
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e48c63fc-7f6c-3ec7-8139-1d510b0635b2.roa
File: e48c63fc-7f6c-3ec7-8139-1d510b0635b2.roa (raw, json)
Hash identifier: IUGJHwq3lK4Ij/0kclyKWfLK05YpDSHbD/s8k9uWKA0=
Subject key identifier: 69:94:2B:44:10:14:C3:16:17:E7:13:23:B3:7B:0D:D9:D2:B4:4D:AA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AAB10987FAE1EFB84F2A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e48c63fc-7f6c-3ec7-8139-1d510b0635b2.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.158.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:b1:09:87:fa:e1:ef:b8:4f:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=08111fa5-c49c-4b47-bd82-5b31a90fbe98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:c5:ad:bd:13:62:2b:55:04:84:73:30:8e:12:
26:40:aa:e9:6f:bc:31:1d:41:21:d5:75:39:63:b0:
13:66:a4:73:84:8b:b3:6d:c8:72:58:31:5b:a9:7a:
b0:05:d0:4a:e5:bc:d3:0c:67:1a:b7:b9:76:07:86:
9b:eb:e9:bf:63:cd:9f:58:de:f8:e7:2e:43:21:a2:
7b:66:27:22:56:5c:07:0f:de:41:23:53:5e:63:b7:
cc:67:13:95:fa:9a:56:36:71:35:a1:0c:c8:d2:9d:
39:6c:cb:31:82:43:40:87:25:f6:e4:aa:b1:11:7e:
ba:1e:c7:df:0d:08:22:b8:ea:b1:81:28:f0:21:fd:
a6:b3:72:8f:77:b7:5a:5d:9e:f5:e3:6c:52:81:da:
f8:b5:00:04:70:b1:4a:13:72:f3:c1:f6:3a:43:c6:
ef:8d:c4:1f:96:cf:3d:8e:5e:7a:ee:23:8f:67:fd:
9f:7e:13:b9:b5:e0:b4:23:3b:cb:31:2c:7d:b8:de:
0c:e1:e0:dc:12:a0:06:2c:8e:81:f1:bf:bd:6b:13:
2d:c8:dd:9b:7f:16:00:fe:08:7d:9f:11:45:38:c8:
f0:c7:b0:c9:f6:08:4d:53:43:84:3c:70:9f:34:2a:
3f:11:dc:ff:f0:02:71:72:d7:6c:7f:a4:42:ff:f4:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:2B:44:10:14:C3:16:17:E7:13:23:B3:7B:0D:D9:D2:B4:4D:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e48c63fc-7f6c-3ec7-8139-1d510b0635b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.158.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:25:12:bd:30:a5:c3:d0:1b:88:38:fe:41:ce:68:b4:69:c0:
6a:3c:d3:67:79:8a:2d:a1:c4:40:ee:03:b5:04:fe:2f:00:c1:
e9:3f:43:b2:ee:12:d7:24:98:77:cc:20:4c:64:c1:dd:3f:1f:
6e:2d:7b:09:bf:47:08:2c:ac:2f:52:98:a8:75:fa:b1:41:ff:
51:65:86:b2:a9:2e:30:20:37:5c:13:8c:6f:29:71:7d:d7:9e:
fa:08:77:64:7f:89:fa:be:0c:10:43:9f:9b:d0:05:40:85:c5:
66:75:fa:f9:7b:ea:13:b1:54:11:0c:d0:99:1f:34:83:a1:5c:
8f:4a:2b:46:c8:2e:40:f6:9e:68:45:18:7a:2c:b8:8f:2b:84:
30:19:96:c2:06:a8:0a:da:43:bf:01:6a:76:8f:fa:3f:1d:20:
a7:53:88:19:ab:81:3b:2e:e3:c0:2e:b5:36:77:21:11:ba:40:
c1:bb:54:34:2c:18:b6:a0:62:ad:38:8a:38:87:52:1a:7b:63:
84:1f:9b:53:d9:9f:2c:8c:58:96:23:76:79:f8:12:63:5a:37:
82:2c:06:8f:aa:8e:02:c2:66:5f:b8:c9:37:dd:3b:c2:4e:9d:
37:c4:74:aa:b7:45:ac:0c:92:9a:37:36:bd:c9:04:94:de:04:
fc:8c:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:27 2026 by rpki-client