
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa
File: dafc535e-769c-3c75-884c-f554eca0ad04.roa (raw, json)
Hash identifier: +4t7PAwYxYKJQWtjDwjH8p0AZa++/KV8r+D1n5FQXTw=
Subject key identifier: 1F:5E:00:85:4B:C6:81:14:6C:E9:88:67:79:D5:BD:33:6A:00:8F:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584CEC871EBFB26B9D16E465E4E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa
Signing time: Fri 20 Feb 2026 08:37:39 +0000
ROA not before: Fri 20 Feb 2026 08:37:39 +0000
ROA not after: Thu 21 May 2026 07:37:39 +0000
asID: 396982
IP address blocks: 34.153.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ec:87:1e:bf:b2:6b:9d:16:e4:65:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 20 08:37:39 2026 GMT
Not After : May 21 07:37:39 2026 GMT
Subject: CN=9c015cf6-9ea4-450a-82f0-d4d113a59fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:98:da:a0:dd:5c:ff:4e:df:64:70:fc:d1:
68:98:08:f6:f7:f2:b0:62:f2:67:ea:2a:ed:62:b8:
12:a7:52:78:d6:67:bf:a7:58:b3:f5:24:1b:3c:ba:
bb:a5:14:82:a9:10:61:1d:e3:94:62:11:3e:b9:02:
d4:65:38:1a:3a:f8:e0:b5:ae:1a:c5:09:02:db:8d:
d5:80:6b:9a:bd:59:9f:3b:57:d6:6b:c3:e9:19:24:
7d:f3:62:7c:de:93:d4:ec:f0:a3:61:33:b1:21:cd:
80:0b:c2:c1:db:9b:21:7b:5e:0b:b5:bd:85:33:13:
8d:ec:cf:b3:61:5b:5f:ab:ce:c6:22:84:53:cb:54:
63:49:63:9f:69:91:91:95:4d:79:e6:aa:29:fa:6b:
c7:47:1b:22:4d:92:c9:8b:e2:b1:05:e7:92:9f:dd:
a5:be:08:0d:db:67:08:da:9f:fc:f4:85:9c:e6:99:
90:6f:dc:bc:99:3f:91:ab:1a:2e:35:b5:b1:95:8a:
30:69:51:b8:bc:cf:95:4b:5a:11:ca:da:ef:ab:7c:
04:80:f5:98:de:24:5b:95:d2:7e:f0:92:63:15:12:
bd:ad:99:6a:77:75:33:6e:6d:46:bf:d7:ef:83:5e:
a9:e8:f6:90:c5:5f:b5:00:22:d9:09:36:d6:e1:c6:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:00:85:4B:C6:81:14:6C:E9:88:67:79:D5:BD:33:6A:00:8F:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.153.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:3c:45:0d:73:36:bd:60:84:70:42:fc:74:3b:5e:a7:c8:2a:
0a:6a:08:df:7a:b6:bb:02:7e:6e:ae:a4:b1:19:4b:ef:92:9e:
df:f7:d2:d2:68:eb:23:de:b0:99:5b:f6:24:4a:fd:f3:a4:80:
6a:a6:7f:26:3b:8f:bd:6a:de:d0:5d:4b:25:5d:d1:05:98:51:
d7:ed:f3:28:4f:be:29:6c:68:bc:e5:f3:38:8e:b2:c1:4d:87:
59:e4:8a:41:f4:b5:48:52:3c:dd:47:7f:47:2e:45:1d:75:cd:
33:c0:69:a7:b3:c9:6a:d7:b2:99:c6:c1:0b:ef:d3:5a:43:c6:
e1:3f:38:81:9c:58:e9:3f:33:42:18:70:f5:8a:a2:b4:46:4f:
78:11:9d:64:31:43:49:ba:a7:4b:35:cc:19:58:7d:9f:29:37:
fd:e4:09:b5:a1:79:b4:41:88:4b:ff:ea:a3:49:42:26:91:35:
3d:49:8e:02:42:4a:9e:70:dc:92:9b:38:ff:6e:c8:e5:d7:68:
3d:56:b3:c7:e1:0c:c6:96:91:23:da:53:08:e3:cf:d7:f6:a7:
7e:7a:5a:e1:83:d2:32:e4:b8:02:52:10:01:83:c8:cd:69:2a:
a8:f8:71:2a:54:f9:55:73:34:23:af:e8:76:cf:71:21:d4:aa:
06:93:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:10 2026 by rpki-client