
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
File: aa7a7287-b1dc-3e23-925f-c1a9de542259.roa (raw, json)
Hash identifier: ppFttFDtZO17P0q4X5mzHi00wL29QPFY/MqPJ7KbGzk=
Subject key identifier: 95:9A:02:7D:47:E1:7D:C5:DC:43:ED:87:7F:82:75:C0:6F:2E:56:D6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F497D2423AD46FCC953D62CA5
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 11344
IP address blocks: 34.104.39.208/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7d:24:23:ad:46:fc:c9:53:d6:2c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3a6d890e-8be7-449f-8e36-eb80717ce7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:8e:76:cb:fb:a2:26:b5:b1:86:87:5f:0a:
98:9d:86:40:7b:8c:ac:ef:b9:5b:f7:49:04:8c:a1:
41:3a:70:fd:97:6b:89:e5:5d:a8:7e:b9:22:20:45:
2a:6f:2f:15:8a:d7:76:8e:bb:bc:f7:cc:01:4f:10:
f6:23:94:57:a0:01:ec:38:d6:52:b4:8c:ad:3a:a0:
a7:eb:5b:e5:98:3e:17:30:e4:5d:a8:a3:22:92:38:
65:0d:6b:56:1b:13:21:11:8d:c5:d0:80:20:b4:7d:
a5:67:86:30:a0:19:f6:8b:21:65:94:64:f0:8d:a8:
95:8b:0f:f7:71:5e:1c:36:ef:d7:04:5b:1f:bc:5e:
ee:8b:19:57:05:22:57:ee:3d:d8:e6:56:39:d2:d3:
d8:59:a7:d5:4d:7c:fe:4b:0b:d6:a5:69:bf:0d:9f:
7c:67:69:85:64:8c:5e:93:9b:d0:83:f1:ba:0b:83:
f3:df:cf:fb:bd:c2:47:f4:1b:2b:d8:88:6f:a8:15:
f9:a7:eb:20:32:33:a4:09:d2:77:d1:22:9a:d2:98:
7e:78:2c:0f:9b:48:c1:7c:dc:e8:eb:46:f1:c0:5f:
83:c6:bf:ea:63:b0:22:8b:8a:36:a7:22:e4:67:13:
a4:bf:81:1c:93:4f:23:e5:7b:57:d3:3b:95:14:72:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:02:7D:47:E1:7D:C5:DC:43:ED:87:7F:82:75:C0:6F:2E:56:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.39.208/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:f0:94:10:0a:54:6f:fa:4d:0e:cf:ca:17:f1:93:b9:30:c6:
56:7c:16:7d:07:67:7e:fa:f4:63:46:dc:8f:cd:6a:46:36:a6:
3c:c5:df:35:9b:0b:ae:cb:be:d1:fc:53:5e:14:c9:45:6c:c0:
3a:ac:5f:05:aa:0b:a3:04:32:d6:46:1f:37:37:45:4f:8f:86:
16:8e:83:f6:12:55:2b:06:02:31:df:26:b4:d7:b7:c9:64:5a:
a3:72:f8:ff:bd:a7:40:c4:d5:dd:6b:b0:41:b1:d9:5f:86:7f:
06:76:01:7c:85:ee:ae:04:49:b0:2b:2d:b2:df:b6:89:af:0e:
cd:06:93:79:f4:19:6c:e9:70:84:95:c7:20:ef:16:bc:ad:a1:
33:2d:26:83:89:24:81:63:17:4a:61:93:cf:f0:5c:8e:35:17:
f4:3e:12:32:95:c9:50:4c:20:e9:b2:e5:62:87:84:5d:ea:66:
4a:8c:f5:1e:62:d7:51:6a:6e:71:b3:28:2e:63:09:c7:97:3c:
0e:ce:86:00:39:64:ba:f7:ed:94:77:84:e1:63:7b:d1:39:b5:
89:33:b3:d1:00:c8:6e:29:6a:7a:fd:4f:27:6e:79:fd:f0:59:
05:4d:46:88:39:ce:ad:82:36:25:af:02:14:be:18:2b:b0:21:
9a:dd:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:13:56 2026 by rpki-client