
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efa67219-4885-305e-93be-2c1a68e77976.roa
File: efa67219-4885-305e-93be-2c1a68e77976.roa (raw, json)
Hash identifier: iw5GqQbX5lVn2NePcRr5NI2cHFj0FDfng1+MIZ3qmB8=
Subject key identifier: 56:67:A9:6C:35:7E:B9:80:D8:92:8B:75:76:33:6F:51:79:1D:7E:E9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DBAE74ACFA3748FD56A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efa67219-4885-305e-93be-2c1a68e77976.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.91.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:ba:e7:4a:cf:a3:74:8f:d5:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=590c0b58-fba6-45a5-8ee5-1576935975a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:ea:bb:90:43:6e:cc:3c:16:de:e4:f7:1d:
ab:c8:08:7e:15:67:cc:0b:c1:b0:f3:28:2f:4e:f4:
97:1e:37:d2:d0:bd:c6:60:10:5e:ee:11:e3:5c:7a:
a3:1a:a1:66:2c:3f:92:0c:cf:06:20:47:38:90:ac:
54:86:e8:7c:52:79:79:78:59:15:1c:9a:9f:3f:d6:
5e:e7:fb:82:c2:08:c6:e9:89:1f:ab:bc:fe:50:44:
31:a7:6e:cc:37:af:b0:30:ed:ee:be:09:99:c2:a0:
0b:b7:27:0a:dd:83:33:7e:fb:ba:64:e5:08:1f:e6:
23:86:87:a8:c1:5f:1f:9f:23:06:99:a4:e8:31:58:
d2:43:4b:24:2c:74:40:1e:13:ff:28:f7:28:d4:46:
5c:3f:b7:6f:bb:4b:92:06:6b:86:55:e4:50:52:13:
23:95:84:f4:08:d2:60:83:40:d3:84:6c:ed:47:38:
3e:d3:f3:93:d5:80:8c:e1:a3:99:aa:c0:d8:44:f4:
04:17:02:79:a1:b2:78:91:9b:3b:0d:79:df:af:84:
e0:30:45:ce:92:30:25:6b:93:18:0a:89:c2:e2:78:
0f:62:1e:51:97:b3:e1:99:c7:1b:44:bd:59:38:e3:
be:ce:8a:98:81:4e:e0:10:14:03:94:3f:ad:e5:8d:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:A9:6C:35:7E:B9:80:D8:92:8B:75:76:33:6F:51:79:1D:7E:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efa67219-4885-305e-93be-2c1a68e77976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.91.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:1b:99:c3:91:61:5f:9e:55:18:52:c8:cb:b6:94:6e:0e:12:
71:79:8a:2a:e0:1b:f1:51:de:7c:26:b7:3d:cb:26:00:d5:b4:
2a:84:0c:57:93:0f:65:46:f4:08:33:21:c2:eb:15:ee:fa:b7:
a9:e5:bb:84:45:43:34:01:9c:6b:95:70:c4:2e:92:4a:4a:cc:
cc:34:5c:91:b9:74:55:a0:35:df:34:1b:be:a2:74:c9:03:0b:
da:d9:05:fa:64:17:bf:3f:1c:1d:a5:f5:14:e3:cc:5f:d4:c9:
ac:ee:2f:9f:73:2b:c7:97:5c:a7:01:da:e0:b6:93:5e:23:1b:
0a:4d:e1:18:49:8f:6a:0e:de:23:66:06:74:d8:55:8f:e7:6b:
2e:4a:7f:df:14:8d:5d:82:e9:c2:ef:40:2e:55:06:f7:55:a3:
8a:d6:c0:c8:d8:7a:ee:22:a2:e2:66:68:75:c6:5a:17:18:76:
ef:6b:59:4e:b3:8e:97:79:0e:3d:77:bb:76:5d:a2:a2:6d:99:
8b:43:9f:c3:e0:55:91:8a:a6:82:4c:b4:9e:3c:bd:78:09:07:
1a:d2:e8:cd:77:39:87:72:9b:3b:18:a0:80:3a:a4:44:83:91:
95:58:8f:d9:70:5b:b3:2c:f8:60:92:79:68:65:6f:e3:71:3e:
05:45:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:48:53 2026 by rpki-client