
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0da0cd70-3a88-3764-be39-fd46ec706a2e.roa
File: 0da0cd70-3a88-3764-be39-fd46ec706a2e.roa (raw, json)
Hash identifier: 4nUG8C7ejHKPifB6K1jznWXQpKqt+RRRPInCXY5v0FI=
Subject key identifier: 8F:EA:75:E7:97:F2:DC:14:E8:84:11:BC:02:31:61:2D:8B:4D:07:DD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D316F769B9CDAB39AD585EF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0da0cd70-3a88-3764-be39-fd46ec706a2e.roa
Signing time: Tue 17 Mar 2026 01:00:32 +0000
ROA not before: Tue 17 Mar 2026 01:00:32 +0000
ROA not after: Mon 15 Jun 2026 01:00:32 +0000
asID: 396982
IP address blocks: 34.139.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:31:6f:76:9b:9c:da:b3:9a:d5:85:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 17 01:00:32 2026 GMT
Not After : Jun 15 01:00:32 2026 GMT
Subject: CN=c31887f3-b18c-4599-ad3b-a74406d73b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:2b:8b:17:76:46:32:d7:d4:65:24:e5:6c:
d9:bb:2f:60:67:45:a0:13:19:27:af:5a:18:ed:f4:
87:b9:48:fc:f5:26:2c:04:07:5d:9c:e7:68:8c:b9:
e0:f1:2c:43:98:a1:1d:ca:e6:c3:12:16:4c:39:1d:
d5:b9:01:22:fb:ae:e5:f9:72:e1:e7:c8:ad:27:4b:
89:ce:0b:2a:1d:7f:63:43:d9:ca:c3:7a:e5:bc:01:
72:92:a9:54:e9:5b:90:7e:20:b6:fd:91:12:db:a0:
d5:ae:99:40:a3:f5:1a:7d:4f:ff:3d:71:3e:e5:d2:
ad:2c:7b:e3:63:3a:24:2b:ce:0e:0a:16:d8:4e:88:
2c:00:78:5e:ff:ee:24:7f:eb:72:97:fd:c6:d3:3c:
0e:9c:ab:a2:37:57:bd:62:e5:3c:b5:1d:c4:28:1f:
9c:76:29:e3:79:d4:88:21:3e:40:ee:69:83:09:f5:
8e:f5:a5:8e:c3:a9:ed:97:fe:f8:65:bf:46:ac:06:
07:63:dc:b2:1c:56:8a:31:47:ad:ee:e1:c8:4a:ed:
49:b7:c0:01:64:f5:ca:c3:f7:02:21:6d:91:2e:7e:
3e:69:5b:c6:7b:fe:58:5a:54:c6:b7:d8:25:7d:af:
ce:8f:b3:24:53:9d:7c:4c:3c:22:59:9d:56:46:40:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EA:75:E7:97:F2:DC:14:E8:84:11:BC:02:31:61:2D:8B:4D:07:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0da0cd70-3a88-3764-be39-fd46ec706a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:98:b5:ba:5c:74:ac:64:c1:b4:de:11:92:c3:0d:81:c8:ff:
6e:9a:a0:86:96:0b:bb:33:db:e1:95:01:63:1c:df:5e:48:bd:
31:81:a7:58:50:67:62:c4:42:01:31:b9:9b:c7:2a:82:bc:61:
44:1b:1b:cd:47:17:77:52:51:6f:e2:a8:05:95:a1:da:94:6d:
cd:16:c3:1f:b9:d4:ad:b6:8e:b6:42:73:65:3f:eb:c0:97:aa:
86:b0:a1:1d:99:c7:81:af:74:6c:9e:74:d7:95:ab:4e:01:db:
46:b0:28:46:3a:1a:90:27:d6:6b:8f:23:89:e0:fc:ad:b0:19:
6b:cb:c1:96:d4:b2:07:10:6d:db:dd:07:ad:06:bb:cd:e3:57:
ae:6b:60:c8:ef:2e:09:6e:8f:22:39:14:0c:bb:96:a8:af:72:
9f:41:04:40:bd:3c:38:e7:af:3c:e2:be:67:e4:28:83:51:32:
bb:c0:33:61:0c:18:21:97:52:92:7c:be:de:34:dd:7e:d0:27:
53:93:39:74:01:97:49:53:ef:ef:55:3a:cf:ab:07:3d:d5:13:
70:76:d9:8e:ca:3e:1d:13:75:7b:01:2e:4a:be:4e:28:6f:5b:
f5:d5:fc:90:ec:88:6c:80:84:f1:91:64:29:24:b6:12:c6:ac:
ae:de:9c:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0xb3abnNqzmtWF74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk
YzMxODg3ZjMtYjE4Yy00NTk5LWFkM2ItYTc0NDA2ZDczYjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT0rixd2RjLX1GUk5WzZuy9gZ0WgExknr1oY
7fSHuUj89SYsBAddnOdojLng8SxDmKEdyubDEhZMOR3VuQEi+67l+XLh58itJ0uJ
zgsqHX9jQ9nKw3rlvAFykqlU6VuQfiC2/ZES26DVrplAo/UafU//PXE+5dKtLHvj
YzokK84OChbYTogsAHhe/+4kf+tyl/3G0zwOnKuiN1e9YuU8tR3EKB+cdinjedSI
IT5A7mmDCfWO9aWOw6ntl/74Zb9GrAYHY9yyHFaKMUet7uHISu1Jt8ABZPXKw/cC
IW2RLn4+aVvGe/5YWlTGt9glfa/Oj7MkU518TDwiWZ1WRkCuHQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI/qdeeX8twU6IQRvAIxYS2LTQfdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGRhMGNkNzAtM2E4OC0z
NzY0LWJlMzktZmQ0NmVjNzA2YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIoswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWpi1ulx0rGTBtN4RksMNgcj/bpqghpYLuzPb4ZUBYxzfXki9MYGnWFBn
YsRCATG5m8cqgrxhRBsbzUcXd1JRb+KoBZWh2pRtzRbDH7nUrbaOtkJzZT/rwJeq
hrChHZnHga90bJ5015WrTgHbRrAoRjoakCfWa48jieD8rbAZa8vBltSyBxBt290H
rQa7zeNXrmtgyO8uCW6PIjkUDLuWqK9yn0EEQL08OOevPOK+Z+Qog1Eyu8AzYQwY
IZdSkny+3jTdftAnU5M5dAGXSVPv71U6z6sHPdUTcHbZjso+HRN1ewEuSr5OKG9b
9dX8kOyIbICE8ZFkKSS2Esasrt6cuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:51 2026 by rpki-client