
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa
File: ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa (raw, json)
Hash identifier: ls5FdwcRIrqdyJjQq5RdL9+2CovaojOWvtAx3VrlXwA=
Subject key identifier: 74:F6:3E:72:98:F0:6F:2D:F2:26:5E:28:F2:BC:39:CC:6F:8F:E5:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DCED9E2D089E7B12A71C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.68.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:ce:d9:e2:d0:89:e7:b1:2a:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=0f0fca79-d83e-435a-897c-a0db3b91590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:78:d6:74:7f:54:ef:29:cf:3b:f5:74:9c:
cc:4f:d6:ae:f1:d7:3f:32:36:f5:44:e4:44:77:5d:
30:68:ff:69:7e:34:b8:25:85:be:af:79:6e:9f:b9:
8d:c5:fb:5b:1d:db:89:6c:8c:a7:4b:10:c6:d2:cb:
bd:9c:26:d4:2b:c0:e0:e8:67:36:cf:41:94:65:20:
1f:15:e1:29:dd:a5:26:d4:12:17:4d:a5:a0:e6:14:
aa:7b:da:f7:61:04:59:e5:91:03:a6:17:48:82:bd:
a8:42:c0:4c:e0:93:ce:15:13:c1:8c:1c:f7:f7:62:
4a:66:21:b6:7e:01:0b:fb:1b:45:89:9b:15:d6:ec:
8f:79:3d:21:a3:4e:d7:d6:d3:3a:52:50:c0:08:af:
a3:65:4b:b3:67:41:a6:a9:81:32:ad:02:36:d3:ac:
1e:d5:fa:3e:7c:36:76:fd:b5:d9:8d:03:0f:ac:28:
98:92:f8:de:11:68:9b:13:35:b2:bf:82:1d:19:94:
87:af:a2:bb:e5:36:a5:67:92:33:2c:95:66:b7:fc:
79:ef:f3:fd:eb:88:70:c5:de:4a:2a:e6:2b:89:aa:
f9:71:9a:75:0a:04:40:8c:e0:50:e2:57:f9:09:f9:
dc:fd:fa:89:5d:2b:48:2d:71:0b:5b:c4:a4:f8:04:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:3E:72:98:F0:6F:2D:F2:26:5E:28:F2:BC:39:CC:6F:8F:E5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:1d:45:c1:2d:a9:b4:2b:58:e9:ff:bc:46:cc:f2:09:ce:9f:
f6:2b:08:fe:6e:e1:1f:31:df:ef:bb:fc:90:74:82:51:7e:9e:
4f:4d:93:e5:83:bb:9b:b7:1c:a4:10:01:c4:ec:bf:6e:85:41:
3a:83:1d:f6:2b:fd:fa:12:20:49:a1:01:0b:4b:6c:a5:b8:ca:
0d:86:bc:2c:58:b1:c1:5f:c1:9f:d7:ca:61:46:4a:23:f3:fd:
67:98:8e:6d:ad:53:74:7b:62:0d:d8:27:3a:4f:ae:c1:5a:f2:
c7:a0:5d:50:f3:de:67:50:3e:a3:a7:b6:3c:e2:5d:b7:ea:e4:
16:9a:23:6c:29:ec:0b:e1:c9:b5:b8:2c:22:df:c4:14:cd:49:
74:23:96:d8:cb:a1:13:22:d1:7e:8d:a3:6a:d4:88:fb:6a:b7:
22:ad:c5:81:05:78:8a:00:1c:2a:13:b9:4d:9c:1c:0d:ab:57:
f6:83:a4:45:a1:1f:8b:55:84:96:0e:a1:ef:90:dc:1b:e2:0b:
b4:16:47:d4:eb:fe:d7:2c:fc:64:af:ea:e7:bc:26:54:44:23:
0b:c9:42:90:19:c5:00:b3:d7:e8:e6:c1:db:ae:e1:cd:64:e3:
0c:e7:d9:82:99:da:de:1a:35:f5:de:c0:88:9c:e0:9d:ab:d3:
18:c2:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:19:15 2026 by rpki-client