
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa
File: 95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa (raw, json)
Hash identifier: pIq2L2qRjLW0zjVQmXVX/p1JZCGxHNR76bCEjh5syX0=
Subject key identifier: F6:7B:8F:B0:C4:87:07:82:9D:E9:13:4D:23:C0:A6:FB:66:79:16:D4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EAA51F9E93D119DBE1AFACA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 396982
IP address blocks: 34.148.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:f9:e9:3d:11:9d:be:1a:fa:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=ca6b3e0c-8bcd-48f8-bf00-04fe6c5072d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:0a:a6:31:4d:b4:87:72:0d:b3:d4:07:f5:
e8:86:b0:97:8d:7c:58:05:7d:ad:0d:7b:5e:8d:ba:
a0:0f:23:f2:bc:99:73:a4:24:13:14:86:7c:99:53:
6b:80:bb:51:d1:a8:a5:b6:f2:f0:73:b3:09:88:10:
92:60:80:2c:03:4d:df:08:7a:3c:fe:1f:86:05:42:
6f:be:66:ef:f7:c9:b0:fb:86:7a:0d:77:d1:61:cb:
6a:87:51:78:77:1e:df:f0:30:4c:c5:25:40:97:11:
22:e4:a7:c6:e0:d6:79:cb:7e:2c:7a:2a:b7:96:94:
a4:56:75:28:6b:51:49:bc:2a:32:ea:10:97:03:28:
65:e8:d4:5a:21:d2:38:2e:a9:cb:ed:75:17:29:aa:
3b:9e:47:81:0a:32:6b:0d:83:3c:41:b8:87:4a:74:
79:4e:1c:7a:fa:21:ad:a2:d0:cb:9b:a9:29:05:1e:
2b:c8:2b:ac:9f:14:16:5c:15:1f:02:c4:a7:52:50:
de:14:5f:28:9e:fe:30:3b:59:89:07:02:cb:39:46:
55:c5:c1:ae:95:9f:5e:c8:3d:70:ac:02:46:d0:bb:
63:fe:f1:04:98:d4:c5:ac:af:b3:52:d8:53:86:31:
63:8e:07:56:37:62:97:b8:cc:f6:0f:40:14:a6:0d:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:8F:B0:C4:87:07:82:9D:E9:13:4D:23:C0:A6:FB:66:79:16:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/95a0e401-f72a-3d8d-8c77-b73de06a52f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:18:76:85:12:e7:2e:a1:7c:93:42:2d:37:c5:9f:a0:7b:ac:
37:d5:82:8d:ef:13:cd:8b:87:06:07:de:1f:b8:0a:c7:26:a0:
05:07:81:76:6c:a4:b3:ab:5a:30:1e:32:3f:77:32:88:6e:18:
ad:5a:bb:25:94:f3:9b:06:a9:c9:f7:16:ce:17:d5:73:a5:19:
de:f8:f2:c6:52:bd:d1:3a:ee:09:63:19:1f:e9:c7:15:29:46:
de:dc:78:bf:45:e2:3b:89:1a:d5:81:89:71:fa:8e:39:bd:d9:
64:0b:34:44:0a:f2:7d:00:ad:09:86:72:10:df:28:aa:17:f9:
bc:5c:00:74:a5:09:e3:24:f0:89:a6:73:c2:bf:6c:e1:f9:8e:
13:1c:fc:4a:d2:29:46:59:98:a8:57:2d:7b:f9:bd:17:3b:53:
5d:d5:b7:27:4e:c9:76:d0:28:27:75:62:5b:75:7d:58:b1:db:
0f:28:f3:46:9f:72:53:2d:d2:d4:ce:a2:1b:ab:c8:4c:12:d3:
d8:a4:15:fd:b1:d8:6d:72:10:5d:06:49:8d:d6:58:9f:75:4a:
a6:5e:68:f7:9f:2c:3c:e8:81:60:a4:2a:c3:07:da:f7:cf:fa:
6c:fd:10:17:5b:d5:b1:0e:83:6e:0b:40:84:96:bb:be:a8:03:
eb:1f:98:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUfnpPRGdvhr6ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
Y2E2YjNlMGMtOGJjZC00OGY4LWJmMDAtMDRmZTZjNTA3MmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6AKpjFNtIdyDbPUB/XohrCXjXxYBX2tDXte
jbqgDyPyvJlzpCQTFIZ8mVNrgLtR0ailtvLwc7MJiBCSYIAsA03fCHo8/h+GBUJv
vmbv98mw+4Z6DXfRYctqh1F4dx7f8DBMxSVAlxEi5KfG4NZ5y34seiq3lpSkVnUo
a1FJvCoy6hCXAyhl6NRaIdI4LqnL7XUXKao7nkeBCjJrDYM8QbiHSnR5Thx6+iGt
otDLm6kpBR4ryCusnxQWXBUfAsSnUlDeFF8onv4wO1mJBwLLOUZVxcGulZ9eyD1w
rAJG0Ltj/vEEmNTFrK+zUthThjFjjgdWN2KXuMz2D0AUpg3VDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZ7j7DEhweCnekTTSPApvtmeRbUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTVhMGU0MDEtZjcyYS0z
ZDhkLThjNzctYjczZGUwNmE1MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpTQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYYdoUS5y6hfJNCLTfFn6B7rDfVgo3vE82LhwYH3h+4CscmoAUHgXZs
pLOrWjAeMj93MohuGK1auyWU85sGqcn3Fs4X1XOlGd748sZSvdE67gljGR/pxxUp
Rt7ceL9F4juJGtWBiXH6jjm92WQLNEQK8n0ArQmGchDfKKoX+bxcAHSlCeMk8Imm
c8K/bOH5jhMc/ErSKUZZmKhXLXv5vRc7U13VtydOyXbQKCd1Ylt1fVix2w8o80af
clMt0tTOohuryEwS09ikFf2x2G1yEF0GSY3WWJ91SqZeaPefLDzogWCkKsMH2vfP
+mz9EBdb1bEOg24LQISWu76oA+sfmLo=
-----END CERTIFICATE-----
Generated at Sat Aug 8 01:53:44 2026 by rpki-client