
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa
File: 2ff6b528-b620-3d32-bd31-d859ee65c282.roa (raw, json)
Hash identifier: UHJAgfEFbYRu5beOW9dRJH71W+JbZFCWGoI2qsUGCFY=
Subject key identifier: 1E:FE:ED:24:46:96:F4:2D:7B:C8:0A:CA:00:85:9D:5A:F1:1F:89:4F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E08660D6F1F7F3CCC82DDE600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.132.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:0d:6f:1f:7f:3c:cc:82:dd:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=b8381a91-9329-4dc3-b411-a9ba73301fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:51:8a:dc:ea:41:03:fa:80:29:99:a5:e3:
f9:42:30:42:61:18:7f:d4:b1:ab:30:58:62:2a:8b:
01:01:e5:a0:9e:ab:6e:25:29:c8:58:ed:3d:03:8f:
58:52:a1:03:47:09:83:d7:cb:3e:c5:d3:7a:9a:f6:
d0:96:69:2a:75:51:4a:e9:4b:0b:fa:d2:cd:df:52:
f2:34:c6:26:43:f6:42:63:de:eb:ca:3c:67:97:62:
dd:7f:bb:98:62:8b:c7:d7:96:fd:00:51:f6:6c:45:
f2:c2:2f:f8:6e:a7:35:10:0c:9b:be:34:7d:81:80:
f1:33:93:56:b6:87:6c:d4:b4:c7:d9:97:60:ed:91:
21:1d:75:7f:ba:fc:fa:f1:ac:13:7e:98:45:d7:29:
6d:14:fe:6f:bb:0b:c1:cb:58:f8:d3:b2:0f:fe:d3:
bc:88:45:c3:ce:96:3e:98:33:ad:05:15:bf:3b:b7:
7f:98:02:40:41:8f:c8:7d:e0:df:dc:7b:f5:db:c0:
42:c4:39:c0:07:46:ef:20:d7:a8:a9:86:b9:a3:3e:
fa:98:1f:5f:b5:d1:a3:c7:83:ef:4a:c3:f9:50:2b:
36:cb:a3:e1:7e:2f:49:bf:b1:bb:36:ac:de:fd:cd:
a1:90:67:7b:fb:e6:68:ee:78:3b:e7:a9:6e:7b:41:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:ED:24:46:96:F4:2D:7B:C8:0A:CA:00:85:9D:5A:F1:1F:89:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.132.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:c8:71:a2:f2:ee:a0:89:02:9b:fb:a6:bd:a1:fa:3b:b2:bb:
9c:9b:d8:f8:b1:0f:c8:13:a5:8c:b5:42:0c:06:dd:03:f4:2e:
19:e9:48:d7:25:e3:35:93:a0:7d:21:db:81:a3:a9:69:9a:87:
05:17:e1:74:0f:c2:f3:da:02:ff:8f:a5:00:78:e8:c7:dc:2f:
42:c2:fb:a1:15:7b:74:2d:03:8c:c9:0b:7d:0f:c2:b1:35:bd:
d0:73:9e:0e:e9:89:58:67:77:0f:cc:ea:b2:ab:15:d4:9e:99:
cd:b0:7c:76:3c:68:8b:1d:b6:f7:25:9c:4d:0c:89:df:05:3e:
c8:4d:2a:99:0c:c1:b8:ff:14:8e:f4:cd:7a:31:0e:af:df:32:
fe:87:b8:90:da:f1:52:d2:e4:4a:ca:4f:23:b1:fa:a7:bb:2e:
9b:44:07:10:ab:7e:5c:45:58:bb:32:a4:5e:3c:a6:f8:28:e1:
a2:3a:54:74:2a:fb:30:a5:bb:22:d8:09:01:d6:e6:14:52:0a:
35:81:39:81:90:1d:7b:4f:8e:f3:21:bc:0c:72:13:f4:88:88:
93:38:2d:82:2e:63:71:83:4b:0c:f4:6e:fe:60:a3:3c:37:3f:
7a:b0:67:83:11:18:95:b7:6c:12:a5:a4:c1:7d:1b:90:d1:c2:
6d:c3:5a:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZg1vH388zILd5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
YjgzODFhOTEtOTMyOS00ZGMzLWI0MTEtYTliYTczMzAxZmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3lRitzqQQP6gCmZpeP5QjBCYRh/1LGrMFhi
KosBAeWgnqtuJSnIWO09A49YUqEDRwmD18s+xdN6mvbQlmkqdVFK6UsL+tLN31Ly
NMYmQ/ZCY97ryjxnl2Ldf7uYYovH15b9AFH2bEXywi/4bqc1EAybvjR9gYDxM5NW
tods1LTH2Zdg7ZEhHXV/uvz68awTfphF1yltFP5vuwvBy1j407IP/tO8iEXDzpY+
mDOtBRW/O7d/mAJAQY/IfeDf3Hv128BCxDnAB0bvINeoqYa5oz76mB9ftdGjx4Pv
SsP5UCs2y6Phfi9Jv7G7Nqze/c2hkGd7++Zo7ng756lue0HDDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7+7SRGlvQte8gKygCFnVrxH4lPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZmNmI1MjgtYjYyMC0z
ZDMyLWJkMzEtZDg1OWVlNjVjMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbIcaLy7qCJApv7pr2h+juyu5yb2PixD8gTpYy1QgwG3QP0LhnpSNcl
4zWToH0h24GjqWmahwUX4XQPwvPaAv+PpQB46MfcL0LC+6EVe3QtA4zJC30PwrE1
vdBzng7piVhndw/M6rKrFdSemc2wfHY8aIsdtvclnE0Mid8FPshNKpkMwbj/FI70
zXoxDq/fMv6HuJDa8VLS5ErKTyOx+qe7LptEBxCrflxFWLsypF48pvgo4aI6VHQq
+zCluyLYCQHW5hRSCjWBOYGQHXtPjvMhvAxyE/SIiJM4LYIuY3GDSwz0bv5gozw3
P3qwZ4MRGJW3bBKlpMF9G5DRwm3DWkU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:51 2026 by rpki-client