
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa
File: 23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa (raw, json)
Hash identifier: WY+D69iBmA/Qy28Kev19vw19xmV7EUV/MTPE9yo3iUk=
Subject key identifier: A5:51:4B:19:DD:51:76:35:DF:67:5A:18:25:25:1A:95:53:41:9B:18
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E0865F70AEECD0B6D3E19B1C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.132.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:65:f7:0a:ee:cd:0b:6d:3e:19:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=4b2bc5f7-1037-47b6-8063-a479ab977193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e6:d7:52:74:a1:a4:0f:eb:84:a9:7e:b5:87:
1c:eb:32:4e:a0:68:ee:aa:f3:00:e3:a4:0e:38:d8:
cb:cc:11:62:f3:b9:a3:40:0e:8d:80:b9:06:8d:21:
8f:3f:e7:8c:8f:90:63:74:3e:a1:c1:fa:2d:68:76:
ed:d9:39:96:25:80:e5:55:c0:71:24:35:f6:21:82:
de:05:95:c7:17:a2:71:41:ff:b8:ea:a3:76:a7:df:
48:4c:95:c7:5f:d9:fc:b4:89:e1:13:b4:7b:8e:62:
28:74:db:45:c0:9f:38:7d:70:7a:6b:39:28:09:c8:
c7:b7:97:dd:0b:89:3b:e8:d2:d5:7f:e3:51:ce:5b:
a0:4e:60:b5:d9:07:c9:31:cd:ad:04:ca:0e:30:13:
1a:f2:2b:e7:89:cf:24:87:23:88:ae:15:fd:7f:7d:
c7:a5:2b:0b:d9:51:9f:bf:20:3c:58:6a:b5:90:16:
2a:3e:7e:99:ff:75:ef:d5:15:0c:3b:d3:36:03:eb:
22:f2:8e:89:18:af:6f:e2:55:fc:d3:dd:8a:8b:96:
24:c9:e6:a9:b7:c9:8b:68:9c:ba:af:b4:d8:ec:53:
d3:2a:7a:85:ff:0f:ad:e9:8b:01:00:b6:6d:98:c9:
1f:08:5a:ba:0e:fd:e4:68:c1:44:aa:69:3f:44:15:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:51:4B:19:DD:51:76:35:DF:67:5A:18:25:25:1A:95:53:41:9B:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.132.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:23:02:4e:aa:13:a7:70:c5:75:6d:9d:cd:d3:09:8c:f5:d9:
a7:43:28:80:04:be:9d:0e:0e:ba:32:e3:c0:30:5c:1d:e9:2c:
f2:26:f1:e1:ad:a3:65:a4:a4:af:fa:54:38:24:c0:0d:ec:b3:
8c:4c:9b:c7:9c:70:35:9b:7a:0d:90:48:c5:d8:3e:50:3f:46:
42:a5:ba:0a:41:7d:57:e8:82:d6:17:97:ae:91:f1:83:0c:a1:
2b:60:f3:60:46:cb:1f:72:54:74:e0:60:e2:ef:c8:cc:ce:60:
3e:35:ea:64:aa:89:e5:b7:10:7d:51:5d:c5:8f:01:b8:f2:c9:
e6:6c:d0:f7:e9:0b:ed:35:5f:71:7e:92:59:49:5f:fc:05:34:
f6:62:7d:7b:64:a5:1e:ab:fe:13:e5:2a:bd:f3:b1:55:9d:8d:
b6:59:b2:11:7e:e7:27:d9:04:88:5f:86:81:04:d8:e6:c1:51:
ad:47:12:a3:20:8e:52:34:1c:46:db:69:cc:7c:3d:74:ac:ff:
5b:16:9c:c6:0c:03:35:61:42:01:35:76:c9:67:e9:78:d9:5e:
e4:a5:5b:8a:37:f7:91:62:ca:3a:b6:fc:39:dc:28:ed:bf:14:
62:d7:f2:ee:ea:2d:a5:e5:b9:ef:38:fe:bd:e2:fe:87:33:e3:
79:b4:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:35 2026 by rpki-client