
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa
File: 3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa (raw, json)
Hash identifier: bFTsLLUMKfM+do1hjKw4BQJsctjNFYBLV4uonaZ1cFY=
Subject key identifier: 76:39:CA:86:24:CA:FA:91:4F:9B:AA:BB:EF:1C:B2:15:73:2D:49:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D1F4A510F30EE705836047900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 396982
IP address blocks: 104.196.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:51:0f:30:ee:70:58:36:04:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=b31d4cdd-a884-4102-a72d-eb0f522f2984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:b7:5c:7b:fd:f1:92:68:c4:94:bb:68:46:
e7:85:e0:fc:98:98:50:89:c4:d8:57:13:8d:36:89:
5a:22:92:d3:59:8a:53:5c:3a:f6:96:1b:46:c8:81:
a1:bd:97:be:c4:e7:7f:14:8f:3f:0e:ea:4a:47:3c:
29:b2:0a:db:96:7c:47:e1:c0:ab:8b:d8:c7:26:da:
91:0e:83:2c:91:1e:f6:44:56:81:4d:f0:e7:15:cf:
9d:15:8c:f9:41:2f:aa:60:72:a0:99:2a:e9:00:9b:
13:fb:cb:a7:df:5f:9f:98:1f:f3:40:74:f9:be:21:
ed:2a:fe:4a:b6:24:63:21:91:4d:26:4f:d9:ac:7c:
66:c6:c2:d4:b1:3b:41:ac:63:bf:59:3e:49:47:97:
31:6d:c5:d5:1e:a5:58:83:4d:35:2f:8e:99:6b:34:
f7:bb:ab:3d:d4:fe:b6:91:07:37:33:38:8b:90:39:
38:cf:2c:5f:d4:02:15:67:6e:47:5c:59:fe:f9:8a:
92:ec:0e:f5:a2:22:ff:7c:87:39:76:e2:d2:35:22:
bc:4a:2f:9d:8b:e5:ff:13:42:2f:31:b5:8a:97:a0:
ab:c3:c1:38:c7:b6:62:40:93:29:18:78:4b:8e:c3:
e4:4b:e7:3d:b1:a8:1c:b1:fd:27:ff:5d:1a:63:42:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:CA:86:24:CA:FA:91:4F:9B:AA:BB:EF:1C:B2:15:73:2D:49:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.196.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:ed:8b:c9:13:69:20:03:27:8d:a8:a9:49:90:da:d5:3d:30:
59:81:03:17:a4:8e:f7:9f:78:db:63:a8:82:5c:72:60:d0:54:
c8:74:0f:bf:4e:b1:95:14:67:41:2c:53:52:a0:ba:a4:f1:51:
2c:c0:ca:a6:af:24:27:08:9c:83:a6:ff:fb:d4:3b:f7:88:78:
a3:9b:30:55:be:ea:92:05:d0:c1:2d:c9:ba:b9:59:88:b0:52:
1c:34:d3:53:be:bd:23:c9:35:52:34:db:90:81:f3:3b:cf:ae:
55:f6:d3:42:37:6c:77:a3:29:24:71:b5:43:f6:1b:61:75:f6:
b0:73:8e:69:3b:1a:c3:4d:e2:6f:e9:ed:94:45:84:8c:6f:d2:
0a:a2:d9:09:0e:27:68:60:fe:81:a7:e0:cb:75:17:6c:7b:9f:
0c:7d:da:df:4b:ee:c5:13:05:e1:fe:89:81:57:56:3b:c8:ee:
48:3d:ff:ce:58:18:bc:cc:89:c4:f5:47:3f:ad:09:f9:e1:20:
00:3f:fc:87:b6:6b:f3:e5:f6:ad:ab:34:c0:ca:80:89:4c:d4:
bb:69:8d:4c:1d:21:fa:00:24:29:a4:89:85:a4:19:3d:e9:44:
b2:20:18:f7:99:3a:b9:cb:54:cb:6b:95:f9:9a:e2:23:b4:55:
cc:5a:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:21 2026 by rpki-client