
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa
File: 9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa (raw, json)
Hash identifier: MRN4Co0baBI2I3ldRSodSLFuTr/dIxzy1ffxGjDjt1U=
Subject key identifier: 0B:44:3D:9E:08:8A:97:28:97:37:60:BE:48:6C:AA:FD:BA:43:BF:BB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F497D1B82A8FC07B70B62AB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396982
IP address blocks: 34.100.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7d:1b:82:a8:fc:07:b7:0b:62:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3183fcd4-b0ec-4fdc-bf7c-6c393c001552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:81:0c:a2:a0:d5:ae:7d:c3:67:f5:7f:82:
6a:a7:95:d7:55:6b:df:13:b7:b4:99:50:fb:f8:50:
b8:c2:bd:2e:5a:b4:1a:60:76:ac:e7:d0:ae:01:c6:
24:35:11:cc:b9:e2:9e:fb:8c:80:af:08:a7:71:79:
86:fa:fb:a0:c1:28:b5:95:56:c2:56:bd:41:82:4c:
15:7d:b2:af:e9:6f:68:9d:df:39:ef:f0:67:07:b8:
52:ef:3c:37:1a:37:ba:7f:16:4c:d8:92:39:00:c5:
6d:46:29:f6:68:34:01:29:6a:1b:fd:5b:93:d2:1e:
4e:c7:60:72:13:70:39:4c:28:5f:f7:c0:1d:d1:92:
b6:64:fc:9b:45:f6:2f:66:46:a3:bc:0f:bc:9c:f9:
d7:4e:f8:31:de:86:3a:3d:07:d5:f9:d6:c3:ac:31:
0a:12:33:41:5c:a1:32:43:a6:89:1b:8b:48:86:48:
3e:72:9b:53:b4:5a:d4:d4:78:d8:48:72:cd:f9:58:
40:23:2e:d4:8a:bb:46:da:ad:27:b7:f8:36:78:bf:
3e:0c:3b:24:72:ff:43:6c:2c:99:bb:e0:0f:e6:e9:
48:42:99:f6:bf:34:40:c2:4a:c0:7b:d5:5c:a3:d7:
64:e8:45:1a:e1:1c:37:ce:5d:01:cb:d4:79:3d:0f:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:3D:9E:08:8A:97:28:97:37:60:BE:48:6C:AA:FD:BA:43:BF:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:3c:04:02:95:02:7f:43:7e:c1:b9:96:81:42:f7:81:20:0b:
c2:8e:6c:62:fe:d4:b8:c0:5a:b9:e1:a6:0d:bf:f7:d6:89:8b:
67:5a:c5:31:9e:e3:52:14:2f:19:e3:b7:45:68:39:e2:3b:f9:
c8:cb:80:b7:18:45:d8:d3:70:85:68:6e:c8:da:9b:85:97:ee:
80:11:22:fa:7b:f2:41:2e:50:51:56:04:92:9f:eb:c0:24:ae:
e6:78:e3:9c:be:b2:46:63:3a:50:8f:e8:11:3b:c4:a2:4e:53:
b9:cc:05:f0:a2:f4:0f:18:2f:0d:e9:49:de:67:b7:c0:41:97:
37:a5:a8:80:00:38:a8:aa:47:03:52:46:7d:a0:7f:1e:57:11:
5e:08:e2:8d:02:5c:05:99:d9:a7:59:5a:45:a5:0a:d4:50:ef:
0d:2c:dd:52:16:5e:23:0d:a5:d8:e5:56:ca:5b:f2:97:20:6a:
c4:18:56:77:df:b3:0f:b7:36:30:d2:2f:9e:d0:a9:84:17:37:
fc:2b:ea:fd:ad:7a:08:e8:a4:3b:18:06:ae:be:e9:cf:e9:2c:
34:e1:71:90:14:4e:4a:06:c1:bf:14:bb:75:86:59:26:f5:e7:
01:3e:0a:e0:38:fa:b2:42:c4:7e:41:9f:39:73:b3:92:01:9a:
9e:28:52:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRuCqPwHtwtiq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzE4M2ZjZDQtYjBlYy00ZmRjLWJmN2MtNmMzOTNjMDAxNTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBWBDKKg1a59w2f1f4Jqp5XXVWvfE7e0mVD7
+FC4wr0uWrQaYHas59CuAcYkNRHMueKe+4yArwincXmG+vugwSi1lVbCVr1BgkwV
fbKv6W9ond857/BnB7hS7zw3Gje6fxZM2JI5AMVtRin2aDQBKWob/VuT0h5Ox2By
E3A5TChf98Ad0ZK2ZPybRfYvZkajvA+8nPnXTvgx3oY6PQfV+dbDrDEKEjNBXKEy
Q6aJG4tIhkg+cptTtFrU1HjYSHLN+VhAIy7UirtG2q0nt/g2eL8+DDskcv9DbCyZ
u+AP5ulIQpn2vzRAwkrAe9Vco9dk6EUa4Rw3zl0By9R5PQ+6rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtEPZ4Iipcolzdgvkhsqv26Q7+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWE4ZjFiNmUtYjg4NS0z
OGU3LWFkZTYtZGRkYjhhMmRhNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImRoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB48BAKVAn9DfsG5loFC94EgC8KObGL+1LjAWrnhpg2/99aJi2daxTGe
41IULxnjt0VoOeI7+cjLgLcYRdjTcIVobsjam4WX7oARIvp78kEuUFFWBJKf68Ak
ruZ445y+skZjOlCP6BE7xKJOU7nMBfCi9A8YLw3pSd5nt8BBlzelqIAAOKiqRwNS
Rn2gfx5XEV4I4o0CXAWZ2adZWkWlCtRQ7w0s3VIWXiMNpdjlVspb8pcgasQYVnff
sw+3NjDSL57QqYQXN/wr6v2tegjopDsYBq6+6c/pLDThcZAUTkoGwb8Uu3WGWSb1
5wE+CuA4+rJCxH5Bnzlzs5IBmp4oUh8=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:34:35 2026 by rpki-client