
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa
File: aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa (raw, json)
Hash identifier: 0w9DhSH5veU7keFAkv0oCgYswdcQsd7wpWRHyjvUwB0=
Subject key identifier: EB:03:7E:A4:3B:5B:4D:D8:6B:91:10:F3:EF:31:AB:28:DC:18:3F:B4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D2D3F7AE4385B784C216F6B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa
Signing time: Sun 15 Mar 2026 13:00:41 +0000
ROA not before: Sun 15 Mar 2026 13:00:41 +0000
ROA not after: Sat 13 Jun 2026 13:00:41 +0000
asID: 396982
IP address blocks: 34.154.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2d:3f:7a:e4:38:5b:78:4c:21:6f:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 15 13:00:41 2026 GMT
Not After : Jun 13 13:00:41 2026 GMT
Subject: CN=6b506f04-864a-4242-a07d-2b696e001040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:91:91:69:0d:ed:45:d9:32:9b:1c:86:3d:
21:ec:ff:08:4c:68:e7:2a:ca:6a:16:aa:97:4a:09:
e4:b2:ec:37:91:57:55:91:30:90:ab:f7:1f:1c:6b:
26:50:08:2a:c0:66:4f:46:d5:3b:eb:51:3e:c6:60:
fe:71:5f:37:ef:77:b8:d1:4f:3a:59:14:9d:49:f0:
63:4d:ce:02:a9:ec:d9:ab:18:e4:b3:3e:66:3b:aa:
63:f5:52:af:2b:d7:0a:8e:4b:e0:86:6c:af:9f:89:
9e:74:5c:9c:8c:1e:d4:2a:ef:2a:bd:8c:5f:27:20:
c0:c5:d3:33:eb:5a:ed:15:d2:f6:0b:96:44:6d:40:
06:5d:64:ac:c4:c8:8b:73:2f:b7:64:4a:d0:39:74:
4a:ef:98:bd:18:10:52:b2:5d:b1:73:1c:ae:5c:0d:
31:64:f1:00:8f:60:ea:48:e2:dd:d9:58:e8:fa:8e:
69:50:0c:8c:c5:6b:f2:fc:d6:98:79:d5:b5:11:57:
23:0f:98:e1:9b:94:54:2d:18:50:9f:fa:18:a3:1d:
2b:89:26:e6:9f:c4:d4:fe:8b:dc:c0:fe:4d:dc:21:
9a:3c:c0:82:df:22:1e:51:2c:2f:d3:bb:7d:b0:60:
6f:07:d9:cd:24:a6:61:a6:98:0f:c0:03:94:fd:a7:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:7E:A4:3B:5B:4D:D8:6B:91:10:F3:EF:31:AB:28:DC:18:3F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:7d:57:60:8f:61:b6:8c:a3:4c:5a:12:ea:04:3c:33:1f:dd:
9d:a3:72:3d:8e:bd:9e:c5:32:9e:3e:a5:8b:17:7e:83:9b:67:
8b:97:85:56:45:27:d5:57:27:19:70:30:e8:ea:07:e9:73:49:
1f:51:a6:d9:f8:5e:c7:0f:44:13:33:e4:64:05:8d:7b:d9:01:
c3:67:79:3a:ac:ca:27:fd:3d:a0:7c:68:93:30:b4:d9:e8:8e:
62:aa:84:40:24:33:88:42:15:2d:21:b1:d2:ef:77:b8:c7:2d:
1b:32:41:33:d5:54:aa:a7:01:8a:1b:cc:01:bc:1c:5f:36:d5:
43:e4:81:21:11:41:88:10:e2:81:7c:f8:3a:00:1d:2a:52:71:
6f:c3:46:32:f3:ca:9f:03:9d:de:e8:b6:3d:41:88:15:eb:db:
4e:43:b7:50:46:a5:6a:ee:1f:0e:48:85:d0:fc:17:36:3b:3c:
a5:d7:f6:fe:ad:e1:46:51:c5:2b:05:67:1e:af:a8:68:c6:a2:
57:19:b3:26:f4:cb:fd:44:81:50:cf:a6:54:d8:8d:61:d2:d5:
17:04:f1:5e:da:b9:c2:37:5b:de:7c:4e:de:2c:45:f4:45:1c:
bd:8c:55:b3:64:d7:37:85:6a:aa:ed:3c:74:84:eb:b7:41:92:
11:6a:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:17 2026 by rpki-client