
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/27c7eae7-978a-361e-ae8a-9840893b0c62.roa
File: 27c7eae7-978a-361e-ae8a-9840893b0c62.roa (raw, json)
Hash identifier: JF6KRc7X44sCcVuCR/FpQH+3Iasbn9XrCZDa3a0DnGA=
Subject key identifier: 4D:DA:58:60:66:7A:6E:A1:A0:E0:71:F0:E2:44:E0:4A:37:99:BA:89
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F4328584CD13CA020085CBC28419D0B00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/27c7eae7-978a-361e-ae8a-9840893b0c62.roa
Signing time: Tue 10 Feb 2026 14:00:41 +0000
ROA not before: Tue 10 Feb 2026 14:00:41 +0000
ROA not after: Mon 11 May 2026 13:00:41 +0000
asID: 395092
IP address blocks: 216.120.200.0/22 maxlen: 24
2607:a680:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:3c:a0:20:08:5c:bc:28:41:9d:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Feb 10 14:00:41 2026 GMT
Not After : May 11 13:00:41 2026 GMT
Subject: CN=b01a8b3b-d684-4324-9e56-bef7b56d6c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8f:11:52:24:a0:48:d3:24:6c:df:3c:69:4e:
a2:a7:a9:b8:79:a2:27:0c:b6:09:89:09:d1:91:24:
db:13:f9:b1:e9:bf:d7:de:28:5f:a5:62:77:36:9c:
fc:b1:a5:a2:ca:32:c2:18:08:ff:a2:f2:1c:b0:c6:
2c:90:ad:4e:93:8b:2e:8e:cc:f4:3a:a0:c6:23:12:
dd:bc:28:3c:24:1b:8a:85:e1:ab:2c:d1:b1:33:b6:
14:80:a1:4c:05:85:5e:dc:45:de:29:98:e8:94:29:
a0:05:1d:ea:c7:82:c0:ed:b2:cd:0f:e3:5a:45:a4:
f5:8a:be:2c:ec:a1:d3:63:cd:d5:68:e4:ea:62:22:
71:3b:17:0e:1b:25:22:e7:87:78:66:9e:38:7d:75:
51:82:87:66:3f:de:69:2f:93:2a:98:62:0e:bd:78:
02:25:eb:c3:c7:77:53:71:54:6c:37:32:7c:ac:13:
1f:ee:bd:ec:3f:8a:09:f9:92:0c:23:de:5c:9e:73:
ff:91:fa:90:1b:2c:55:51:dc:80:b6:42:f2:94:b7:
ca:d9:41:96:51:0d:48:56:9f:c4:e8:00:73:c7:6d:
17:19:a4:79:8b:f1:83:62:81:a3:fa:e9:68:5e:c8:
99:da:92:99:26:58:0d:78:a1:92:83:1f:5a:0a:ee:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:58:60:66:7A:6E:A1:A0:E0:71:F0:E2:44:E0:4A:37:99:BA:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/27c7eae7-978a-361e-ae8a-9840893b0c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.200.0/22
IPv6:
2607:a680:6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:d6:8e:90:e5:cd:a7:a3:32:b7:ba:35:8a:e3:e5:ea:99:33:
a6:c5:d2:e0:7a:da:26:f9:80:48:36:19:1d:fe:26:c2:14:2f:
27:10:53:c7:47:ee:3d:4c:1a:a7:ae:8f:2c:26:5c:29:d4:29:
aa:ba:12:8e:02:8d:6d:a8:ab:a7:03:ed:40:3b:2d:65:08:d4:
73:67:af:a8:36:b1:e9:fe:f0:0e:eb:02:83:c6:5e:f3:a9:76:
81:1d:9f:78:66:29:83:5e:30:6b:30:5a:fc:b4:10:fa:e6:37:
ca:eb:7f:75:d3:ad:5f:c0:6c:45:79:e0:9b:70:6f:09:67:49:
db:7a:3f:08:47:42:72:4f:ae:87:38:7b:d7:66:ab:86:55:6d:
7c:c1:ca:07:aa:27:d3:2b:08:3d:1d:cd:50:ac:95:5c:a2:bb:
9a:64:ca:7a:6b:69:63:b0:5b:75:2c:99:96:2b:1d:6e:96:f4:
7f:02:8a:7d:58:59:09:28:a5:94:c7:d1:49:df:84:2d:e9:68:
4d:03:96:27:c1:fb:80:2d:3e:4b:7c:cb:7b:e1:85:2a:58:ba:
cd:a6:52:cb:57:80:fb:dc:1e:be:e0:0c:c3:5c:cb:f6:a0:78:
2d:c7:0c:8a:0c:49:0b:ad:1a:44:3b:92:6b:9e:83:c9:5b:cb:
d4:f2:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:53 2026 by rpki-client