
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a27a83c-8862-3b21-bd78-8ebc923241b2.roa
File: 2a27a83c-8862-3b21-bd78-8ebc923241b2.roa (raw, json)
Hash identifier: K5hKdtqn86pGY1qFqc9Dd/Tol5aWatnm6xGtDRpsEeo=
Subject key identifier: 2B:B8:49:FC:A5:25:40:8B:6A:89:98:A1:22:7A:8E:84:48:B9:1A:C5
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584F0D6CE2E6C5E1688081AF0FC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a27a83c-8862-3b21-bd78-8ebc923241b2.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 33588
IP address blocks: 98.127.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:e2:e6:c5:e1:68:80:81:af:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=c6f86c2b-115e-4503-803e-1da3865af68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:d5:7e:b0:49:ad:91:9f:55:c2:01:a0:e0:
90:08:c9:d0:66:dd:55:36:c7:9d:5e:f0:8b:80:c6:
eb:bc:33:5a:01:30:03:8f:d1:99:e9:52:83:19:12:
12:fa:e7:af:26:0d:bf:21:99:1e:64:f8:de:31:c5:
82:b6:99:fe:56:27:54:72:4b:03:72:64:99:f3:c3:
4b:32:96:b3:fa:3c:4e:d4:52:3b:46:06:51:86:56:
ff:95:91:d6:2b:ef:26:52:d7:ce:69:94:4e:26:5b:
c5:bc:42:20:00:ea:6d:84:eb:e9:4e:b2:66:65:04:
04:dc:24:1a:e4:0f:37:0c:f9:0f:b8:60:c3:7f:d1:
e2:f1:e4:0f:7d:e1:37:f0:13:f2:c7:cc:ad:4c:86:
21:db:86:9f:5e:79:aa:db:2f:71:c3:8d:85:1a:8d:
14:35:ad:a7:5b:12:11:a5:f4:86:15:19:7f:f5:93:
d9:52:46:64:38:b4:42:08:21:f6:ed:36:db:a5:16:
cd:ff:6f:8c:f3:a4:7d:40:35:27:31:c2:5e:aa:a7:
a7:46:cc:76:cc:9f:c4:60:5a:79:bf:90:b4:fa:3e:
e4:37:71:22:2b:32:96:a2:5f:f8:a1:f7:17:cf:df:
e5:4a:df:00:bf:57:51:5a:b6:5d:20:c3:af:2a:a6:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:49:FC:A5:25:40:8B:6A:89:98:A1:22:7A:8E:84:48:B9:1A:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2a27a83c-8862-3b21-bd78-8ebc923241b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.127.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:fd:44:52:1a:67:48:fc:60:09:09:a4:88:85:cf:13:58:f1:
25:bc:a3:6a:29:02:37:46:23:86:b9:45:3a:af:4e:17:0c:de:
4f:e5:fb:a2:8c:61:84:6b:33:87:93:3f:24:c9:9b:03:49:28:
39:8c:64:6a:ce:0d:cc:2a:ba:72:53:a9:5d:90:f1:bc:b9:40:
1c:4d:2a:63:91:4f:da:67:61:ad:46:f1:c9:43:12:c7:af:03:
32:54:de:d1:78:b8:4f:c6:f3:4c:11:83:ca:60:94:4f:ba:d2:
f3:15:56:66:24:ff:6e:6a:1c:1a:6b:ea:c3:27:90:60:3f:1e:
87:c5:83:26:02:e2:2d:61:89:0a:77:06:96:b5:bb:16:2d:2b:
49:3c:32:a5:33:e7:f3:56:1e:b4:15:31:39:6d:ca:03:54:51:
fa:90:fe:be:f4:a5:99:96:d8:57:da:19:cb:6a:17:e1:da:9b:
06:d9:7f:3c:a6:e3:1f:65:17:47:36:ca:38:05:80:26:bf:a1:
17:bc:ec:a0:62:93:14:c0:0c:e9:d7:6d:d1:02:ea:1b:4a:cb:
50:30:e6:6f:e5:3f:d0:66:71:66:3d:bc:90:39:b7:34:8e:af:
f1:b0:ba:d7:41:ec:ea:6a:eb:97:42:7c:1e:b9:c3:59:ad:7e:
65:26:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:53:16 2026 by rpki-client