
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b1c035-9558-350f-b03d-10c709da388f.roa
File: 86b1c035-9558-350f-b03d-10c709da388f.roa (raw, json)
Hash identifier: Sc8DxTF9yFLWkrwqlZmRCOuwPpOPYrgZSzVfB5HGUhM=
Subject key identifier: 35:D4:83:B7:55:67:90:54:30:A2:ED:A1:51:B9:13:52:2F:60:55:82
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA7EBE11B9F09AEFB83980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b1c035-9558-350f-b03d-10c709da388f.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.99.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:7e:be:11:b9:f0:9a:ef:b8:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=9718cb1b-9f15-452b-851e-e7acf4251f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:05:89:54:e6:c7:9f:84:4d:0d:ea:5d:11:
8c:e5:72:f8:3b:13:56:cc:63:81:70:ed:b4:c7:a7:
97:3f:cc:f3:3a:fe:83:f8:52:e6:8d:62:94:69:5a:
d2:fd:d2:0b:0b:2c:91:b2:67:4d:69:5c:d6:39:e8:
31:5e:c4:92:ad:fd:e0:7c:2d:e6:3d:e6:1e:7b:5a:
a6:6a:19:17:9b:b9:a3:50:d5:e2:82:21:40:2b:9a:
31:98:33:b8:9e:ca:f7:b4:fe:f2:5a:7a:a0:75:a0:
99:36:33:33:2b:64:a0:75:7d:aa:f6:5b:7d:bb:8c:
a5:16:04:84:3d:18:9e:ac:7d:f1:55:be:f6:a4:b7:
c6:4b:09:31:11:c7:d2:45:6c:35:4f:a3:53:9f:5c:
8c:2e:75:86:ac:01:1a:19:a8:43:c5:3c:51:37:5f:
51:ef:4d:8e:53:14:53:8e:d1:df:ed:5c:b6:b8:0a:
1b:9c:76:f9:ad:01:09:60:c4:5b:03:c7:77:7b:5d:
af:a8:6d:75:25:64:5b:ae:d3:39:d9:0d:1e:09:71:
bd:42:34:c2:d8:70:62:49:1f:4a:4f:c2:a4:39:4c:
d5:78:b2:08:45:e5:f1:4b:a9:e7:1d:9f:69:90:cf:
19:20:ba:c3:a6:79:a1:42:b7:fc:1c:05:15:9c:74:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:83:B7:55:67:90:54:30:A2:ED:A1:51:B9:13:52:2F:60:55:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86b1c035-9558-350f-b03d-10c709da388f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:bc:9d:26:17:d4:97:40:19:ef:17:44:2e:0a:10:37:ff:ba:
43:74:40:1f:b9:e8:cf:fe:a7:e6:dc:1b:1f:e3:d9:69:32:e7:
1f:c5:ed:d6:eb:12:8f:60:65:23:97:51:5c:12:d1:34:21:42:
bc:ba:b9:13:c8:cc:bc:51:d6:ec:e1:1b:e3:c4:db:94:a5:03:
4b:ea:7c:08:1c:0f:df:bb:f3:48:1d:6c:33:46:c0:f1:c9:f4:
0e:56:7f:b1:47:eb:b9:b4:83:9e:75:82:ca:8a:c9:11:c2:4d:
a6:0e:46:a1:78:ce:ff:43:5b:14:a3:c7:1e:27:f0:15:e3:17:
64:8b:0c:e8:dc:59:7c:58:4b:45:d2:57:aa:d1:75:5f:fa:5a:
60:81:4f:27:46:3f:85:89:67:30:86:a3:42:12:dd:01:35:33:
85:a6:00:03:08:bc:27:eb:d5:53:06:97:31:aa:1d:3a:4f:e7:
9f:de:9c:83:05:d9:9f:b6:ee:82:61:11:71:57:04:13:bb:98:
ba:0c:1a:a7:ce:4b:20:5e:08:81:4f:74:9a:cb:90:c2:32:ee:
c5:9a:b8:6b:ee:1d:92:53:6c:3f:e1:c3:0d:62:a1:0b:0a:50:
2d:14:22:23:ce:52:17:48:0b:15:9a:5c:7f:7f:6e:d7:9d:de:
18:52:77:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:50:54 2026 by rpki-client