
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/993518e1-afdb-339e-b129-b46a99defa23.roa
File: 993518e1-afdb-339e-b129-b46a99defa23.roa (raw, json)
Hash identifier: hbckbN6FO8ino9FNE/0icr7PO5SJoTIuEUx6U9krkb0=
Subject key identifier: 30:F2:3F:99:14:AB:63:9A:73:94:74:FA:C0:13:18:0B:78:B4:9A:BE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA43CB0EBD2424D0FEE900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/993518e1-afdb-339e-b129-b46a99defa23.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.78.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:43:cb:0e:bd:24:24:d0:fe:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=bf7287ad-e59e-49db-b95c-a860f66ebcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a0:65:4d:ba:d9:71:c4:0e:21:28:4a:21:bc:
fe:89:9b:6e:c6:da:b2:c9:e7:77:9e:ed:59:06:70:
64:aa:b4:89:5c:a3:5c:31:56:a7:69:5e:60:ea:0d:
e0:fc:5a:14:6d:a8:30:89:cc:dd:f2:a5:fa:90:c0:
de:db:bf:27:91:e0:51:13:33:f1:ba:84:b9:7f:e7:
66:52:06:bf:f7:cc:45:90:18:8a:0b:ed:ce:1d:49:
95:33:ad:b9:7e:d3:df:a8:49:ad:d0:49:9e:db:ae:
0e:2e:ed:0b:cb:a9:b4:c4:0f:27:34:a6:36:db:db:
a5:85:76:6f:24:1c:b8:2e:07:25:b5:08:4a:46:02:
7d:cd:63:7b:ea:70:dc:bf:ee:39:81:0f:59:ec:6c:
86:0e:f3:36:fe:48:be:6b:c8:a5:40:4e:d7:34:99:
0c:86:4a:96:2a:47:28:31:4e:81:eb:82:83:49:25:
d8:86:6e:37:51:d4:22:00:aa:5c:d4:73:04:a7:e2:
a4:cb:20:5e:34:c9:b6:27:4e:97:00:ea:3c:57:51:
df:07:71:ee:23:67:37:2a:ba:bf:c9:d5:9f:31:96:
b9:34:19:b9:bd:48:a9:bd:78:f0:e8:53:8a:44:2a:
a5:42:4c:0d:b1:46:24:50:fb:85:33:95:41:91:20:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F2:3F:99:14:AB:63:9A:73:94:74:FA:C0:13:18:0B:78:B4:9A:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/993518e1-afdb-339e-b129-b46a99defa23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.78.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c4:27:7a:75:9e:1a:13:f5:59:b9:7d:71:75:c9:9b:f9:47:
3c:7e:72:f0:98:7c:19:fc:02:f5:26:91:f3:fa:0e:e1:26:c0:
f7:0d:4d:91:7d:e1:c8:6b:35:49:e2:92:81:a4:d1:6e:43:06:
f5:de:c7:b6:58:50:0f:0d:32:34:31:16:4a:4f:8f:27:35:6d:
e8:f6:c6:a2:e1:27:f1:fa:d5:78:2b:74:15:c6:8b:ea:e8:20:
1d:2e:60:92:ee:ff:18:50:7a:87:ce:e7:45:eb:91:2a:ac:ce:
be:47:b0:f0:1d:05:b4:09:d8:22:b9:fd:08:38:d7:04:b8:d7:
8d:bf:ea:14:28:2d:73:83:66:6f:e6:e4:1a:1d:fe:df:7d:ff:
d1:98:90:e0:e4:07:81:63:52:5d:37:71:33:fa:e0:8a:6f:e3:
96:ea:1e:62:54:68:5c:50:70:c6:b7:4f:ca:f0:5d:b5:7c:94:
a0:3a:aa:7d:bb:db:8f:8c:56:78:06:4a:05:76:c9:57:4a:88:
90:4b:9c:45:1a:5a:2d:2c:22:cd:3f:0e:ce:80:f4:e8:1b:1a:
75:17:fa:e0:8d:a1:78:68:7e:58:08:d7:41:12:86:56:b7:ae:
78:d1:a0:ad:a2:52:a2:e7:8e:cd:5e:9f:5c:67:41:8f:42:14:
16:a6:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:50:57 2026 by rpki-client