
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fce5530-9359-3a7a-bfa7-5231663aa66e.roa
File: 8fce5530-9359-3a7a-bfa7-5231663aa66e.roa (raw, json)
Hash identifier: MTUuvpniq9NnKYIZiGTGk+KgcM/3c6ogZXt3i+3j9OU=
Subject key identifier: 64:65:70:1B:B5:84:A1:49:79:9C:64:43:EA:C6:1B:39:62:20:55:E1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584B9EEE1F310B64B5AAD68E4140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fce5530-9359-3a7a-bfa7-5231663aa66e.roa
Signing time: Thu 23 Oct 2025 20:45:12 +0000
ROA not before: Thu 23 Oct 2025 20:45:12 +0000
ROA not after: Wed 21 Jan 2026 21:45:12 +0000
asID: 396982
IP address blocks: 34.3.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:ee:1f:31:0b:64:b5:aa:d6:8e:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 23 20:45:12 2025 GMT
Not After : Jan 21 21:45:12 2026 GMT
Subject: CN=1167fa66-d955-44f3-8385-baa327f34aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:9b:4f:06:5c:69:87:40:9b:3d:50:75:7b:
e8:cc:fb:8e:02:a3:17:00:fb:af:f3:93:3b:19:60:
ae:c0:12:60:52:69:b3:34:57:55:dc:7e:03:7f:ad:
5a:15:33:e0:b0:37:ae:99:4e:bd:2e:ac:24:b4:2b:
2d:49:29:1a:75:ed:4f:06:bb:0e:e5:c7:f5:37:33:
fa:3e:e8:73:66:07:38:01:17:96:03:ef:81:b6:1f:
6c:e5:91:11:1c:28:72:a2:8c:f8:0c:ba:a0:6f:92:
16:f9:be:60:e0:d6:ea:57:e8:65:b1:e9:d3:4d:28:
b9:b4:4b:27:b1:bd:d0:ef:2a:9b:25:d8:b2:3c:62:
71:2c:f8:36:ee:74:45:ef:cf:fb:a7:7f:cf:18:e6:
b1:c1:68:85:37:38:75:40:3d:6c:79:92:01:98:f7:
59:b6:11:dc:cc:99:99:ce:5e:b2:f4:09:93:71:17:
8c:b9:85:68:b1:ab:9e:b1:5d:bf:a9:a7:82:91:15:
1d:47:b4:38:b4:b0:10:68:2e:6d:d2:ed:1f:33:b4:
c1:6f:ac:12:1e:da:cc:d6:56:6c:19:5e:a4:7d:4d:
5c:f2:c2:89:16:b8:9b:41:2c:10:62:1d:74:7e:4c:
2f:79:eb:72:0e:f5:b1:6a:8c:6e:f2:d8:0e:c0:ba:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:70:1B:B5:84:A1:49:79:9C:64:43:EA:C6:1B:39:62:20:55:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8fce5530-9359-3a7a-bfa7-5231663aa66e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:4d:69:b0:6c:cc:5f:fe:74:36:f3:ea:14:92:0c:17:00:c0:
34:91:3e:52:ff:d5:27:d9:0c:53:cc:2f:fd:91:21:42:bb:02:
72:04:3f:72:93:55:51:18:a6:5e:ff:7e:27:df:40:2d:00:ee:
26:af:a8:bc:3d:61:fa:aa:d0:41:cb:85:cd:36:36:82:f9:45:
c4:24:ed:81:a3:c3:b8:c8:22:60:59:c7:02:aa:15:7e:a8:5c:
20:7a:7f:41:20:47:f4:d6:59:e1:66:59:a3:b3:43:3c:3c:84:
94:3d:84:b7:fe:07:ab:b1:35:fa:c1:5e:54:b9:aa:ba:e6:e6:
6a:46:10:0f:35:94:64:83:95:98:53:8a:0c:2c:0f:ef:85:6a:
0e:c4:70:39:5e:21:89:38:bf:52:90:34:8d:a6:1d:38:3f:3f:
07:26:26:51:80:d7:e1:3f:f1:c8:91:a4:e3:e4:04:f9:47:61:
15:2d:53:c2:48:97:25:33:03:fd:c9:e2:a1:52:3d:cb:65:33:
86:93:c1:99:f4:35:b6:43:90:77:e9:c1:be:12:44:0d:e0:f3:
59:b0:9f:53:b9:94:96:6d:8f:65:41:e9:56:36:0e:05:6c:30:
92:a8:c6:8e:1d:19:c2:d9:85:10:06:61:d4:4c:66:b5:97:b6:
f4:75:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:01 2025 by rpki-client