
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa
File: bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa (raw, json)
Hash identifier: LQfGGXr43NpNGr7c8xPGkUEm4s6pZRlesaZCml9b25c=
Subject key identifier: AD:2C:D9:C2:1D:2C:95:A4:85:6A:B1:B3:61:A5:D2:FD:AF:63:5A:AB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EDDF74991F107177DD3DB1300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa
Signing time: Mon 17 Aug 2026 13:00:11 +0000
ROA not before: Mon 17 Aug 2026 13:00:11 +0000
ROA not after: Sun 15 Nov 2026 14:00:11 +0000
asID: 19527
IP address blocks: 34.4.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dd:f7:49:91:f1:07:17:7d:d3:db:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 17 13:00:11 2026 GMT
Not After : Nov 15 14:00:11 2026 GMT
Subject: CN=a71180dc-c348-49c3-9697-4dbd071f4567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:c2:81:cc:cb:c4:be:4c:1d:9d:35:40:7a:
70:13:94:01:2a:3f:10:1e:dc:55:46:be:ee:d1:68:
54:93:c2:3f:e2:16:ec:17:97:8e:76:be:6c:cd:8f:
de:58:6a:09:b9:95:ed:cc:f2:78:2b:67:25:b9:4c:
63:8f:dd:48:82:9b:71:23:5a:b7:01:f6:92:82:dc:
13:33:09:fc:a6:00:03:1c:31:1b:55:4b:db:91:44:
83:13:5e:07:74:8a:70:fd:d4:40:e9:fb:60:f6:d7:
3d:c8:51:a7:9b:15:02:ff:9b:c6:a6:16:30:95:78:
89:83:d9:16:c0:8d:28:73:aa:93:01:55:86:11:ee:
3e:79:6a:ec:92:38:39:27:9a:e9:07:e3:7b:0c:23:
1a:9c:98:83:55:65:ab:dc:5e:3a:01:24:36:b3:81:
4f:b8:5b:05:7e:3b:65:d0:de:67:59:39:52:1c:16:
a6:ca:7a:52:30:42:3a:0d:19:c3:17:36:91:0f:bf:
94:2b:8b:3c:2a:ef:8f:2a:e9:46:f6:8f:25:2f:a1:
9f:71:d5:f8:f9:a1:0c:d1:4f:08:07:90:f0:ce:ec:
e8:a9:9a:de:e4:ac:fd:34:b9:2c:fd:0a:75:ff:d9:
91:d5:2a:ae:f9:c0:ab:03:7b:f0:e2:6d:d3:65:89:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:D9:C2:1D:2C:95:A4:85:6A:B1:B3:61:A5:D2:FD:AF:63:5A:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bce7f7d8-52d7-316b-bc69-0ccc8eb50229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.4.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:71:0a:52:04:ed:a4:a5:b2:ec:3c:72:e3:7e:2c:fa:27:8d:
12:ce:2c:80:25:61:ed:0b:78:ef:53:a1:b1:09:25:79:8f:c0:
36:cf:9c:d7:b3:72:e8:cb:a5:cc:84:d5:9b:2d:ec:89:c5:ca:
94:d2:b4:dd:4a:68:90:17:89:9e:18:c9:2b:91:05:10:6b:bd:
a0:57:6d:b8:d0:28:0a:8f:22:b9:69:35:fa:47:d5:f9:d3:6e:
33:c9:35:1e:9c:41:c9:8f:91:80:f6:a0:2e:56:84:8b:c1:e6:
80:55:c4:fc:fa:85:55:1d:f7:e0:e6:c0:23:23:82:85:e6:7b:
fc:d9:fe:92:59:3d:53:e3:5a:a9:56:71:de:7f:2f:88:51:dc:
eb:b8:28:59:36:88:f7:2b:19:8d:26:18:9a:e8:ea:84:f4:84:
0b:10:08:05:5b:da:dc:39:f0:20:92:c2:23:64:cf:af:6d:09:
87:02:c9:20:b6:f7:ca:30:22:28:e9:7f:00:d2:bc:50:88:c5:
82:f0:1e:4b:1e:de:bc:f6:b0:9e:af:a3:99:27:72:bc:e6:c5:
7b:02:6d:bf:1a:dd:18:45:36:57:40:dc:aa:40:4f:20:cd:1a:
6b:ac:c4:b6:15:00:14:c0:63:7f:73:9f:34:42:72:35:ed:cf:
39:84:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:38:37 2026 by rpki-client