
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa
File: 20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa (raw, json)
Hash identifier: RONOyUazjOLcwXNL1McUIBYKemTCBj1pJ8RfG/Wqkgs=
Subject key identifier: DC:91:AF:1F:ED:C2:2A:4D:35:35:12:20:E1:09:B9:90:2F:48:92:E1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EA787C9282FE8C6970C106200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 43515
IP address blocks: 34.3.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:c9:28:2f:e8:c6:97:0c:10:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=715f19c7-9798-4c9b-a749-c75ffe5ed5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:12:fa:45:85:99:0d:03:5d:35:b9:b1:cc:
75:4d:9b:b9:57:da:aa:84:d9:17:5a:9e:76:3a:f1:
3a:43:4c:8d:b4:72:f1:58:3c:82:a6:66:c2:c5:32:
8f:ed:7b:45:24:f1:a9:d4:2b:89:d0:82:f7:2b:24:
5e:4f:4e:b1:47:11:99:24:9d:78:c4:5e:12:16:12:
c7:83:f0:51:18:47:6e:c2:f6:2d:a8:5f:d1:51:02:
d2:66:0c:2b:16:51:32:c2:b7:44:cb:d5:a5:27:16:
b9:cd:ad:26:33:90:a8:13:ed:f7:3b:2e:62:b9:43:
68:ec:fe:02:7b:14:f3:95:d5:7f:3b:d8:06:a6:99:
ee:c4:10:95:3c:00:37:cb:27:3b:cb:7a:37:c7:f5:
d1:f0:8c:98:5e:b3:bd:23:1b:f7:a4:5f:3d:c2:a4:
e9:42:d6:7d:13:0a:07:e0:bd:28:98:8f:ab:af:e9:
8f:83:b4:1d:7d:1a:01:07:d3:26:ad:36:c6:cf:4e:
8b:7a:da:63:43:c1:d3:c8:10:5c:be:04:6c:42:5a:
db:31:73:3e:95:26:76:82:dc:ab:49:3d:9c:c8:58:
7f:9f:24:d6:5d:f2:f3:d5:73:92:d5:0d:aa:5c:ea:
4d:5c:4d:d1:09:7c:de:8a:97:59:e8:49:45:dd:80:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:91:AF:1F:ED:C2:2A:4D:35:35:12:20:E1:09:B9:90:2F:48:92:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20a256fc-40e1-33e1-bebd-b0b6e94a91d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e8:6c:d7:55:b5:d6:91:84:fb:2f:47:82:82:54:a3:0a:88:
fc:8c:92:9a:d1:59:23:8f:78:19:7e:2a:78:9e:de:65:66:04:
72:72:b4:79:2c:4f:9d:b7:62:b9:cd:1f:03:87:57:81:34:07:
83:37:86:2d:17:93:1f:99:05:ec:b6:b7:26:1d:17:55:7f:1b:
3a:61:e3:b2:8f:30:ff:46:57:5a:d8:1d:39:89:7f:7e:b4:8a:
0a:f4:13:cc:97:14:6d:13:b3:8f:8d:3f:7c:f7:cd:52:ed:fe:
f3:71:82:25:65:52:87:83:6d:ee:88:ac:8d:6a:31:89:33:b7:
9b:7b:b3:3a:76:21:1f:9d:26:81:ea:5e:da:40:2d:75:48:b8:
0d:46:af:90:59:2d:5d:06:c9:2c:e3:55:d6:86:be:92:c7:be:
fb:c0:16:5a:91:d2:ac:dc:17:52:2f:8d:84:4f:24:6a:b0:f6:
de:4d:8d:17:9c:3d:3d:98:11:ce:20:c2:f6:fe:56:00:f4:75:
cb:ae:e5:0c:41:59:ca:5f:5f:88:76:ce:79:f3:3d:5d:3d:99:
7a:ce:b9:00:b8:2b:d4:e2:c5:ec:99:22:03:eb:f4:48:85:00:
89:ae:8b:36:9a:29:58:62:7f:c2:57:00:8d:d7:b7:33:c3:ae:
b0:e2:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:14 2026 by rpki-client