
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa
File: 1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa (raw, json)
Hash identifier: 8dAD/Df0U815z/yb4tiGCk7ID/+Dm0jEqmolkDdh8Lg=
Subject key identifier: BA:49:64:C9:28:1C:5C:A8:44:F3:A3:95:73:A7:80:A5:E0:A5:D8:F0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA624B7691C52548121570
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 34.98.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:62:4b:76:91:c5:25:48:12:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=0c5f8a2f-9c26-48cf-9995-2edaac04d144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:c6:1f:a6:d6:a5:bd:e8:a5:5f:6a:01:66:
05:4f:05:d9:88:38:5c:12:52:64:28:a8:d9:4c:ad:
a6:a0:1f:c4:66:c7:31:30:4e:dd:15:20:9a:20:0a:
79:e5:31:9e:26:b3:1d:70:a3:ef:43:08:66:90:45:
89:ab:ae:e3:33:24:07:c0:a8:62:80:6e:05:e2:70:
ba:11:24:de:dd:04:03:92:95:8c:55:34:46:1d:1b:
ff:22:7e:3c:11:59:64:1c:b8:8f:8b:bf:f4:b4:c5:
f3:eb:d2:19:44:8c:f1:e4:a3:b1:2f:a3:99:a9:7b:
6a:46:a4:06:02:68:17:3e:2c:65:8a:b0:9f:a1:8b:
11:de:50:63:e7:f3:c0:e3:d2:b5:6d:0b:31:88:5c:
a0:df:17:27:f4:e8:9f:ed:86:2b:37:75:c7:bb:1b:
b3:d8:6b:05:92:be:d7:42:52:9d:e1:42:12:84:ca:
7d:27:41:96:94:a8:e3:06:14:cd:22:be:d2:03:49:
3d:f3:c1:b1:e4:d1:0a:f5:a3:b6:67:c8:7b:1a:31:
a0:88:99:e8:95:79:12:71:d6:9b:54:0a:50:95:47:
93:c8:61:82:9e:20:14:1a:4b:65:06:f7:19:58:d6:
f3:45:45:6e:08:dc:0a:dd:3c:97:6f:1f:b0:d6:66:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:64:C9:28:1C:5C:A8:44:F3:A3:95:73:A7:80:A5:E0:A5:D8:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:c2:e9:3d:6d:ab:cf:46:65:9b:41:9a:a1:9d:c3:65:03:28:
2e:0b:4e:60:80:2d:ac:c0:4b:8c:85:f7:b0:2a:0a:0b:49:77:
84:4c:57:9f:6b:f4:ff:06:04:ad:f9:4b:00:9a:e1:e5:10:92:
5f:7c:02:0c:2e:da:fb:0f:ce:8e:0c:2e:17:a6:39:5f:60:3b:
ed:ad:15:f9:87:ce:44:d7:0f:ff:fb:72:ce:10:ea:6a:2f:00:
a3:4c:18:5d:7a:4f:9c:94:e0:da:90:a5:3b:ef:2b:a6:a3:84:
f7:07:a8:23:0e:da:e8:a7:f5:2e:cf:85:52:7f:4f:57:7f:19:
4e:89:fc:09:03:f8:2e:22:15:15:98:56:f7:90:68:23:db:0a:
13:ac:c0:41:41:23:cf:45:f6:ae:d8:81:b8:63:53:ba:b9:c7:
18:13:bd:2c:06:90:35:16:eb:ce:12:00:6d:d2:5f:ef:d8:fe:
b0:2c:1a:0f:e4:fe:e2:83:90:4a:84:bd:af:85:a7:66:2b:0d:
ae:ec:18:8c:5c:c9:5e:c2:85:2f:6a:22:e2:88:59:23:27:ba:
0a:66:0b:21:9f:dd:bc:4a:fd:25:ac:1c:74:b9:a5:ad:3e:3e:
29:3e:cb:da:69:52:9e:89:82:cc:22:32:49:51:b8:e6:63:d9:
86:56:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:34 2026 by rpki-client