
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a85afa02-c1b9-3ab8-b2be-0b3e52415380.roa
File: a85afa02-c1b9-3ab8-b2be-0b3e52415380.roa (raw, json)
Hash identifier: 2aHMJzWZaUKD7nATJC0vMTu8jj/9MI8o3IZ2uxxwA4c=
Subject key identifier: 33:EA:A4:50:4D:7B:5E:6D:4C:8E:09:8F:71:BF:C8:89:19:62:78:04
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F497CF12446659741419B5AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a85afa02-c1b9-3ab8-b2be-0b3e52415380.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396982
IP address blocks: 34.103.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7c:f1:24:46:65:97:41:41:9b:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=33900d29-49e2-470f-b10b-addb6653fae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:ec:5a:a0:39:52:91:6f:de:b4:18:b4:7e:
86:30:fc:d5:4c:7f:0f:ab:ad:1f:18:3b:fc:ef:71:
65:46:12:37:64:21:ad:cc:f8:08:f8:44:27:24:85:
5a:2f:50:70:5c:79:a5:c0:d4:ed:c2:6c:ce:c1:a6:
4d:0b:d1:00:4a:59:e1:9a:12:73:d4:19:bc:a1:91:
07:89:fa:6a:b3:55:21:c4:b9:01:5e:2b:64:a7:ed:
f4:cf:cb:c4:e8:ef:47:24:51:43:13:40:19:ea:aa:
18:74:e3:a9:d5:fa:b0:80:cf:3d:a6:92:cc:9d:06:
5b:77:e2:3d:51:c4:71:4e:0c:51:6b:95:9e:df:77:
46:e0:5d:d4:84:6d:3f:44:53:e7:ca:fc:d1:57:95:
ac:bd:d1:ab:db:33:d0:1c:fc:7e:c8:1b:04:06:d0:
22:9f:a4:e8:6f:fc:c8:2c:5b:4c:ab:7c:61:71:df:
b6:c2:9d:5f:75:0f:07:81:24:bd:99:85:7e:e1:64:
ac:60:40:ed:fd:1d:06:92:d3:ed:20:8e:ab:c0:05:
c3:d0:9f:fb:b7:cf:ae:df:c1:ee:e9:bf:6b:17:33:
ed:1f:29:26:16:33:46:44:c7:79:1b:52:b6:fb:83:
57:0f:40:b0:70:2a:07:28:54:4d:4c:e1:99:5c:4a:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:A4:50:4D:7B:5E:6D:4C:8E:09:8F:71:BF:C8:89:19:62:78:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a85afa02-c1b9-3ab8-b2be-0b3e52415380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:8d:ce:ab:4b:64:7d:19:6c:bd:74:2e:54:a4:57:1f:7f:3a:
5d:78:78:ff:fa:f9:ef:83:97:69:0b:e2:e0:8a:4c:c7:52:5f:
62:d5:1c:c3:d4:79:07:5b:f8:5d:a8:41:db:ed:36:c1:7d:f8:
35:bd:b0:b6:51:2f:c9:0e:7c:8b:3f:53:ce:a9:7f:ff:d8:13:
94:9f:b0:08:a8:f5:17:df:61:48:7d:4b:3d:ef:60:fd:8f:91:
a3:ab:ce:f8:0c:2f:b9:34:16:e3:59:85:e2:54:46:5f:2b:3f:
e1:c5:dc:41:9c:97:39:91:9b:40:5d:7e:cc:8e:91:57:f9:38:
4c:07:7f:27:a6:8a:94:da:b9:95:68:a7:74:bf:a0:28:87:05:
9a:f7:da:ed:a2:47:9f:ff:6f:c9:93:f2:46:fc:16:58:d2:6e:
a1:0e:30:3e:e9:62:48:6b:06:c6:5b:4f:4b:4f:aa:52:97:fc:
f5:19:08:d2:71:31:76:b6:7d:de:9b:cf:8d:a8:35:25:64:08:
5d:88:35:30:90:aa:08:b0:5a:ea:23:44:d9:85:12:59:de:8b:
06:eb:35:a6:e1:20:aa:97:3d:97:f5:84:64:1f:cc:58:d8:13:
b9:7b:ca:67:f0:ec:ae:4e:1e:79:fa:6e:34:40:06:b8:2d:68:
0b:d7:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:59:57 2026 by rpki-client