
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa
File: 2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa (raw, json)
Hash identifier: 3aJygcL+L/Su1PwYRBmWRZDQWpfMq9hlJ1qxxi0R4d0=
Subject key identifier: DD:5B:7C:59:91:AD:A4:FF:A9:DA:8C:D8:9B:3C:32:5E:63:9B:46:AF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E0866023B6878F91462463C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.72.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:02:3b:68:78:f9:14:62:46:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=2ac86710-07ee-49d2-9fce-91f18743552e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:8f:de:61:c0:70:7e:e5:78:13:e0:28:67:
1b:4e:60:21:c5:e9:1c:b4:a1:52:8d:ce:94:69:d3:
c6:cf:0c:75:45:eb:c1:fd:2a:d5:d4:c7:a1:e6:f4:
51:d6:5b:d6:7d:25:2b:17:4a:3d:2e:29:b1:41:df:
2f:7c:d9:63:4f:70:92:91:c7:68:bf:9b:5f:cf:8a:
b3:b2:07:de:00:5b:a0:ac:7e:4a:51:b8:15:e7:cc:
1a:25:47:e9:d1:62:6f:62:5b:5d:a4:c9:ac:30:4e:
97:dc:b1:53:d1:65:81:11:7e:b3:2d:32:32:1f:c5:
33:7f:6a:24:3d:c1:6f:54:d9:79:0d:df:c5:5b:02:
9c:70:4c:9c:06:cf:95:72:ce:0b:b0:f4:d1:79:d1:
25:cf:e1:3b:ba:c8:af:e1:a4:11:bc:72:56:3d:91:
58:60:d8:0b:74:2c:bc:4c:4d:a3:1f:78:89:83:f3:
b1:64:3c:b8:6a:eb:f5:f4:95:dc:98:55:ca:25:46:
4d:f5:da:3b:73:7d:26:a3:d6:4f:3b:d0:47:21:4e:
83:f6:1f:d4:93:a6:93:38:cb:3d:fe:5b:b9:4e:2e:
be:83:05:ac:b8:10:9f:a3:85:b6:7d:2b:ec:07:b1:
82:9d:c5:d8:90:0e:5a:a2:30:16:70:65:c0:e3:2a:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:7C:59:91:AD:A4:FF:A9:DA:8C:D8:9B:3C:32:5E:63:9B:46:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:cf:c8:0e:04:3a:93:8d:59:88:03:7f:5c:35:43:a2:0a:fd:
41:37:9e:e4:e1:58:89:df:9b:17:ac:f9:a4:06:5f:d6:2d:9a:
1d:44:67:af:c4:5a:84:df:0b:5e:72:9a:c1:30:a3:e9:4f:57:
cc:d9:89:0e:38:0e:e9:1b:47:a6:a6:3d:e0:76:55:d3:e2:4d:
b3:93:0e:ef:e6:b1:5d:96:53:22:87:a9:34:5c:a3:0a:19:38:
6b:2d:f5:58:c4:65:76:5a:55:0a:9f:18:ad:00:3d:09:3d:65:
f1:4a:00:d6:0d:7a:3b:47:90:91:11:bb:4e:22:9a:07:4e:cb:
9c:86:d9:cd:26:d4:db:1f:07:70:ba:57:01:65:2f:cd:0b:fe:
7c:da:4e:da:77:39:67:13:ca:fe:8a:9e:0b:0b:99:91:f9:1f:
e5:d3:c3:38:87:96:1e:61:a1:40:b3:2a:16:4d:38:7d:3a:c7:
3d:62:1f:17:ad:c5:19:e6:9f:96:2b:b3:e6:76:f8:e2:db:80:
90:d1:17:fa:3f:00:ae:3d:4e:21:41:46:d2:d0:1c:02:6a:da:
de:7e:35:63:8f:c1:33:a1:9b:67:3a:3b:6e:3a:a6:8e:92:d3:
3e:64:2d:21:37:4f:33:7d:20:97:d8:5e:5b:9c:a3:04:4a:da:
ab:65:3c:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZgI7aHj5FGJGPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
MmFjODY3MTAtMDdlZS00OWQyLTlmY2UtOTFmMTg3NDM1NTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36SP3mHAcH7leBPgKGcbTmAhxekctKFSjc6U
adPGzwx1RevB/SrV1Meh5vRR1lvWfSUrF0o9LimxQd8vfNljT3CSkcdov5tfz4qz
sgfeAFugrH5KUbgV58waJUfp0WJvYltdpMmsME6X3LFT0WWBEX6zLTIyH8Uzf2ok
PcFvVNl5Dd/FWwKccEycBs+Vcs4LsPTRedElz+E7usiv4aQRvHJWPZFYYNgLdCy8
TE2jH3iJg/OxZDy4auv19JXcmFXKJUZN9do7c30mo9ZPO9BHIU6D9h/Uk6aTOMs9
/lu5Ti6+gwWsuBCfo4W2fSvsB7GCncXYkA5aojAWcGXA4yqzbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1bfFmRraT/qdqM2Js8Ml5jm0avMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmY4OWYyZmEtMTMxMS0z
YjY4LThhZDktM2ZhY2NkZjc0ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPPyA4EOpONWYgDf1w1Q6IK/UE3nuThWInfmxes+aQGX9Ytmh1EZ6/E
WoTfC15ymsEwo+lPV8zZiQ44DukbR6amPeB2VdPiTbOTDu/msV2WUyKHqTRcowoZ
OGst9VjEZXZaVQqfGK0APQk9ZfFKANYNejtHkJERu04imgdOy5yG2c0m1NsfB3C6
VwFlL80L/nzaTtp3OWcTyv6KngsLmZH5H+XTwziHlh5hoUCzKhZNOH06xz1iHxet
xRnmn5Yrs+Z2+OLbgJDRF/o/AK49TiFBRtLQHAJq2t5+NWOPwTOhm2c6O246po6S
0z5kLSE3TzN9IJfYXlucowRK2qtlPBE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:16:36 2026 by rpki-client