
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa
File: 967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa (raw, json)
Hash identifier: +ay7F/ZMZ50FHTxoS2f1vJ+wh6FiJHDa+uy1PD0c9O4=
Subject key identifier: FB:53:BA:7D:DA:4A:D1:EE:32:54:82:70:4E:62:62:B4:56:80:C4:89
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA4ACB3AAA3A9BD47A37C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.87.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:4a:cb:3a:aa:3a:9b:d4:7a:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=499c5b99-3de3-4cb8-87d1-2d3c78a4d985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:14:ca:5e:96:2d:48:7f:0e:82:b1:58:49:
7e:1e:5a:77:07:52:35:71:7d:39:39:46:62:92:06:
c4:66:7c:b2:32:d4:6c:05:c2:e0:db:cf:10:38:11:
11:31:81:c1:ab:3c:77:14:fd:d9:ae:33:83:a4:41:
83:dc:e5:7f:b2:6b:b5:79:69:22:dc:0a:41:40:26:
b4:15:61:14:17:6b:00:24:38:48:fc:11:2a:63:0a:
f9:a5:55:8d:d2:eb:68:5d:a5:67:c7:a7:27:c1:22:
26:a4:e8:38:f3:d1:25:4f:87:5a:57:8b:94:b2:6f:
e5:c5:74:4d:f0:51:4c:01:9d:2a:8c:77:42:c6:72:
ff:eb:48:70:d7:a5:b7:ef:e3:4e:46:22:3d:be:d1:
7d:55:0c:14:11:d6:9e:cb:21:52:9e:4d:08:77:b1:
f4:2a:9f:22:00:87:44:6e:34:b9:d4:7e:b2:2c:a9:
4f:f1:12:96:2e:cf:b7:a3:00:68:47:0b:55:f2:7b:
ed:58:d2:c0:2f:f4:97:77:f9:92:1d:ce:ba:07:3c:
01:d3:df:82:27:bf:21:78:e1:d3:3f:59:d9:65:ba:
1c:04:06:d0:50:ad:4d:1e:b4:30:84:b1:16:f7:07:
25:b6:36:18:04:36:fe:57:ea:a6:9c:aa:0a:32:60:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:BA:7D:DA:4A:D1:EE:32:54:82:70:4E:62:62:B4:56:80:C4:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:53:a2:e2:25:4c:1e:54:36:4b:01:a1:0b:1d:f9:90:f0:4c:
fa:ba:87:62:01:91:05:00:4b:49:63:4d:71:5d:7b:09:4d:43:
4e:32:f6:01:58:b7:3a:5c:8b:bc:df:3c:63:6d:e3:57:8c:61:
3c:1e:b7:4e:40:72:00:9d:8a:65:26:04:1f:19:de:4c:83:c7:
11:17:03:56:34:8c:92:1a:01:4e:36:0c:2c:ba:36:7f:45:0d:
f4:2c:14:e9:d3:2f:c4:0a:63:8f:06:c3:d1:a5:d9:43:f6:6b:
65:13:56:45:92:f2:02:6f:5c:61:65:df:a9:3f:11:65:29:19:
10:9e:1d:f7:e6:2d:16:06:14:da:7b:ff:f2:99:c9:f0:42:41:
ad:e7:30:ca:20:ba:bb:5a:62:bd:13:63:f2:21:57:6b:5d:fb:
c6:c8:9b:05:c9:41:4f:c5:3e:b2:58:67:7e:77:82:5b:5a:14:
8a:8f:65:89:32:08:d5:c8:95:4d:7a:71:0b:c5:60:50:13:3b:
4a:a1:dc:f6:92:59:66:03:5a:6b:2e:5f:68:96:22:f1:71:9e:
5a:ac:13:f1:7a:1f:73:00:48:5c:a7:a3:bc:fe:bb:5e:0f:0c:
b8:7f:fe:dc:82:df:47:fd:cf:16:27:6c:cf:ea:dd:19:b5:09:
7d:4d:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:22 2026 by rpki-client