
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d04eca6d-63a0-3962-bc79-233542d8511a.roa
File: d04eca6d-63a0-3962-bc79-233542d8511a.roa (raw, json)
Hash identifier: JKVGVsdrauCFDzaVhgGvnFK75NKmLPF1hP/uy3djEis=
Subject key identifier: E6:3E:98:D3:79:86:3B:9C:08:27:87:1B:17:4C:8D:A2:78:DC:CE:A8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA9D3E7CCBBDCE0406F780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d04eca6d-63a0-3962-bc79-233542d8511a.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.67.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:9d:3e:7c:cb:bd:ce:04:06:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=a0c77c15-a255-4b6e-a1e6-80b8a16531f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:05:53:40:71:61:70:d7:79:a8:85:08:d0:
63:13:c5:eb:c9:29:57:35:fa:5c:7c:97:70:e4:51:
aa:6b:81:b9:de:af:24:54:d0:fd:6d:c7:a2:8c:8c:
7b:e3:8e:ad:c0:7f:e7:d7:6c:d7:51:50:ec:8e:12:
10:c9:b4:d8:77:c6:01:53:a9:ea:5b:30:88:e0:4a:
18:c2:ee:40:9f:d2:9e:da:5b:ba:d7:29:93:fe:70:
cc:0d:46:be:60:d2:41:e4:70:f9:c0:aa:07:a1:b2:
9d:fc:0f:55:f8:3d:b8:4c:17:7c:89:74:d7:ec:05:
7f:4c:ae:7f:fd:8a:da:56:7e:a4:d7:67:ec:e5:b7:
e5:e6:d9:31:3d:ea:a3:c1:bb:1b:da:a3:5a:35:5f:
93:34:2a:94:b9:71:d7:62:a9:7d:5e:64:5e:0d:9f:
f4:f0:97:14:68:a7:7d:b8:54:d6:77:6e:e1:2f:eb:
e3:d5:9b:d5:83:5e:24:85:1b:a2:a8:f2:8f:22:85:
9c:a1:93:f9:2d:fd:f6:af:1b:bd:e8:7d:69:0c:da:
58:60:74:14:47:07:2d:50:96:24:5e:b9:3c:18:6e:
7d:d7:5f:5d:bc:8a:a5:d5:b1:d1:fa:f9:8f:0f:b3:
c7:da:b1:7d:49:8e:a4:87:1d:fe:3a:e3:c9:97:77:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3E:98:D3:79:86:3B:9C:08:27:87:1B:17:4C:8D:A2:78:DC:CE:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d04eca6d-63a0-3962-bc79-233542d8511a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.67.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ec:31:5b:e9:b7:9b:39:9d:04:00:ab:12:51:75:04:2b:69:
dd:d6:f7:7d:6a:e3:0f:fb:f2:53:36:ef:0f:4d:1a:38:30:92:
8d:58:87:89:cd:61:94:cc:69:83:11:80:43:96:f5:5d:36:64:
53:9a:6e:ca:f4:03:26:54:72:b9:20:09:05:28:6d:c4:5a:75:
bc:64:32:bb:d8:5f:08:0d:94:5e:fc:80:b6:da:ca:8b:32:dd:
a1:92:b5:42:f4:9e:6d:02:a7:4f:f4:81:37:57:1b:eb:ff:11:
b3:39:07:c2:f5:7e:46:a4:84:a6:7f:dd:5c:1d:97:52:b4:6a:
b0:70:92:70:17:4a:ea:8b:ba:35:d2:a8:93:41:b0:70:15:11:
a2:34:31:5d:04:bf:a3:c1:b2:b4:96:b5:df:7e:10:2b:6b:8f:
0d:fe:93:e5:60:1f:1e:36:5c:6b:a5:2f:73:67:23:be:ae:3c:
9c:2e:a1:c8:d8:f2:aa:73:1c:ff:86:3c:4e:f7:46:90:2d:1d:
30:6a:5a:6e:ac:2a:fd:a3:6b:5c:26:d4:72:6a:05:9b:e6:cb:
74:ca:c0:93:cd:d2:a2:72:8f:f6:b3:fb:56:d2:0b:5c:af:b3:
f3:2e:17:0d:47:ff:2f:af:45:23:2b:16:24:81:d1:58:1f:3f:
86:f5:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:54:18 2026 by rpki-client