
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c96b42a-c1c4-37aa-bea0-246f794d420e.roa
File: 0c96b42a-c1c4-37aa-bea0-246f794d420e.roa (raw, json)
Hash identifier: UfS1+a9iaXKEnANaCj3ediqs94RoiGRF0Uzgg5hcv3Q=
Subject key identifier: DA:BE:59:81:FE:74:04:D5:9C:DA:17:24:76:65:FB:01:B7:63:1C:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584DCF624948B1D8AD1D0AA33B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c96b42a-c1c4-37aa-bea0-246f794d420e.roa
Signing time: Tue 12 May 2026 14:51:56 +0000
ROA not before: Tue 12 May 2026 14:51:56 +0000
ROA not after: Mon 10 Aug 2026 14:51:56 +0000
asID: 43515
IP address blocks: 34.3.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:62:49:48:b1:d8:ad:1d:0a:a3:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 12 14:51:56 2026 GMT
Not After : Aug 10 14:51:56 2026 GMT
Subject: CN=a015ee1f-09d8-4d22-b5e8-9781f8bd3ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:51:2b:0c:06:d7:2c:8e:8a:dc:0b:0c:03:
4e:d5:72:d7:2a:d3:66:57:42:f9:1b:00:00:f1:9e:
4f:86:42:77:2d:0c:1a:dd:66:7c:84:b3:91:c9:4b:
9f:9c:d9:8a:3a:0e:2f:2d:ea:fe:86:88:74:71:1f:
ec:fa:00:24:86:0c:84:02:c9:6a:fb:e8:77:72:30:
57:e3:e5:3d:df:de:34:f9:4c:8f:22:2b:88:16:34:
81:80:4e:14:7c:8f:75:fb:b6:ab:c8:be:09:b1:7c:
57:f3:40:01:23:3c:55:28:ea:d6:fc:2f:df:b4:23:
b9:da:2d:7d:e0:a7:14:a5:56:c5:3a:7b:9a:83:08:
f5:a9:db:b7:41:c6:a9:63:81:e2:d4:99:a7:6f:99:
4e:3a:83:47:13:78:0d:99:70:ba:35:f8:81:b3:a2:
b2:1e:c4:2e:4d:a5:71:ff:9a:e8:6a:ac:b5:ca:80:
7b:a6:aa:d6:77:9d:79:e0:a8:b4:92:53:cd:04:2f:
0c:2c:8c:20:ee:a5:cf:d9:49:ed:52:ba:f6:bc:9f:
a4:3e:33:24:de:7a:b8:42:73:1b:25:79:29:8e:fa:
c4:f8:cc:9a:da:04:3d:db:7c:00:70:b1:fb:a3:29:
82:7e:15:fc:7b:08:93:34:f8:7a:a5:96:2e:e0:a1:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BE:59:81:FE:74:04:D5:9C:DA:17:24:76:65:FB:01:B7:63:1C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c96b42a-c1c4-37aa-bea0-246f794d420e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:d5:9c:30:13:32:2f:2f:cb:9b:74:db:71:15:be:ec:8b:af:
68:d6:1d:76:1d:df:24:2e:df:5c:21:6e:17:fa:38:f1:bc:31:
05:31:ab:dc:76:44:47:70:5e:45:63:91:31:5a:10:b5:1b:f2:
b5:89:6c:05:83:c3:cf:0f:65:64:d9:f1:6d:4d:7e:ac:b6:1d:
51:b3:83:67:bf:63:dc:05:6b:67:29:53:9b:52:d2:53:37:d4:
b3:c9:af:6d:00:0f:86:9f:fa:93:78:a7:90:bc:b6:40:a9:4c:
6a:23:ce:34:75:28:7d:2a:8e:cf:9b:2c:02:5f:01:c3:37:1f:
1d:37:20:72:cd:f5:22:31:3c:16:3e:84:16:3a:69:76:65:42:
bf:c6:b1:92:49:da:6b:4a:77:6b:44:85:ee:9c:99:6a:b3:36:
04:d9:86:b1:dc:2e:b3:0c:16:45:4b:fa:48:98:30:ef:7c:10:
b9:71:8d:5c:7b:c9:5d:3f:df:81:e3:b2:52:6d:2c:55:f3:61:
48:e1:8e:11:04:1c:60:b3:38:c5:1f:e1:56:b7:18:47:c9:eb:
16:89:0a:f4:5c:d4:e6:26:51:cb:ae:38:fa:7c:28:71:fb:e0:
d4:8a:90:bc:c3:42:9e:01:a6:70:a0:7b:db:1a:9b:86:11:42:
d9:98:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:20 2026 by rpki-client