
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef48aecc-f92e-32f6-9d77-504fa30589e6.roa
File: ef48aecc-f92e-32f6-9d77-504fa30589e6.roa (raw, json)
Hash identifier: UQd5M9iby1VQDDT4e3lD/hWh83E55ByxQjo+BxO9mvQ=
Subject key identifier: 7B:0C:E0:B3:FB:A9:10:E9:B4:F7:01:32:54:07:45:8F:0E:ED:D0:03
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA77272A39506B9A0D56C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef48aecc-f92e-32f6-9d77-504fa30589e6.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.32.0.0/11 maxlen: 11
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:77:27:2a:39:50:6b:9a:0d:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=7a2e70bf-3bce-4e61-99e6-ceb39c912adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:ab:e6:41:47:02:1a:88:b7:47:04:c6:e2:
55:53:ff:52:8b:af:e4:b7:ee:4c:e4:38:bb:4f:c0:
b6:ee:9f:60:19:c8:5a:32:c6:4f:de:e9:5d:2a:1f:
47:24:04:f2:60:37:0c:35:68:5f:5a:0c:91:da:5c:
5e:19:3f:46:d2:4a:a8:52:c0:cf:27:b8:9a:b8:5e:
53:f6:67:bd:b3:e2:6d:7d:94:e8:0a:95:57:ea:99:
89:0f:55:b9:ff:4d:76:17:26:57:39:bb:72:39:d8:
93:a7:38:50:e8:fe:e7:45:83:1c:b8:b4:74:c5:33:
bc:64:26:f3:d2:59:6a:d0:af:c9:e8:63:f0:79:b7:
0a:af:a5:04:7a:f8:c2:19:f9:b7:80:1c:c5:3c:f4:
5c:80:d9:96:03:99:ad:36:3c:f5:33:e1:87:79:4a:
5b:b0:52:c3:fa:78:36:fb:13:3c:8d:b5:b2:5f:f7:
db:9b:8a:a8:cb:25:5a:fc:d5:b3:ae:ce:d2:41:8b:
f3:f8:3c:a2:ee:0a:a9:f7:9e:3c:36:61:f2:b2:d9:
e8:91:93:9c:99:68:ef:4a:85:6f:15:71:64:1d:0a:
df:d8:92:f4:2d:fb:d3:c5:a2:94:b4:c0:74:f5:b7:
7b:a9:cf:1e:30:6b:60:89:0e:c3:56:05:18:b7:1d:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0C:E0:B3:FB:A9:10:E9:B4:F7:01:32:54:07:45:8F:0E:ED:D0:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef48aecc-f92e-32f6-9d77-504fa30589e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:9b:3a:07:55:65:c7:af:87:11:ff:a1:01:f4:0c:f3:b3:29:
92:36:ff:ef:68:ec:fa:e3:0c:c9:81:a8:7c:48:86:f7:3f:98:
b7:44:68:5e:0c:b1:32:6a:95:02:4d:4b:74:84:87:d5:52:76:
98:d6:e5:9a:13:9d:81:fd:f2:39:c2:97:e4:db:cc:67:95:bb:
46:8a:52:81:12:fe:3a:89:45:9b:51:1c:a7:15:7d:c1:90:a3:
0b:7d:0b:1d:01:a5:ef:8c:f4:b9:b7:5f:1e:8c:f9:4f:c3:11:
85:73:30:5c:76:7a:91:15:07:45:43:72:e0:97:b5:16:66:2a:
5f:95:59:25:fb:db:32:7f:67:ba:98:66:51:6b:d0:c9:54:cc:
30:fb:e7:14:aa:b6:c2:4d:fd:93:c7:bf:7f:85:ff:3f:e9:92:
f7:99:7b:67:cc:3d:a2:f8:74:c7:c3:a9:59:7e:9a:41:a3:c8:
4c:b7:c4:cc:1c:11:58:30:81:18:33:b6:3c:9f:d0:93:b5:32:
83:6a:29:06:cb:13:fc:43:37:78:ec:bb:74:5b:33:11:4f:76:
7c:a1:04:33:4a:66:77:c0:f7:51:76:bf:c1:1b:6a:c4:42:b2:
0f:f2:ac:98:df:7f:c4:80:3f:74:c0:ea:5e:b7:bf:93:6b:35:
a4:4a:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:00 2026 by rpki-client