
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
File: e843172a-871a-3a64-bad5-2099da6dcdfb.roa (raw, json)
Hash identifier: HqN0bUj2kPM5nPsIz3JRgBKBUrQb1j/mVxqptNhEghM=
Subject key identifier: 7C:05:37:8A:AB:D9:D8:1B:9C:EE:33:04:13:CF:7E:DD:7D:BC:B9:E0
Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial: 010D0C9F4328584EFE122169F73677A37FA0CEA0
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 400544
IP address blocks: 2607:76c0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:21:69:f7:36:77:a3:7f:a0:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=e4f1aff9-4068-47ef-b00b-aa67d3037f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:37:5b:d7:73:63:06:67:db:2c:bf:ac:f0:
d3:70:82:00:13:ca:8d:f9:19:29:03:a5:37:03:95:
d9:38:e1:fe:d8:68:d9:bd:7b:c3:cd:00:f5:62:31:
79:be:70:2f:a3:ce:4d:3f:97:c7:a4:56:0b:4b:46:
e8:45:a4:45:d4:d7:53:e1:01:d6:a8:2a:25:13:5b:
9b:99:7e:e9:e2:d0:f9:59:d7:ce:54:5c:c2:a3:a9:
b6:fc:eb:31:1c:e3:4f:2e:7e:27:6f:4c:fd:d6:b9:
27:85:70:be:81:2d:62:a5:57:f9:f7:16:72:6e:d9:
14:bc:53:8a:86:96:14:d8:a7:bd:03:1b:59:dc:8e:
9d:6f:22:9f:56:f3:a1:2e:42:64:fb:95:74:b9:fa:
07:24:92:36:3d:97:0b:84:06:71:00:c5:5f:ff:32:
ac:1c:f3:3e:e0:cb:4e:5c:40:a3:9f:f9:0a:62:46:
7d:92:86:80:37:05:51:54:1f:e2:e8:2e:33:c0:6c:
42:2f:43:c2:1d:be:63:95:70:67:cc:01:7f:85:ba:
30:69:da:25:07:04:74:86:c5:d8:aa:06:de:8f:a1:
0a:08:6c:10:ac:6e:9b:aa:a2:da:4e:b8:3c:2c:ae:
b0:b4:3f:7e:b0:9b:41:d6:bf:a5:45:63:34:00:7c:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:05:37:8A:AB:D9:D8:1B:9C:EE:33:04:13:CF:7E:DD:7D:BC:B9:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/e843172a-871a-3a64-bad5-2099da6dcdfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
X509v3 Authority Key Identifier:
keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:76c0:10::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:de:4f:74:04:74:76:d7:0b:d6:18:80:f0:08:aa:f9:e9:0a:
25:2d:ce:fe:2a:fa:d1:49:4c:5f:c4:06:6a:21:f8:9d:16:b0:
46:61:70:47:50:c0:2e:7d:11:e6:1a:78:9c:4c:54:36:13:85:
65:a7:73:27:f0:6b:ab:4f:ae:07:83:77:fd:18:0f:51:72:99:
ed:53:d8:c2:09:92:7b:fc:68:db:26:82:3f:66:a1:f7:93:ab:
c4:8d:bb:1f:7c:a2:61:21:f2:a7:72:28:51:fc:9a:1e:41:f5:
b1:21:de:8f:6a:72:b4:a7:a5:d1:aa:09:e8:33:d9:b0:84:9e:
fd:3c:8b:dc:3a:7d:77:94:f5:f5:55:0c:81:67:9b:9a:92:b3:
bd:64:e5:10:b7:a2:db:0a:93:e8:1e:c0:b4:23:c6:4d:33:98:
4b:2f:89:06:b8:9f:b0:3a:5a:99:89:4a:e0:53:be:2d:67:bd:
28:44:cc:4d:21:ae:1b:24:12:8a:c1:39:0c:bf:8a:79:72:ac:
cd:10:fc:be:90:6b:84:e0:23:14:ec:4c:b8:5a:d3:0b:c0:cb:
fd:46:7d:57:f4:f8:c3:cc:db:fa:10:18:5a:e3:4b:fb:21:92:
c2:63:3a:3e:90:b2:4f:c6:01:ec:be:9b:53:de:e4:3a:a4:86:
d7:c1:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:41:09 2026 by rpki-client