
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ebec59-eced-3b68-9dca-582dee546885.roa
File: 66ebec59-eced-3b68-9dca-582dee546885.roa (raw, json)
Hash identifier: vfuN+gpQ5K+bt8J0h+2wPZ5sPKoTO/zrZIV8Hs99D18=
Subject key identifier: 9E:13:4B:60:5B:CB:08:04:97:9D:A4:8B:9F:83:90:F3:0D:6E:10:22
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4985215D335A379AB9F0B680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ebec59-eced-3b68-9dca-582dee546885.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 11344
IP address blocks: 34.104.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:85:21:5d:33:5a:37:9a:b9:f0:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=109c37dd-8820-421f-878d-4194002867c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:9e:2e:95:e0:4c:04:47:c7:70:55:65:d3:
23:4d:12:dc:97:70:e2:b3:ea:72:1a:c4:fb:a0:20:
18:ef:79:56:a4:90:bf:53:b7:bc:9b:a5:39:a8:44:
36:db:9a:9b:ca:df:e5:a5:0c:7f:59:cc:68:c7:77:
b2:1c:9b:b4:9a:7d:6a:23:4c:85:bc:24:9b:5e:95:
df:e1:d9:63:94:e2:3b:92:ae:fb:f6:4f:4d:ee:fa:
be:b7:fd:55:f5:23:af:b8:17:9a:27:39:e1:f6:47:
f3:24:2f:ac:46:6f:e7:07:c7:35:32:c2:ae:c1:5c:
89:bc:17:f4:50:b6:60:33:1c:a2:51:48:30:44:65:
5d:b7:55:6e:bd:7c:3b:b5:9c:14:d4:03:7e:ec:b3:
06:66:a5:f8:b5:a2:f6:89:dd:fb:f4:17:db:2d:a3:
4d:e8:80:0a:b3:30:77:83:01:f6:6e:23:55:a3:03:
b3:89:cf:87:c2:fb:ea:49:96:e6:74:69:f3:24:96:
95:a4:f3:a2:02:42:b3:3f:66:bc:da:91:0a:eb:2c:
09:0a:95:ee:e4:77:61:33:26:08:96:4c:04:e2:9d:
9f:33:51:50:7e:c9:75:0f:d6:26:df:43:46:5c:b9:
fc:72:e2:8a:12:97:03:08:62:97:63:18:1a:8b:40:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:13:4B:60:5B:CB:08:04:97:9D:A4:8B:9F:83:90:F3:0D:6E:10:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66ebec59-eced-3b68-9dca-582dee546885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:7a:ae:c2:b0:93:bd:9d:f5:61:34:5e:d6:70:98:b0:f1:6b:
79:50:95:17:b1:24:0a:a5:7b:ce:8a:2b:43:71:80:a8:6b:9e:
92:b3:3c:92:fe:78:18:5a:24:32:cc:ac:8b:33:27:5f:8d:84:
50:71:5f:f7:03:37:c4:46:68:50:c1:26:0b:79:54:94:65:27:
b8:71:dd:8e:3c:22:59:19:29:83:2e:98:f8:71:cc:a0:6a:73:
e3:c4:da:45:24:dd:13:f6:f3:85:65:af:69:20:0a:44:50:b0:
eb:39:9d:2c:0a:b6:fa:6b:64:50:be:0f:90:56:2a:96:22:c3:
fc:93:0e:e1:21:f7:30:4e:14:f1:46:92:d7:6f:3d:fd:34:8d:
d5:db:9c:f8:98:83:12:18:a4:74:8e:17:1a:08:22:5c:29:43:
e4:6e:bf:9f:61:6a:70:cd:61:5f:07:6b:17:70:99:f4:6b:cc:
f0:a3:49:a3:16:6c:fd:25:78:01:f7:15:4a:e8:86:84:9d:6c:
50:12:17:16:98:64:a7:7d:8e:44:ae:c6:1f:0b:bf:6e:d0:57:
86:f0:52:14:bf:36:db:bf:a6:4b:d0:ee:d5:87:7b:c6:e8:05:
36:9d:2f:ab:da:25:2d:54:cf:ab:19:c4:f4:53:ed:78:21:e2:
61:39:35:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSFdM1o3mrnwtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTA5YzM3ZGQtODgyMC00MjFmLTg3OGQtNDE5NDAwMjg2N2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHieLpXgTARHx3BVZdMjTRLcl3Dis+pyGsT7
oCAY73lWpJC/U7e8m6U5qEQ225qbyt/lpQx/Wcxox3eyHJu0mn1qI0yFvCSbXpXf
4dljlOI7kq779k9N7vq+t/1V9SOvuBeaJznh9kfzJC+sRm/nB8c1MsKuwVyJvBf0
ULZgMxyiUUgwRGVdt1VuvXw7tZwU1AN+7LMGZqX4taL2id379BfbLaNN6IAKszB3
gwH2biNVowOzic+HwvvqSZbmdGnzJJaVpPOiAkKzP2a82pEK6ywJCpXu5HdhMyYI
lkwE4p2fM1FQfsl1D9Ym30NGXLn8cuKKEpcDCGKXYxgai0DpsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4TS2BbywgEl52ki5+DkPMNbhAiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjZlYmVjNTktZWNlZC0z
YjY4LTlkY2EtNTgyZGVlNTQ2ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZ6rsKwk72d9WE0XtZwmLDxa3lQlRexJAqle86KK0NxgKhrnpKzPJL+
eBhaJDLMrIszJ1+NhFBxX/cDN8RGaFDBJgt5VJRlJ7hx3Y48IlkZKYMumPhxzKBq
c+PE2kUk3RP284Vlr2kgCkRQsOs5nSwKtvprZFC+D5BWKpYiw/yTDuEh9zBOFPFG
ktdvPf00jdXbnPiYgxIYpHSOFxoIIlwpQ+Ruv59hanDNYV8HaxdwmfRrzPCjSaMW
bP0leAH3FUrohoSdbFASFxaYZKd9jkSuxh8Lv27QV4bwUhS/Ntu/pkvQ7tWHe8bo
BTadL6vaJS1Uz6sZxPRT7Xgh4mE5Neo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:43:24 2026 by rpki-client