
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa
File: 33ce8402-8a94-3eab-b082-24afe422f714.roa (raw, json)
Hash identifier: UINCURTK/H8FR+DkzcBewRLYFehYBKZv02WvVxJjgf0=
Subject key identifier: 92:DC:1F:FE:8A:1F:E5:EA:3D:7B:83:F9:92:0D:93:B7:DE:17:A5:2E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DCCB4BB2D5EAC13DD00C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.68.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:cc:b4:bb:2d:5e:ac:13:dd:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=80ee3299-9d30-43a4-a197-4873822b9f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:9e:bb:5d:14:a3:42:f4:f3:23:f4:37:74:
85:f1:f9:7e:96:3d:fa:5f:1d:13:b1:a1:36:ec:89:
b9:44:be:f6:f1:a1:a0:c3:bb:cc:59:ca:1a:6d:60:
e8:08:ea:13:92:18:ee:55:13:a8:79:62:f2:38:3c:
7a:a4:14:1b:74:11:9b:b8:b1:d0:92:35:1e:de:a4:
ca:cd:00:c5:52:9b:46:1d:6e:4b:ef:ca:73:3d:96:
08:5a:ba:93:9f:7f:39:0e:86:aa:03:8f:b7:05:6e:
d4:13:fb:bb:d8:fa:cd:7a:36:9b:6a:e7:c2:b2:f8:
b1:14:8f:22:8c:ff:db:83:79:51:ec:b3:a1:35:29:
b1:78:fb:da:cc:72:06:30:d1:ba:f8:ad:81:47:85:
4b:f9:5c:61:eb:88:98:c0:74:65:f6:86:dd:1a:2b:
d1:af:9a:06:c0:0a:b0:48:ab:d4:3a:e2:22:1a:78:
93:70:97:51:2f:98:29:92:7d:c2:fe:05:81:2d:89:
1f:44:c3:ab:33:d3:c4:1e:5e:ae:67:f6:92:87:eb:
96:79:55:d7:1a:dd:a2:56:fb:b3:70:f9:14:cb:2c:
43:b2:7c:9e:6f:15:1a:ec:e4:e8:56:ba:99:c4:5f:
29:44:b0:21:48:68:11:2d:0d:db:c4:19:ee:3f:46:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:1F:FE:8A:1F:E5:EA:3D:7B:83:F9:92:0D:93:B7:DE:17:A5:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:f2:85:b0:74:1d:df:49:f4:39:14:f4:9f:31:40:c3:02:7d:
ad:14:31:35:bf:c0:71:e2:32:1a:93:a3:4c:28:d7:25:7e:cd:
f9:fa:f1:a0:2e:66:71:69:00:82:12:9c:45:44:30:c7:6b:79:
e8:2b:c0:e6:4c:ed:de:99:af:b1:77:81:fb:c2:43:12:2a:7e:
27:0d:9d:5e:73:09:13:1c:83:58:50:68:bb:f1:64:3c:42:4b:
7d:b5:25:0f:f3:04:8a:02:da:b6:a4:77:e9:a0:46:a8:0e:5f:
8e:c2:8d:6e:ae:05:87:db:c3:ae:25:38:70:4d:c9:55:3a:17:
08:af:26:91:cb:a5:0c:25:df:9c:b9:54:9e:ca:99:9b:4e:2c:
13:f4:c9:73:a9:8a:86:df:f0:86:20:df:6b:df:92:2c:16:db:
ba:c6:fa:09:43:7b:f6:ff:d7:b5:c8:8d:d8:72:2c:51:61:81:
2a:80:24:6b:9a:4a:b1:ca:05:c8:64:2d:08:f0:4a:a8:32:a0:
b7:c4:b1:01:e9:60:7e:5a:37:0e:f2:e4:dd:e0:cd:62:a5:e2:
17:11:f4:e1:b3:45:87:0a:45:d6:4c:f2:99:e9:00:67:17:a8:
d3:8b:7f:b9:06:2b:1c:30:8a:3f:5e:5f:64:08:b5:23:32:35:
98:59:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:35:36 2026 by rpki-client