
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a8e4b26-33d8-379c-bdae-28a32f6b8d73.roa
File: 0a8e4b26-33d8-379c-bdae-28a32f6b8d73.roa (raw, json)
Hash identifier: s26odAEOscaEInP4g6slTGZfcxKV02ZM7KmvxrOL46I=
Subject key identifier: 5A:C0:1F:19:FC:DF:C9:18:BB:D2:49:90:C1:4C:B6:CE:F9:C7:A4:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D3E00114E79560DB943EDDAC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a8e4b26-33d8-379c-bdae-28a32f6b8d73.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 19527
IP address blocks: 34.4.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3e:00:11:4e:79:56:0d:b9:43:ed:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=3fb2ac82-0522-4a9d-aa21-2ad502fbff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:40:f9:1b:8e:39:3d:34:5e:30:d2:5f:2e:
60:68:49:46:d5:17:f2:37:d3:c1:07:42:fd:15:2b:
a7:f3:cf:1e:3e:90:91:fd:64:9d:14:62:e7:7f:bc:
34:f7:c4:aa:b2:a0:ac:1f:fc:58:d3:18:b1:1c:7d:
16:42:ed:db:c2:02:1a:29:02:d6:43:a7:23:81:17:
38:52:5d:b2:e6:84:f3:a5:f4:32:84:c8:7e:20:63:
7b:09:55:3f:3a:75:26:12:20:6a:a8:35:3b:12:99:
4b:6f:d1:eb:6f:61:b7:de:2f:a3:05:7c:20:ee:c6:
85:0e:d8:40:15:ab:f2:7d:5f:e0:87:94:bc:fc:fa:
c2:62:28:79:8b:87:48:b7:7e:54:b6:fa:2b:df:03:
43:5a:3c:4a:6d:55:4a:b2:d7:f3:8d:e8:d5:6b:70:
b6:47:13:36:c6:1a:7a:d6:f2:9e:fe:b8:75:25:ab:
25:75:ad:c6:95:74:33:9b:b4:ec:ad:8a:e5:06:de:
57:20:e0:fd:4a:52:72:de:18:7a:e1:5e:16:fb:08:
f1:67:de:4d:a4:13:9b:e2:99:c8:b8:ff:83:ac:55:
93:dd:83:9e:1a:6d:e2:39:69:78:e3:ac:e3:7d:a2:
d7:4c:34:c4:fe:ed:ac:38:5a:42:5b:2b:40:c7:14:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C0:1F:19:FC:DF:C9:18:BB:D2:49:90:C1:4C:B6:CE:F9:C7:A4:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a8e4b26-33d8-379c-bdae-28a32f6b8d73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.4.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:99:2e:09:38:28:e1:12:71:1c:bc:d9:c5:f5:b0:91:02:43:
0c:7a:78:82:17:8d:55:54:13:1b:47:8f:e2:41:07:f3:bc:4f:
63:ad:61:cc:fe:e0:6a:91:9d:3d:a8:50:f4:1e:ff:d3:7f:7a:
75:0c:06:9c:a5:fa:86:4e:bd:01:07:30:1c:03:f0:9b:00:7c:
58:7a:e4:9b:f7:18:65:bd:4f:7c:fc:0f:c3:28:a7:cf:55:c6:
f1:53:e2:ed:a2:de:1c:8a:55:9f:31:4e:0e:53:63:89:e2:31:
df:73:75:c7:ae:ef:2a:f3:57:e5:1a:b5:6c:20:cf:ad:5c:6a:
41:a1:63:30:1a:00:10:47:c9:83:3a:b2:09:fc:27:8a:a5:c1:
41:5e:cb:f5:25:08:c6:4e:40:67:6c:c9:f4:00:71:f6:8b:f0:
6d:d7:f4:bd:70:1b:70:1e:c6:2d:0c:82:ce:a2:b8:30:45:51:
3e:d4:3b:63:fa:31:0b:d2:a7:4f:b7:c1:9a:4e:56:5c:64:96:
11:06:c8:ce:00:9d:d6:ec:3b:33:ba:92:75:2d:b3:ef:5c:4c:
66:a7:04:e8:cf:82:6f:fa:af:63:d4:d9:cd:7c:ec:47:14:6b:
56:a6:f5:54:61:39:a3:ea:0e:d2:ae:c7:ec:10:98:14:3d:e1:
ea:69:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:10 2026 by rpki-client