
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa
File: d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa (raw, json)
Hash identifier: Swl3xuK2NRJ+x7SRV+53JHTPDOUjn2A0dhYHhdi3oa4=
Subject key identifier: E4:F3:53:DE:14:2D:F7:AE:FF:C4:2C:9F:10:2A:29:F6:49:58:64:25
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA66CE2B2110F91D7F0D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.136.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:66:ce:2b:21:10:f9:1d:7f:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=e1bcc606-035c-4f78-8a04-39fdc9e0ba17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:3a:ed:97:68:37:21:22:e7:e8:9f:f8:85:
f1:3a:1f:61:63:38:a8:f3:0d:bf:18:aa:cb:50:3c:
11:d2:57:43:10:91:9f:42:86:63:e5:bd:16:b2:3e:
51:3d:9e:9f:2b:4a:97:76:31:94:6b:4d:f4:bc:7e:
0c:a5:46:08:42:48:ce:1c:13:96:25:f9:18:24:50:
d9:3a:ea:8b:19:57:34:66:91:b4:b6:39:3a:2e:0f:
01:6d:c5:c5:39:89:2f:24:6d:91:b1:1f:0f:5e:63:
5e:f9:af:76:e3:78:1a:44:c3:3b:b5:1f:6f:a5:93:
33:3b:59:7b:0d:34:e4:69:c7:cc:9c:1e:34:6c:8d:
e2:b3:0e:3d:1a:4e:ee:25:87:0a:43:2a:28:d1:6c:
c1:f4:9b:6c:a2:b8:e0:d7:28:3c:94:22:15:a7:23:
7e:43:0e:05:b5:53:47:4d:7d:9e:de:5e:5f:b9:4e:
4e:0f:c3:af:c3:d2:a5:f1:8c:fe:d1:43:74:0b:73:
48:ea:cf:2d:4d:c6:79:5b:60:60:63:09:ee:fb:b7:
68:32:73:d0:b8:56:5d:83:5a:15:a4:aa:bd:1d:05:
50:c9:ac:03:70:5a:97:0c:2e:53:f4:f5:81:86:e1:
ad:cd:88:e1:55:1b:8d:91:55:b5:20:8d:f8:47:cf:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F3:53:DE:14:2D:F7:AE:FF:C4:2C:9F:10:2A:29:F6:49:58:64:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5d7ac3c-8442-3595-8cb4-0453aaa366bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:e4:a7:f8:49:5a:21:28:c4:11:88:9f:39:8e:f9:0c:29:11:
7f:5c:bd:ee:37:4e:8f:eb:3d:8b:bb:3a:64:4a:7b:12:4f:bd:
27:17:f1:fe:e8:70:2e:17:80:6a:d0:a1:c6:91:20:0d:ff:d6:
64:43:d2:25:ac:1e:7f:8d:ad:df:97:dc:b7:83:31:2d:d0:f2:
7c:a7:08:8e:d5:44:0f:16:40:a7:7a:25:8b:67:3b:af:48:42:
1a:8f:3d:ca:b0:5b:4c:fd:12:63:8e:9b:e7:60:b6:1f:d6:02:
50:19:f1:28:d9:0e:1e:c4:38:77:ea:f7:73:c0:81:46:d4:1a:
d3:b6:ad:d7:54:b1:0e:5d:ef:91:5b:39:e8:d1:41:fb:9d:5c:
16:d1:e5:41:4b:c3:5e:b1:c9:7d:db:98:69:b8:9a:b4:84:e5:
2c:e8:c0:6b:c8:97:92:9d:c3:00:33:a1:95:60:93:a2:ab:d5:
8b:e2:e9:c0:ce:af:fd:ac:e3:bb:f8:bf:b9:63:05:1d:a5:ab:
2a:b4:10:88:27:e7:0b:7e:d3:ac:f5:4a:0c:ee:ec:a4:42:c3:
5f:b8:54:1d:1c:39:5b:f4:6d:78:75:63:a6:0b:9c:33:6a:d8:
70:6e:b7:7d:cb:aa:b2:ef:c5:ee:4a:29:04:3c:06:b2:94:9f:
9f:86:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:24 2026 by rpki-client