
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38760918-c6a3-31b2-914e-fd1a8ca01ec1.roa
File: 38760918-c6a3-31b2-914e-fd1a8ca01ec1.roa (raw, json)
Hash identifier: zXd/ApAmAAcuHJAzf713UfgAdHwstNBbF1klNU39un4=
Subject key identifier: EC:ED:29:A1:A8:4E:D2:07:7A:6C:D8:A9:B5:90:11:87:7E:C1:E2:1F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F498502C4EF411BAC28671800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38760918-c6a3-31b2-914e-fd1a8ca01ec1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396982
IP address blocks: 34.100.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:85:02:c4:ef:41:1b:ac:28:67:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8ef685d4-3b20-4743-aecb-8f1f247befcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:5e:14:88:6d:40:1d:29:9b:93:5e:a8:74:
e6:39:93:c5:a6:d9:f1:62:64:5c:9a:0f:79:19:75:
36:d9:5d:23:42:41:88:30:f7:12:f4:a1:70:5d:0d:
2a:3e:67:30:bf:bf:cc:0f:7f:73:02:82:36:48:5c:
b9:2f:bb:5c:cb:4e:b2:74:73:c8:d0:c9:a5:ab:a5:
ac:85:5b:c8:63:1c:3c:b7:bc:b3:ba:12:66:4e:59:
d8:16:f8:23:47:e9:85:d8:dd:fc:e7:aa:59:2f:81:
4e:15:e3:46:df:28:48:85:d9:d5:ab:96:9e:d7:a8:
34:8b:5c:98:b6:1d:6e:7d:df:b9:44:18:59:b8:de:
1a:e5:89:74:cd:f8:b8:8b:ad:41:da:3d:f4:c0:cd:
64:75:99:ab:39:59:70:1d:5e:9f:0d:46:26:a5:fc:
38:4f:6f:34:52:98:a0:c7:21:d3:d8:ee:b2:a6:48:
de:44:10:12:3e:94:14:84:85:03:75:15:0e:d1:80:
cd:38:ff:78:10:87:96:e6:9b:bd:16:48:d0:b0:26:
60:f2:a9:b2:97:03:51:76:9a:87:63:0e:d1:9c:76:
5a:ae:31:99:89:aa:66:3b:4a:c5:ff:98:41:6f:9e:
77:66:ae:54:44:b6:25:d0:4c:52:a9:dd:d2:24:20:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:29:A1:A8:4E:D2:07:7A:6C:D8:A9:B5:90:11:87:7E:C1:E2:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38760918-c6a3-31b2-914e-fd1a8ca01ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:3c:79:b6:2b:01:77:2c:76:da:57:5b:0c:11:0b:92:04:cf:
a2:c9:7f:43:71:0c:0d:db:6b:fa:0a:b2:48:32:30:90:43:dd:
7d:4a:56:76:76:cf:82:01:55:3b:22:96:d6:65:50:67:46:84:
4b:3b:4b:2b:3b:57:ba:99:3e:35:07:dd:03:80:6d:1c:e1:8c:
d0:09:09:5c:ae:fd:28:66:bf:38:7d:c7:1e:d1:77:9b:06:68:
38:5d:71:23:c1:d6:23:85:4a:08:8b:80:7f:7e:61:be:73:e3:
42:4d:c9:5f:59:41:b0:96:f0:82:9a:ca:6a:2c:ad:ee:56:70:
cb:f0:fb:07:c0:37:5c:fd:84:cb:2f:3d:9a:2a:43:68:25:e5:
c3:85:d0:0d:07:ec:26:ae:4c:70:f5:21:d8:49:5e:ce:ea:a9:
21:01:18:2c:b9:49:38:0f:de:b6:19:03:b8:5c:89:f4:db:82:
92:a0:8c:8c:84:31:d2:d5:67:1b:e0:7b:48:48:43:b1:c6:29:
a7:ec:23:00:ce:a7:99:cc:60:b7:60:24:22:cf:bf:8d:95:d5:
2b:a0:c3:1f:58:6f:2d:ec:7b:61:53:90:c7:50:09:2d:84:09:
c2:66:7b:19:67:ac:c9:6c:42:b1:24:ce:0f:5c:87:72:de:9e:
3e:8d:47:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:58:26 2026 by rpki-client