
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
File: e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa (raw, json)
Hash identifier: opNR1EzyuOPnRNnnt0P7PycpelfpiGl78FPLyf5q8QU=
Subject key identifier: 1F:EA:0B:81:51:EB:C3:08:B9:6F:17:70:3D:90:CC:F5:96:A6:C4:D6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4972AED3BD0638803D2D38C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19527
IP address blocks: 34.2.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:ae:d3:bd:06:38:80:3d:2d:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=97b684e9-e325-42c4-bf90-875da47d3686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:c5:1f:78:d9:25:04:a7:86:05:e8:86:b2:
c9:61:60:2a:c4:e1:c3:d4:b5:58:8c:e6:6b:fb:83:
66:74:f0:49:bf:1b:c0:ca:80:08:de:2b:a2:eb:3a:
1a:fc:98:10:a2:e2:82:6d:1c:c2:eb:68:ae:24:84:
8e:4e:23:d8:68:02:4c:00:c4:6a:57:df:ce:f3:0c:
cf:4f:9f:e2:22:61:07:c8:ae:fb:12:04:54:f1:2e:
9d:b9:6b:6b:8f:d6:4a:88:80:aa:c5:00:dc:d4:77:
d0:75:12:c2:45:17:0e:2f:fb:8c:1b:0a:cf:6b:5b:
21:99:89:00:3d:2f:53:c3:d8:5b:38:e2:1a:d7:c9:
d0:2b:a8:9b:ed:a5:78:af:12:18:18:2b:4b:64:ce:
a6:fd:6a:98:89:0e:a0:da:65:e3:8b:eb:89:65:8e:
f7:88:00:d3:9a:e1:89:7a:fb:0c:51:1e:cb:bb:24:
58:3d:71:2a:dc:2a:8b:3a:46:8b:f7:26:a6:67:ea:
aa:c1:c8:6f:fa:40:58:07:91:e3:3f:98:be:35:47:
af:63:a5:5e:07:84:f7:71:41:fc:bc:7c:e0:a7:b1:
d0:36:f3:fe:b2:80:be:97:b0:d2:b0:db:03:ac:1c:
35:5e:4f:12:10:6f:6f:87:45:d7:b6:a2:65:99:68:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:0B:81:51:EB:C3:08:B9:6F:17:70:3D:90:CC:F5:96:A6:C4:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3c0f1cc-4aa8-39df-b840-c9ad7de540b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:1a:91:37:e6:b8:8b:5f:ff:a2:53:cb:ac:46:68:ca:a5:17:
71:4d:ff:41:1a:01:11:02:ae:b4:5e:63:b1:8c:d6:58:86:2d:
f3:11:9f:74:be:ac:97:ed:46:41:ad:c8:07:d2:fd:e1:1a:a4:
d7:d6:6f:b7:1c:e6:b2:b3:fd:d9:c5:67:fe:c1:6c:2b:24:97:
87:ab:bf:48:d3:7b:06:04:21:51:79:3a:a8:c6:4d:57:66:59:
9c:e5:3d:9e:ae:2c:32:64:1e:73:01:3d:30:81:64:31:5f:bc:
8c:94:4f:c2:3f:36:8f:de:73:9f:05:c9:f0:9c:f8:91:4e:7e:
57:27:b8:c6:22:a5:d0:99:4a:0b:02:52:d1:35:cc:82:83:ad:
1d:02:64:98:18:97:f3:89:ec:b5:89:4e:3d:f8:1e:d3:09:79:
04:a0:4c:fe:5a:50:34:18:27:00:4c:47:de:5a:03:e5:63:6b:
41:af:f3:c5:a8:f3:63:62:09:14:a9:3b:df:a7:57:48:b2:b0:
7d:a6:17:92:a3:56:ca:4d:b5:5a:3c:18:bc:c0:fa:7a:47:84:
a2:50:4b:70:aa:3a:9b:e6:f5:a5:a8:e7:67:78:23:4c:c3:df:
3a:9f:a8:71:99:2b:57:38:19:64:b2:a2:8f:08:d2:fc:c5:fc:
fd:fa:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:26:04 2026 by rpki-client