
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa
File: 5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa (raw, json)
Hash identifier: N5fapC3Gfp/pCn+2ZNtoMv+8YHRSLcx7pKRjqEVKiNI=
Subject key identifier: C6:A5:64:57:D4:69:03:4B:42:0D:DB:E6:46:6B:93:69:58:27:48:9F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DC8E8C4E5085C0BD84A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.151.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:c8:e8:c4:e5:08:5c:0b:d8:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=efde2a24-af2f-415c-b755-1b4355c12fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:df:24:38:a9:65:26:4f:12:82:93:81:1d:
6d:3c:a6:66:f4:6a:c4:a3:72:eb:6c:cf:35:71:c5:
02:28:4b:e9:dd:68:88:42:b3:87:99:ee:e8:9e:c7:
05:2b:e6:1e:6a:d4:63:97:e9:f4:e3:23:fc:05:91:
b0:9b:4e:17:fb:b3:b0:fe:62:ea:ca:ff:6d:ce:a1:
d6:ec:fd:3a:a8:2e:f3:6b:85:05:0a:b3:ec:4e:0d:
84:55:98:32:88:bf:87:3b:9e:3a:4f:25:16:8b:14:
e4:6a:52:07:66:6b:20:3d:7a:29:f1:97:52:d8:c4:
3a:db:d6:0d:ac:55:2d:33:b4:51:5f:d3:65:73:04:
f3:60:d0:88:e9:96:6f:90:e6:e5:ff:3c:9b:3c:fc:
94:82:3a:3e:56:1e:bf:f1:43:1a:06:00:37:e3:5c:
7f:63:85:ec:64:e5:09:28:73:e9:f5:77:dc:f3:cb:
d9:bf:dc:93:55:f7:8e:46:93:08:ca:87:40:de:5e:
41:9f:47:80:2c:03:9c:fd:a2:0f:49:c3:b9:d7:9b:
d2:a0:4d:48:dd:d9:7a:b7:5e:ef:ee:51:4d:f1:f8:
0f:bd:83:94:21:11:5f:c8:b9:cf:4e:0d:82:8c:7a:
03:f3:24:88:68:41:6a:26:33:57:29:eb:6e:93:9f:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A5:64:57:D4:69:03:4B:42:0D:DB:E6:46:6B:93:69:58:27:48:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.151.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:76:a6:67:59:16:6e:47:22:7d:7f:2c:77:73:cb:35:a3:71:
e9:95:49:2f:2e:03:8c:b8:76:d5:8a:9f:26:0c:93:07:01:a0:
b6:6f:6a:72:48:bf:58:2b:81:19:e6:55:07:86:c0:e7:45:13:
cf:9d:cc:a1:ab:da:41:e2:34:f5:63:6b:07:f7:25:24:6f:c1:
95:a7:95:43:cd:19:ca:ba:51:25:be:57:bb:49:80:ff:0d:c7:
9d:b2:90:ca:88:a3:49:c5:cb:38:25:0b:2d:b0:e3:ea:d0:ff:
e6:de:c3:de:35:65:91:d8:2e:f7:55:0b:67:9a:1a:1e:9a:bb:
1c:17:7e:16:91:b4:40:e7:25:7f:33:34:f4:32:44:8e:a7:5b:
fe:d2:ea:4e:fb:53:19:58:42:bb:c1:62:ef:63:07:95:ad:e9:
fa:da:9a:6d:d3:f8:53:9a:44:92:a9:5f:50:22:35:6d:c4:0c:
ed:30:3e:89:ae:26:46:f2:f7:2f:5d:41:11:84:ff:f5:9a:ac:
08:bb:3f:d9:bf:86:16:e7:c5:7f:71:d2:19:bd:d2:73:4e:e0:
b4:20:d4:d7:dc:22:f1:db:b3:21:b3:c8:4e:d4:b1:9f:7c:61:
7c:6b:fc:c8:f1:a9:ff:38:09:99:d1:db:91:08:43:e7:e0:c0:
c2:44:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:27:44 2026 by rpki-client