
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e34b8fa0-695b-380e-8ec9-0dfba3b88d94.roa
File: e34b8fa0-695b-380e-8ec9-0dfba3b88d94.roa (raw, json)
Hash identifier: /nruoVBDE2bjoQc+yluYhxqT7dzwFeQnG5dfe8UGNmk=
Subject key identifier: 88:3C:80:D6:06:8B:B8:D9:04:BF:01:AD:2D:EB:A5:54:85:7F:97:EE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DB4ECF10F5AF240D79800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e34b8fa0-695b-380e-8ec9-0dfba3b88d94.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.71.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:b4:ec:f1:0f:5a:f2:40:d7:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=d3b865da-b737-4cd4-a9b8-f0c5eef8aa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:41:a9:46:74:43:32:03:0a:09:e4:f3:c6:
29:80:4e:08:31:41:eb:54:d9:34:51:d9:6c:30:06:
42:6b:0f:1f:d9:09:13:1e:db:57:15:be:77:59:7d:
f9:88:d3:53:61:65:fc:d3:6a:c0:bf:85:c8:f4:d4:
97:00:0e:66:62:82:dc:88:bf:19:d0:8a:fb:be:7b:
cd:8d:e7:33:7d:e2:dc:02:9e:ca:9a:ed:cd:fd:de:
98:ae:f4:d9:4c:d3:fa:e0:87:01:38:53:89:9f:d1:
21:2e:fa:4b:c8:24:1a:65:a7:e3:dc:56:7c:d8:b5:
d7:8e:73:55:17:92:b0:34:a9:92:51:b5:c9:e2:0d:
88:f0:bd:0c:94:09:58:24:ff:de:02:ad:3b:58:8f:
c5:0e:c2:4b:df:27:00:3a:2e:80:48:6d:81:c1:0c:
ad:6d:36:89:ae:9c:ef:15:35:6f:cb:07:a9:4a:ce:
73:8f:02:d3:b0:87:a7:c4:9e:6e:c7:8b:59:63:67:
2c:51:a7:26:2d:8e:e2:32:1b:8e:75:47:c7:91:bc:
ed:b1:9f:86:a8:92:00:3c:e1:66:55:43:e6:5a:13:
57:ad:a7:84:31:fa:32:74:64:99:98:d7:ba:8c:36:
16:9f:0f:c2:27:fc:81:3c:71:ab:ad:e8:f0:57:5f:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3C:80:D6:06:8B:B8:D9:04:BF:01:AD:2D:EB:A5:54:85:7F:97:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e34b8fa0-695b-380e-8ec9-0dfba3b88d94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c6:25:56:39:1e:70:aa:78:0f:0f:fe:e5:80:e4:a4:01:19:
05:41:7a:f5:8b:ed:1b:d2:d4:0a:11:f3:16:9c:48:89:37:a5:
3b:a4:fb:a5:57:1a:4b:f0:da:5c:0b:bd:92:92:88:3a:c9:36:
54:39:86:7b:0b:9f:ae:3e:42:73:69:42:70:d9:5b:cf:12:e1:
b2:e4:11:0d:74:f1:9e:e7:14:01:2a:c6:17:3d:51:45:87:cf:
bc:46:36:47:b6:16:07:cd:6c:f6:0f:89:f3:22:09:41:46:99:
a5:37:3b:4e:11:23:86:cd:40:a6:40:f3:47:8b:b8:30:1d:af:
0f:dd:f0:9a:f7:79:f6:c8:82:af:2d:18:4a:02:bf:0e:f6:e4:
1d:a4:a9:27:69:74:55:3a:40:b7:ab:51:54:f3:37:ed:57:5e:
f7:34:76:0f:f1:b0:07:c0:00:ad:f9:8c:05:41:40:e3:88:42:
0b:e9:6a:c0:80:a9:da:57:17:89:71:f3:49:5c:a2:f1:1b:eb:
88:e4:60:11:72:f1:96:54:24:02:33:61:af:06:88:57:db:17:
86:64:f4:d2:b6:b8:f0:df:08:18:5e:12:ed:65:4f:0d:c6:74:
64:1b:4e:da:d6:fd:a5:61:4c:84:a6:b7:82:e1:99:3c:cf:64:
ce:4f:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:31:15 2026 by rpki-client