
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fae0deea-59e1-3290-b631-7407478e4bb1.roa
File: fae0deea-59e1-3290-b631-7407478e4bb1.roa (raw, json)
Hash identifier: /9d1jL58FuAMiegRZoHrXYDkjMYuXzolUehVFZTGEDI=
Subject key identifier: D8:4D:1B:2C:4D:0E:D6:A4:97:AB:AC:AE:32:34:8E:60:30:CE:84:19
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AAA4EFF4FA4936DF4CB080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fae0deea-59e1-3290-b631-7407478e4bb1.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 34.141.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:a4:ef:f4:fa:49:36:df:4c:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=831ee6be-88c7-405f-9759-e6785bc1e99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:05:8d:ab:d6:ad:7f:ab:6d:b1:89:14:2c:
5f:8c:d7:1d:8a:de:57:22:e7:ae:ea:cb:ca:bb:68:
3d:f1:8d:f2:13:63:07:fc:b4:6b:88:56:65:7f:62:
8f:6f:40:5c:76:69:12:bd:dd:18:f7:50:7b:97:a9:
9e:09:fa:13:c9:bf:ff:e8:88:6c:78:d2:ee:4d:53:
57:20:98:5d:04:3a:e8:4a:fc:fd:f2:8c:80:6f:e7:
74:9b:a8:5d:e8:db:b5:e2:f1:13:51:be:79:b3:95:
ec:2f:46:28:b1:d7:96:63:cd:b0:cb:a3:7b:7b:06:
d4:35:28:f3:c6:5b:43:a6:b5:d1:e5:ce:34:8d:61:
b7:69:fe:0e:78:38:ec:c5:db:ca:54:f2:41:df:9f:
36:72:79:40:64:16:69:31:22:d9:d2:ce:81:eb:a2:
c8:68:f1:1d:23:0e:92:36:27:63:94:4c:ed:77:e8:
c6:bc:d1:3c:ae:95:58:f4:4a:e7:f5:89:49:bd:1d:
c3:45:da:1a:84:0f:d7:f9:9c:32:d6:fb:5b:39:b4:
5a:7a:53:84:60:e4:cc:46:62:c4:27:a3:39:ac:9c:
2c:a2:88:09:3f:1d:44:d1:5c:4c:b3:84:66:7e:36:
9a:cd:ad:35:25:1c:7b:5f:6e:be:6f:c8:fc:d1:44:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:1B:2C:4D:0E:D6:A4:97:AB:AC:AE:32:34:8E:60:30:CE:84:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fae0deea-59e1-3290-b631-7407478e4bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.141.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:01:77:29:f9:05:60:2f:bb:74:ac:00:44:3b:64:d9:c8:9c:
13:b0:06:f7:40:99:ba:53:7f:8a:1f:6f:55:81:c2:58:e3:f3:
66:c5:e1:de:14:cf:a1:e8:ad:d1:7a:53:24:ae:fa:46:d9:38:
1e:44:22:e8:99:49:6d:9e:bf:0d:ce:c4:df:64:64:5c:2d:ea:
69:b8:ef:ca:91:8a:85:cc:24:31:5a:c7:a5:72:76:30:10:b8:
70:70:56:6b:8c:a5:72:78:9e:4a:00:f1:b5:33:25:a4:22:2b:
9b:df:6b:c4:6f:1d:b0:90:47:d2:75:8e:78:2d:c3:7f:1e:91:
ca:b4:dc:45:bf:76:c3:0d:2f:ba:2a:00:24:ac:b7:e8:d9:2e:
c3:76:a1:8d:78:93:26:87:51:c6:a1:d0:34:e6:d6:9d:1c:6b:
31:39:5f:00:38:13:f8:e5:1c:7d:8e:8b:f5:d0:bc:b3:0c:1f:
86:62:96:00:4e:a5:fa:30:24:5d:e0:a2:27:0d:92:35:83:77:
7c:ee:ed:a5:ff:f4:3e:ae:5a:5b:05:05:fd:e0:d1:ec:dc:f0:
a7:7d:c0:db:42:7a:9f:b7:48:df:ab:c6:90:0c:7f:32:79:a8:
7f:b2:a1:63:57:b5:30:f7:42:a3:7b:80:c1:b5:70:91:30:35:
8b:98:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:02 2026 by rpki-client