
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa
File: f8c95102-4168-3b2e-95e8-919f3c45fc44.roa (raw, json)
Hash identifier: iZ06CkgTNKTBJlGPLKbVUXRZHEj6vz5fvfcHTr/ClK0=
Subject key identifier: 3E:B4:4D:6F:65:5E:F6:95:18:12:BC:AA:8A:AA:2B:FF:42:50:1B:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4989EF8AB790EFE257A4FB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19527
IP address blocks: 34.2.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:ef:8a:b7:90:ef:e2:57:a4:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6fa2a633-d679-4e61-b827-f576a2322da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:a1:48:3c:45:b1:91:f6:aa:cf:a5:5a:47:
ce:2e:bf:78:6f:0a:69:15:c3:ce:c7:34:d7:0c:4c:
a1:4d:26:0e:b4:0f:18:cb:22:50:f3:bb:54:2a:2e:
34:76:cd:c1:35:03:d7:b3:dc:5e:f1:8a:80:6b:70:
45:c1:66:95:ad:68:da:e0:ff:74:9b:e3:ed:c8:03:
2f:f2:d1:04:c3:7d:7f:37:4e:b4:ba:db:8f:c9:14:
9e:91:29:66:ac:38:cd:27:fb:cd:e5:64:18:5b:88:
73:8a:c8:00:21:8a:36:56:b0:d6:eb:4b:5a:ed:c1:
ba:e9:74:76:7b:c3:bc:b9:b6:cb:5a:cc:6f:a2:ba:
f1:55:ff:d9:5e:53:b4:81:da:70:d8:49:2f:21:92:
90:93:c0:41:7a:8d:51:79:42:2c:02:28:d3:33:5e:
10:a0:a7:ec:fd:86:b7:c0:af:64:7c:09:75:84:21:
24:ad:48:87:7f:f9:2a:c9:6b:11:b2:88:14:27:fd:
a0:32:b8:4f:11:65:a8:31:0f:e8:81:07:ab:5f:97:
66:1c:e0:22:95:50:39:87:15:76:5b:93:70:64:fe:
5b:75:e9:49:0e:89:f4:d8:84:c8:c1:b3:56:ec:55:
96:b3:49:6b:a8:69:96:ce:a2:f8:e5:1a:8f:e2:1a:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:4D:6F:65:5E:F6:95:18:12:BC:AA:8A:AA:2B:FF:42:50:1B:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:3f:ed:74:65:f0:b6:f4:b3:e3:d9:7d:ca:4c:5d:55:de:cc:
c6:30:46:c2:f1:70:d1:26:ff:63:f8:6a:f5:55:c5:b0:9b:2f:
c1:d8:86:7e:d4:c3:8d:d1:36:6a:ef:10:60:eb:33:86:73:da:
1d:ec:de:2a:2f:5a:4f:02:e6:95:d3:80:0c:57:cc:50:64:fe:
13:ab:d1:bf:ba:2c:d4:6b:ab:28:de:16:43:7f:a6:18:c2:5b:
d5:de:23:91:ca:c9:f6:fe:45:cc:79:0b:71:cd:eb:36:3b:67:
ac:5b:ed:d0:d8:6a:78:22:e3:6e:d5:77:55:83:08:69:74:4c:
82:04:cc:91:55:ea:41:48:13:35:5d:c2:59:12:7b:1e:00:77:
11:98:19:5a:1e:9f:7c:aa:7f:e1:f8:50:7c:11:84:1e:02:51:
75:bb:89:26:6f:f2:e6:a4:7d:a2:74:1b:2e:3a:93:a1:98:55:
bb:63:c1:a8:2c:b6:a2:8c:e1:2d:4e:12:86:6a:ed:5c:77:4e:
e0:13:13:99:99:cb:e3:0d:30:34:92:04:cb:25:98:1f:2a:e4:
3a:b2:44:d8:d9:eb:d7:63:aa:4c:fa:49:53:c2:9a:43:e1:6e:
30:1c:05:32:d6:26:9a:77:e2:34:89:c1:11:ae:a7:5f:e2:72:
6c:f0:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:13:16 2026 by rpki-client