21:DA:4C:C2:20:A4:6E:BA:1E:1B:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:76c0:5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:e2:40:e1:9a:a1:76:3c:0d:68:e0:5f:76:5d:3b:61:d4:e2:
52:a7:8e:0a:8a:0a:52:d5:1e:df:b8:a0:ab:d6:0b:b6:dc:29:
10:1b:97:d8:b8:ad:f2:ae:ad:9f:76:54:3a:91:14:e7:68:2d:
22:fe:28:c8:48:91:e7:2e:76:22:45:6f:6b:2a:a0:80:9e:2c:
87:45:2c:fc:12:6d:d3:80:ae:6a:aa:67:de:54:cf:bc:a5:2c:
64:7a:7f:6c:8e:46:e1:30:5b:93:79:5d:49:4d:2b:ff:29:45:
59:c6:97:79:f7:3f:51:08:1e:ad:f5:60:a9:e6:38:3b:34:c8:
7a:76:2d:0c:c2:50:61:69:83:75:e0:eb:46:cf:04:71:5b:72:
57:96:f7:0d:f1:77:4c:c4:a5:15:01:56:b3:b9:9c:e1:a9:ae:
ce:90:2f:4f:71:9f:46:a9:7e:33:4d:ff:b7:cc:5b:7e:f6:2b:
ef:e6:6f:6e:24:23:69:94:55:df:e5:fc:bd:ce:8f:94:70:0e:
5c:87:95:3c:64:67:6d:59:b9:5a:77:ac:49:36:4c:78:a5:d5:
7d:12:11:45:a2:88:65:23:e1:12:a2:d6:51:20:bf:08:a1:01:
db:ec:f7:fa:ec:d8:27:da:54:51:7f:e3:89:e6:f3:16:f4:4a:
dd:a5:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:19:31 2026 by rpki-client