
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa
File: 27be7397-7a00-3f80-80d6-0af1003bcb73.roa (raw, json)
Hash identifier: 446xEhoeabGm3SprqJ1dhjgu87ZtNCxXkLHebvm0tvk=
Subject key identifier: 0B:67:A3:8B:ED:EA:2F:A0:61:01:AB:36:ED:C2:0B:EE:0B:B2:29:62
Certificate issuer: /CN=89278746-5270-4955-a4eb-d96ac3a3dce1
Certificate serial: 010D0C9F4328584F1CC79B572BDE5CB5A99BE300
Authority key identifier: A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 401831
IP address blocks: 2604:17e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:9b:57:2b:de:5c:b5:a9:9b:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89278746-5270-4955-a4eb-d96ac3a3dce1
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=e0a65bf7-2ec5-4367-9886-cf0aa47197de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:72:4a:ac:ba:a3:1f:01:bf:e3:1e:77:80:
86:8c:43:1f:1a:f2:61:37:ac:61:c5:c6:1a:29:30:
55:25:58:8d:7c:24:fc:a1:0f:0f:4e:23:6e:48:e4:
58:11:64:e0:09:c6:d5:ef:c0:f2:fa:f6:81:d7:3c:
b6:d4:eb:f8:81:d2:a1:cc:64:57:18:04:b9:88:98:
a4:6b:06:fd:e9:5a:c7:1d:a4:d3:6b:a4:66:90:91:
24:6f:c3:f4:b8:a0:f1:92:84:4f:c0:21:c7:e5:28:
fe:37:82:cf:cc:4a:59:0f:e2:5b:83:a9:43:a2:fe:
db:9d:7a:17:00:77:4c:0f:d4:7f:a5:59:a5:75:98:
c9:3b:a2:cf:28:03:9b:e5:20:39:41:58:a8:f7:40:
6a:be:d8:25:64:5f:6e:12:0c:47:b3:67:84:9c:13:
13:79:e5:1d:79:0a:1d:d7:77:5c:19:ad:9c:0c:77:
95:08:8c:0f:4c:dd:35:2b:ac:9e:84:a6:c8:4a:43:
43:f1:68:4b:66:3c:41:18:36:be:78:02:46:38:73:
f6:35:f8:49:6c:dc:41:dd:43:bb:d6:42:26:21:2d:
1d:5f:e6:66:e9:2c:ff:39:f3:94:85:d8:3a:ce:65:
39:30:0a:fb:8f:c8:e9:08:c9:3a:7e:be:73:46:03:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:A3:8B:ED:EA:2F:A0:61:01:AB:36:ED:C2:0B:EE:0B:B2:29:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl
X509v3 Authority Key Identifier:
keyid:A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:17e0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c9:91:15:08:69:84:f0:b1:64:53:21:98:73:da:86:7a:1d:
e1:a9:d2:05:98:27:b2:2b:a5:40:d8:95:d3:d2:51:e9:1f:32:
54:15:59:63:42:e3:8b:4b:a0:c4:3a:51:b3:3b:a7:a9:1d:af:
af:26:ea:64:13:2c:3c:84:a7:cf:a9:56:90:64:7a:b0:42:69:
90:60:96:23:a7:18:b6:91:bc:b8:05:68:4f:5e:d4:81:bb:d5:
e2:06:56:73:87:ec:7c:11:9e:1f:ee:9e:aa:bd:e4:8b:09:7b:
b4:53:ea:86:3e:49:71:79:63:de:99:87:81:ae:db:3e:9b:9e:
5e:15:70:43:35:1e:ea:af:3a:81:a5:16:cc:46:95:f6:09:5c:
ab:0d:9f:d5:58:b3:07:69:32:59:c4:80:cb:f2:44:70:49:d9:
b9:d3:36:b9:13:da:fd:99:4f:92:65:05:e5:88:d5:79:a2:85:
fe:43:32:c6:cc:23:bd:ad:98:ca:bf:95:d2:bf:ad:89:74:f7:
3b:87:73:4e:41:47:0f:37:54:89:6e:a3:43:8c:65:8b:d7:7a:
be:e8:4c:f8:c0:f1:e4:d4:6b:f9:23:39:d5:3c:4e:26:62:d5:
45:b9:16:41:96:87:5e:e5:8e:5a:81:c4:77:36:6c:3a:81:57:
79:23:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:40:59 2026 by rpki-client