
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2d80f0e-f805-388b-9c67-aa09bae86d38.roa
File: b2d80f0e-f805-388b-9c67-aa09bae86d38.roa (raw, json)
Hash identifier: 5PkPecn25q3A/N4zrvCb3LgL7vrpxQOAJ3rtS5YczaA=
Subject key identifier: 0E:C8:99:64:D1:28:1E:1C:A2:C6:D3:9D:B7:FE:49:E9:D3:7C:27:6B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4974ECEE64205F548D751DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2d80f0e-f805-388b-9c67-aa09bae86d38.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396982
IP address blocks: 34.1.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:ec:ee:64:20:5f:54:8d:75:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=93dc8bff-de32-4ab3-9daf-2471ac18ea87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:c4:d4:c5:8e:a1:3c:98:a8:30:e3:2b:c9:
54:4a:28:0c:41:22:9e:25:f0:7f:56:2f:72:f2:97:
c7:5a:4f:98:d3:cf:77:24:6c:1c:5d:57:be:ef:23:
41:73:aa:95:72:17:c5:9f:38:2e:24:17:88:b4:70:
d5:a9:e1:e5:2d:03:ce:b7:e5:b9:85:cf:bd:67:f3:
41:c0:bc:89:04:0a:e1:9e:ac:88:5c:fb:38:fe:86:
53:87:0e:c3:47:31:0a:f4:ef:77:27:c7:73:4e:bd:
c3:dc:cf:b8:fb:a9:3d:a6:6b:38:cc:cb:4e:b0:e7:
4a:6b:98:53:ce:4f:10:3a:84:5f:f3:d5:6a:65:20:
23:0b:4b:b1:b4:b5:cb:74:76:9e:9d:60:5f:1b:b2:
2c:4d:15:e7:f1:6a:42:39:4c:61:22:0b:f7:9c:26:
dd:ac:04:00:39:1d:be:c9:d3:8b:3e:48:32:3e:3c:
bf:b1:55:84:6d:d2:1c:51:c7:2c:9d:64:bc:29:e6:
33:f0:5d:0b:3b:92:6b:74:31:94:89:ce:84:f0:06:
06:7b:69:05:5d:a7:df:db:0b:e6:24:e2:8e:9b:1b:
c9:6c:f1:3c:bd:63:d1:d9:6f:45:60:d2:88:ec:eb:
fa:86:5b:f3:a4:93:eb:ab:35:5d:c0:37:d7:3c:9b:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:99:64:D1:28:1E:1C:A2:C6:D3:9D:B7:FE:49:E9:D3:7C:27:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2d80f0e-f805-388b-9c67-aa09bae86d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:53:4d:9e:ca:ab:17:bb:9f:29:c9:67:70:a1:be:c4:70:6c:
04:39:1a:99:a3:12:e1:0b:2f:71:84:90:0a:fb:e5:49:d7:87:
17:96:05:dc:f6:93:10:b4:06:9c:8b:05:dd:c0:8b:38:cd:cf:
28:8d:47:13:05:e9:26:2f:0b:0f:69:6b:7b:34:d9:58:6c:49:
10:27:81:d9:6a:5b:77:0f:ca:00:f8:82:db:27:c8:a6:ff:c3:
d8:2d:b9:59:4a:c4:23:f1:e4:bd:49:52:a6:71:30:b7:cc:1e:
21:18:fd:ae:8e:ee:16:4b:9f:78:f8:df:a0:53:68:3b:7c:eb:
d5:fa:f1:3e:99:56:0a:8a:3b:88:a6:ab:d0:c1:e7:9d:48:6e:
7f:ed:22:22:a6:20:75:d9:23:22:49:5f:8b:8c:bc:93:6c:eb:
a3:84:5a:b6:ec:94:eb:32:44:66:10:4b:3e:ce:2b:0c:cd:82:
dc:85:d9:5e:fa:56:81:b4:9d:d3:68:c5:3a:12:0c:fe:64:2f:
18:b3:e0:d4:64:ff:f4:f3:26:2b:11:7b:a6:8b:c7:0a:a4:5d:
c0:6d:3c:fc:83:b6:ce:70:eb:95:9d:3f:e7:85:27:46:d4:58:
8f:08:fb:75:00:69:85:28:9f:ae:e4:df:b4:03:8d:16:08:39:
b3:d0:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:18:45 2026 by rpki-client