
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f7c38ca-5f54-304f-aff2-01e3679aabc4.roa
File: 8f7c38ca-5f54-304f-aff2-01e3679aabc4.roa (raw, json)
Hash identifier: UAfzDidjMGiwh/B9iV+sPQzwDP9oEyvYOzmeOlPt0ms=
Subject key identifier: 78:87:C5:B2:80:B0:04:FE:76:0B:F7:13:94:AA:19:D8:E3:FF:57:C7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DB7214439DB5DB686E540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f7c38ca-5f54-304f-aff2-01e3679aabc4.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.72.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:b7:21:44:39:db:5d:b6:86:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=31ef256f-f5a5-410c-bc09-f08af0ea7710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:f0:b4:5e:ea:9e:85:1a:30:c6:dc:59:d7:
2b:bb:91:78:c7:13:0a:fa:24:2b:28:08:de:cd:c3:
69:06:5b:28:9d:0e:57:23:52:d5:87:68:cf:c2:73:
43:b4:d2:7f:f0:48:b5:cd:44:71:38:0c:c2:df:ca:
ea:01:c9:f8:aa:07:c2:0e:aa:1d:34:89:2f:b9:99:
4e:d0:2c:9a:ba:e9:5f:d3:7a:d6:af:fe:6a:aa:03:
12:ef:33:cb:b7:b9:3d:ce:66:e7:ed:86:e4:83:6a:
85:9a:70:7f:d6:88:3a:61:d1:23:8a:81:f6:75:ae:
4b:ce:c3:81:1d:2b:05:46:5b:33:89:cf:ca:36:ff:
99:bc:88:d0:0f:dd:9b:fe:70:91:83:15:c9:f6:72:
04:7b:38:63:e2:73:99:93:72:5d:aa:de:9d:32:10:
cc:31:ff:dc:dd:c8:4a:f9:fa:4e:d2:e0:ba:84:40:
79:c6:a4:47:1a:cc:f3:f8:6b:6c:15:ba:da:80:fe:
43:73:1a:33:64:5a:35:fa:f9:8f:4e:ef:8a:38:fc:
7c:5c:eb:73:2b:2d:a7:4e:14:75:88:94:39:8b:24:
f8:4a:9f:e1:b6:83:ff:87:a8:c6:78:a4:4b:5d:aa:
82:aa:82:c5:7e:90:25:51:9a:5b:4f:5b:7e:37:21:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:C5:B2:80:B0:04:FE:76:0B:F7:13:94:AA:19:D8:E3:FF:57:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f7c38ca-5f54-304f-aff2-01e3679aabc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b3:60:5a:60:80:b5:cd:2a:83:84:51:ac:32:b0:fa:73:f8:
07:0c:c8:d3:8b:08:29:c4:06:76:e4:5e:56:8a:1e:7f:48:0c:
a1:df:9c:10:b9:c1:05:b2:60:ba:dc:14:d2:ec:7a:54:f3:94:
50:78:35:f7:98:8d:21:59:71:6d:93:5e:38:d3:c4:8e:59:65:
27:48:da:4b:d5:2e:14:ea:aa:0c:cb:fd:d7:f2:18:bc:03:9f:
0b:41:fe:df:53:a3:28:ff:57:d0:5e:fe:a3:63:b6:bd:03:75:
32:f8:16:b3:e2:09:5f:df:65:61:8a:ec:dd:9c:69:0f:a9:4b:
e1:6c:50:d0:70:e5:59:8f:ec:50:70:46:86:cc:3f:98:c1:71:
48:37:c1:59:a8:bf:46:a6:4f:f2:07:78:77:16:58:57:95:13:
ea:7a:2b:e9:ad:f4:18:c7:c0:ec:03:69:0d:14:8e:39:cd:3d:
ff:62:6d:bc:4e:94:61:aa:66:ef:5d:0e:3c:34:18:b9:89:d4:
d3:35:c4:d4:53:7d:04:5a:a3:14:c8:ab:14:ff:b5:4f:4e:33:
b5:a5:4d:e4:41:03:06:21:8c:d6:79:8c:b5:02:b0:d5:ae:2d:
77:6e:31:78:23:a0:4e:23:f4:2b:24:23:59:6d:e4:22:98:ec:
86:42:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:40:24 2026 by rpki-client