
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa
File: 2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa (raw, json)
Hash identifier: y2g20+iy4ITWDaaAS9uLbsLJqPnAdHoViDJ+2vtTNIQ=
Subject key identifier: DF:86:D9:27:A4:72:BA:C8:F3:5D:DA:E6:14:3A:7B:2A:63:0F:3C:FE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EAA51C7B1D00879BB32FBB13C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 396982
IP address blocks: 34.66.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:c7:b1:d0:08:79:bb:32:fb:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=666e65c9-6557-4357-9805-f14a163ab31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:7e:ac:bc:f8:45:23:6d:8b:02:74:fc:01:
57:9d:39:94:f9:db:0e:d1:3e:a8:c9:53:13:c2:34:
dd:f7:fe:9e:62:12:23:65:cd:7c:ef:a3:e7:aa:7c:
13:86:f7:75:49:c8:17:52:10:bc:45:22:be:96:23:
a6:73:4f:14:a1:f6:9e:6e:5e:3e:79:35:9e:e6:ea:
5c:52:7d:79:20:bf:b7:fb:30:3c:14:1e:38:93:12:
4d:92:aa:a3:70:39:2f:c3:72:b5:6c:bb:e5:b0:41:
f8:ba:0a:b6:c1:aa:98:69:e0:50:7c:ab:c5:26:cd:
68:2b:c2:35:d5:75:03:fc:18:a0:70:0c:6f:f9:d1:
b4:b4:18:ec:49:5e:92:d7:42:c1:e0:db:dd:e2:63:
a5:10:c6:79:12:13:3d:71:f2:53:f7:f9:2a:15:28:
ac:4b:aa:af:d3:4f:ba:c9:f3:6b:c8:50:84:3d:34:
a0:dc:d4:85:87:ed:d1:bb:2c:16:5f:0d:e6:7d:51:
aa:bd:d7:6c:51:12:a6:ef:04:18:f5:1c:23:c7:72:
74:f9:d6:82:50:e3:da:ac:41:d4:45:b8:66:a6:db:
e7:d0:46:42:e0:46:b1:96:33:5d:57:5f:d1:e4:88:
7e:d0:e5:4b:d8:ef:a6:46:52:70:7b:fb:7e:b5:d2:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:D9:27:A4:72:BA:C8:F3:5D:DA:E6:14:3A:7B:2A:63:0F:3C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.66.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:22:09:2c:c9:88:19:9e:f0:dd:11:74:f3:57:78:80:51:d5:
8f:2e:59:69:d1:39:2d:79:1c:14:23:2d:84:83:b4:23:6f:50:
c4:b9:04:92:01:83:16:b4:e8:31:1b:ac:05:96:c2:01:7e:c0:
fa:18:c1:7a:b4:cd:f4:a6:cf:75:a1:a8:05:3e:94:07:c7:e5:
2b:f9:2d:cf:eb:1e:2d:5a:31:4a:d1:62:92:ad:fc:15:bb:3a:
43:7a:56:45:c5:eb:d7:8d:86:5a:d1:10:75:03:f4:22:3d:8e:
95:34:e1:a7:ca:e7:0b:0a:98:c6:31:24:22:cf:14:a8:81:65:
6f:c8:7e:ab:56:84:81:0d:3d:d7:0d:fa:43:86:01:74:a4:d6:
fd:f7:5b:e6:87:de:9f:da:dc:5f:32:95:31:a7:72:f5:ac:c1:
43:c0:a3:f1:4a:37:4e:05:2b:77:0c:4f:5f:0e:85:05:0e:4f:
31:0d:f6:2d:31:5e:db:64:6d:03:1b:4f:06:32:c3:58:66:96:
f6:08:89:80:65:49:73:7f:d6:25:88:1b:15:ba:df:79:25:25:
cf:01:79:e1:0c:62:92:55:32:ee:69:93:b8:3e:04:86:fb:3d:
e1:b8:86:c9:42:b3:28:2f:36:cb:60:d8:ef:7c:b1:d3:6f:39:
5f:38:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:34:12 2026 by rpki-client