
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e38c20-c18e-3159-8a4f-3a98221485b4.roa
File: 28e38c20-c18e-3159-8a4f-3a98221485b4.roa (raw, json)
Hash identifier: Dih3vCMgPlysI3oeoIbMhcr0SbEKBu6r6G6PIiWuL34=
Subject key identifier: 1F:A9:6C:9F:FE:11:AF:A2:07:13:DF:45:91:30:86:17:D6:72:89:05
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584DCF5E2FF6F97F1901731A5E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e38c20-c18e-3159-8a4f-3a98221485b4.roa
Signing time: Tue 12 May 2026 14:43:41 +0000
ROA not before: Tue 12 May 2026 14:43:41 +0000
ROA not after: Mon 10 Aug 2026 14:43:41 +0000
asID: 43515
IP address blocks: 34.3.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:5e:2f:f6:f9:7f:19:01:73:1a:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 12 14:43:41 2026 GMT
Not After : Aug 10 14:43:41 2026 GMT
Subject: CN=a95518a2-63bf-4a88-acb0-6394288f9907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:39:4e:d2:dc:bd:0d:96:8d:ab:05:37:9f:
71:21:dd:3f:35:f3:81:11:bc:62:31:28:25:47:15:
eb:ab:67:e6:bb:1a:68:5a:f9:c1:0e:03:f6:f6:75:
26:89:d7:3d:2a:4d:71:ab:31:06:f4:9e:3b:e8:86:
a9:44:2c:cc:ec:a1:2b:85:cc:40:0f:14:e8:e7:98:
6b:1b:7f:8d:f4:b8:fd:ec:3a:8c:24:0b:79:96:f1:
39:03:3e:03:c0:73:d7:ba:a7:3b:03:94:f5:ff:4f:
ad:a3:b2:13:6d:5f:12:93:d3:a3:9a:e5:3f:73:e8:
e7:a1:a8:a5:96:fd:2c:87:04:f8:30:ae:a1:e9:72:
0f:00:61:42:c0:4b:5f:44:50:9f:0e:29:cf:40:40:
5f:62:f5:23:76:ff:a9:c2:23:4c:64:29:12:82:d7:
f0:32:8a:0a:ec:a6:0a:6c:2d:93:53:f3:79:4e:7a:
a8:ee:fa:76:4b:89:84:e8:0d:25:93:5f:f4:f1:8d:
6e:aa:02:1e:a7:9e:67:9d:96:87:4f:12:94:f6:fb:
9f:f6:c4:a6:a8:ae:d6:6c:64:d8:19:ac:0d:94:d6:
87:a8:a5:07:fa:5e:d8:81:29:fe:62:3e:ec:f1:d8:
4b:0e:c0:71:6b:f8:6a:e3:e4:89:fa:1a:a7:3f:31:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A9:6C:9F:FE:11:AF:A2:07:13:DF:45:91:30:86:17:D6:72:89:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28e38c20-c18e-3159-8a4f-3a98221485b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a2:ec:b0:dc:da:95:66:3b:e7:9e:2c:11:8e:99:63:77:16:
b0:7f:a4:f5:a2:e3:ed:36:18:70:a6:9b:30:3a:69:f5:23:71:
a0:c6:a3:e3:82:f9:e6:3b:cb:14:e8:01:ea:8a:79:ba:91:8f:
cd:d9:fa:ca:9e:b3:1d:9e:07:b5:91:26:75:d4:b6:e4:10:33:
b8:b7:33:f6:5b:62:5b:21:36:db:72:be:13:f4:f9:10:69:04:
35:c1:97:e8:60:61:3f:4e:3b:54:ee:1c:f4:78:23:09:33:20:
3a:66:2d:8c:7d:96:6c:cb:9e:d8:e8:a5:3b:04:e3:42:c7:50:
45:55:b2:98:a8:0d:8d:91:1b:87:07:c2:8a:d4:83:08:e1:7d:
d4:6a:a2:f2:12:71:76:63:ba:7e:6d:9d:66:37:5f:9b:8d:a2:
76:f8:cb:14:93:cd:c8:46:d5:14:3c:1d:13:c9:29:3b:2c:9a:
33:c9:5b:e2:ad:10:99:af:34:66:2f:2a:bd:d9:ce:a1:0e:d6:
83:3a:32:9e:9a:b3:38:97:7a:5e:ab:45:83:91:b0:72:48:f5:
12:59:62:d9:29:7d:6d:d2:c1:33:b7:fc:07:44:11:18:9e:0e:
98:de:99:97:f1:3a:4e:9c:18:ab:d1:a5:f7:11:35:cc:62:62:
c3:d3:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:39 2026 by rpki-client