
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/152abf28-4443-35a4-a740-5039a110d384.roa
File: 152abf28-4443-35a4-a740-5039a110d384.roa (raw, json)
Hash identifier: +RAWBeklBTd4j8gvQEuRU6nmENRmnoY8h/RC/Hx37N4=
Subject key identifier: B9:E3:C9:89:D1:07:5C:DD:7A:AF:EE:A5:82:3A:05:A1:E2:8B:B8:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D300A2332A7AAA86D87CB0780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/152abf28-4443-35a4-a740-5039a110d384.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 19527
IP address blocks: 34.1.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:23:32:a7:aa:a8:6d:87:cb:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=829a0a94-8002-4cf2-82b2-fa5f8a9776e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:8a:75:ab:34:bc:f8:fe:de:ee:02:e7:09:
35:2f:f3:50:bf:3a:a6:f6:d4:2f:38:a5:95:b6:69:
e8:59:70:63:a0:f4:cb:b9:43:69:77:3f:a2:75:aa:
92:20:86:6b:c6:32:5c:28:02:24:76:6c:7c:e9:66:
14:e2:f6:e9:d2:38:63:cc:d0:a0:72:a0:6d:b6:49:
ed:33:17:7c:4e:1d:8a:31:1a:ba:cc:c1:d4:ed:b1:
84:78:c1:30:de:e9:70:81:bc:cc:0a:df:a6:67:a3:
b8:b8:e6:be:be:8d:23:e1:48:09:9c:c9:a2:f5:83:
f6:72:ac:6a:7d:b7:87:61:f5:d6:d4:ff:2c:a3:ae:
a7:ac:d7:9d:e2:b1:c0:98:a2:28:8b:f1:05:e1:4f:
4c:a0:c4:9e:f3:f5:08:a5:5d:89:cc:66:0d:67:7f:
9b:44:fd:28:0f:fb:f3:80:9e:b9:a8:fb:35:04:39:
47:a8:3c:38:c0:ee:6f:61:13:c6:c5:7c:cb:5a:8b:
41:75:f7:ab:44:53:ae:bd:c7:80:fd:15:8a:9a:4b:
02:b5:77:60:ff:3e:04:0a:3a:f4:0e:06:d1:0b:ba:
24:25:cb:44:dd:f7:41:57:3e:27:38:a1:d5:1d:69:
90:b7:61:fc:eb:53:c6:f9:8e:b4:b9:62:52:3e:c7:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:C9:89:D1:07:5C:DD:7A:AF:EE:A5:82:3A:05:A1:E2:8B:B8:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/152abf28-4443-35a4-a740-5039a110d384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:1b:28:4a:6a:fa:7f:1e:53:1e:bc:c2:e9:c2:be:e1:fb:90:
15:26:b0:07:8a:bc:23:8d:8c:7b:a1:29:b5:ac:93:3d:30:e9:
ac:e0:56:c4:40:69:7b:f6:c2:35:87:4c:b9:84:67:60:5d:a8:
b8:77:cc:c5:c7:35:48:7f:44:f6:13:af:74:a7:bd:0f:8f:54:
0f:1f:2c:00:e4:77:b4:35:d1:34:35:7b:1e:0e:df:1c:6a:39:
16:96:0b:a7:3e:55:e8:00:61:1a:af:75:7e:11:03:c6:2e:b2:
5b:22:15:85:10:ee:f9:99:ed:24:eb:62:39:79:42:64:a1:f7:
c6:da:f4:1a:c6:c9:3c:b4:38:ea:0b:3a:0a:55:03:be:a8:42:
f8:d3:1b:40:9a:d8:30:dd:d0:ea:63:7f:e5:c0:a9:54:9b:e2:
4a:55:cb:6f:90:ad:cf:ce:1b:c0:e7:b6:a5:d6:58:a0:9e:22:
e0:fd:a3:8a:79:82:ed:89:df:60:05:d3:15:4a:42:bf:08:54:
6c:44:53:b8:92:f1:b0:44:72:ab:02:a5:af:46:ef:66:48:41:
db:77:3a:b4:ef:93:d6:2e:f0:80:fd:03:2a:b9:f3:2b:ba:0e:
87:87:30:90:ea:39:e7:1d:53:c7:86:9e:39:49:7a:17:eb:ea:
5a:17:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:16 2026 by rpki-client