
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b12c8e3-0bad-3022-b7f3-6c460aea1845.roa
File: 7b12c8e3-0bad-3022-b7f3-6c460aea1845.roa (raw, json)
Hash identifier: MVnUzgLwZEYjw4yBadN9Pr2c04vYHB45VYZiw0wm2KU=
Subject key identifier: 3A:0E:F9:D7:05:E2:6A:C4:9B:8D:8F:0C:69:75:5F:AB:BB:FB:A9:8D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F498933869DD4DB40BE3E9900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b12c8e3-0bad-3022-b7f3-6c460aea1845.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 43515
IP address blocks: 34.1.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:33:86:9d:d4:db:40:be:3e:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7c18f634-d6d2-4485-8e7a-6c1c96f652ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:ab:a3:a0:f5:71:da:01:72:91:85:f1:df:
4f:2f:f1:71:34:fd:03:05:f9:aa:8a:4d:39:35:03:
57:c1:32:94:c0:65:03:65:5a:0c:0d:ff:4e:52:9a:
22:6b:db:57:34:8b:34:5d:15:c4:60:0c:b6:5d:51:
dc:5c:41:51:12:a2:c6:09:94:65:ed:61:41:0c:69:
7e:7e:34:e7:be:d2:33:23:ae:40:c2:fb:37:43:d1:
f2:21:c1:5f:66:cd:39:7b:c1:ec:87:76:bc:82:8f:
9e:ee:a2:1d:26:70:a9:3f:ad:d1:a3:1d:38:e0:1d:
8f:10:f6:cb:5c:47:e8:ed:56:ff:cd:6f:73:b4:31:
82:c9:77:e3:02:61:10:3b:d5:79:72:b2:80:b3:a1:
66:79:7d:a6:82:fd:fe:ac:30:78:06:fb:97:b4:2a:
c2:ee:60:92:e5:4a:8b:d7:49:27:00:d5:5e:1a:40:
fc:9f:1f:9f:d1:ee:5b:22:96:23:81:c8:ed:23:06:
d6:24:f5:34:b6:62:9c:0f:57:b6:29:33:17:c7:12:
2a:57:52:3b:c0:cb:31:86:42:d0:e8:48:1d:a5:90:
76:e5:de:1a:a3:0b:d8:60:00:21:e4:3f:2f:f0:40:
47:07:7d:df:25:96:2e:5d:c8:97:69:27:5b:8f:4c:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:F9:D7:05:E2:6A:C4:9B:8D:8F:0C:69:75:5F:AB:BB:FB:A9:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b12c8e3-0bad-3022-b7f3-6c460aea1845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:02:51:c9:f3:b6:97:22:fb:20:07:49:51:74:dd:90:fe:a6:
91:9d:a2:99:bb:6e:fe:64:46:40:32:84:3d:ca:6c:af:cd:c3:
48:3b:8f:0a:c1:5d:67:9e:d8:f3:db:6b:fa:65:f6:2d:55:fb:
9a:9b:2e:84:b2:30:9d:4a:5c:ac:7f:9c:79:4c:dc:97:4e:31:
b3:98:1c:34:de:68:e6:3d:64:e0:d5:38:3c:6b:d1:59:1b:67:
a8:55:af:43:31:b3:b8:db:07:9a:6e:c7:cb:58:b7:8a:77:d7:
8d:67:3c:c4:47:5a:fb:19:25:a6:2c:92:fa:aa:0a:c0:d8:af:
c1:33:4a:16:33:7c:b5:67:fb:4a:3c:29:66:05:89:22:c8:f1:
20:cb:7b:e6:23:86:eb:e4:87:40:47:68:02:ee:39:1c:89:cd:
58:38:43:db:ec:94:65:92:72:bb:8a:4b:22:e4:21:fc:d0:c3:
8e:07:a8:a6:93:ab:25:57:45:da:44:32:30:49:f1:93:81:70:
b9:03:84:aa:a4:c6:78:d8:97:ce:a5:50:70:d0:cb:c4:94:17:
33:08:51:c9:d5:cf:da:dc:12:c6:77:2f:9f:10:0f:eb:e9:67:
6b:63:bf:da:e7:d3:59:63:aa:24:b6:9c:29:47:60:49:f4:39:
cc:aa:90:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:32:12 2026 by rpki-client