
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa
File: 626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa (raw, json)
Hash identifier: OMExjtP4YM/NxhkXQtlkYzZ4Z/TvySnAoxsH3cNRVLk=
Subject key identifier: 2B:D8:82:3E:19:43:94:9C:B5:B5:01:7E:B5:0A:7A:F6:6C:E7:8C:29
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DC99493116241C73A3740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.70.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:c9:94:93:11:62:41:c7:3a:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=ded047b3-9c6e-4c4e-8739-c73b23e80c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1c:28:12:c2:22:f2:71:40:24:8d:3a:8e:10:
48:f1:5b:12:57:98:cc:a8:55:21:fa:40:f0:e8:60:
fd:19:7b:14:77:5e:61:42:37:4c:90:86:c7:ad:3a:
13:18:89:2a:61:37:cf:f4:05:a6:83:17:4f:a1:f3:
8e:aa:12:6d:25:26:5f:55:63:2a:43:ea:83:44:8d:
56:98:61:bf:63:37:31:a3:3b:20:51:dc:fb:bf:59:
71:16:59:46:1a:c0:52:ad:a7:0c:93:fa:48:85:61:
02:69:43:6f:06:03:67:ba:0b:89:cc:10:35:0b:5d:
7a:c5:1e:83:61:9f:22:62:6f:04:8e:70:7e:9f:1d:
9b:78:17:7a:27:61:90:5c:f0:2a:5d:b7:a6:cb:63:
56:2c:29:07:8b:94:67:54:3e:8e:c7:a7:43:7e:a8:
80:1f:e0:8d:06:ed:5b:ab:dc:c8:97:ef:99:36:dc:
d9:2e:09:5a:13:64:69:1d:c9:a4:10:a9:ce:4e:50:
cd:ad:92:5e:a9:c4:f1:45:b4:7b:c2:52:be:83:10:
10:61:15:92:85:0d:04:ae:8e:6b:70:88:43:5f:30:
39:a7:af:51:76:40:91:23:48:70:97:a1:fb:7b:30:
2c:3b:10:12:3b:e8:92:fe:19:cc:6b:54:f0:c5:d5:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D8:82:3E:19:43:94:9C:B5:B5:01:7E:B5:0A:7A:F6:6C:E7:8C:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/626fa3be-cc4e-33cb-bd8b-bcc061b3b215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.70.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:22:d1:39:76:08:e2:cb:a2:86:52:0c:5d:21:9e:b7:74:54:
05:dd:38:e7:30:4e:13:70:e2:f4:c9:3e:7b:56:3e:37:b0:17:
56:89:76:7f:ee:b1:e1:d4:ef:40:43:22:a3:5f:ac:1b:59:d4:
bf:f3:25:94:ec:62:52:20:bb:63:bf:0c:5a:5f:cc:47:84:db:
08:b6:36:e3:1e:23:87:f0:f6:71:2e:57:ad:6c:6b:65:71:cb:
c3:83:10:0d:cf:a5:47:51:fa:d2:0a:ee:fb:94:ad:0c:ab:c3:
ff:d0:97:46:24:5d:4b:d4:72:8e:ba:aa:6a:c1:18:84:d2:60:
a2:aa:7b:c5:3b:35:81:5e:9a:e8:c0:1e:1a:e6:66:d4:6e:b0:
4d:7f:a5:93:13:80:49:aa:b8:e0:b8:03:b3:ba:c1:2b:e9:ae:
82:b7:ff:0b:3d:62:d5:56:9a:a9:7a:82:6f:2a:83:52:2d:23:
75:d6:31:16:01:23:e0:74:ef:8e:e1:d4:d9:e0:01:fe:6c:0b:
b6:8a:25:3e:00:ed:90:84:8b:21:89:23:e9:1c:99:d6:9e:ea:
5e:c7:c5:78:9d:77:9b:8b:fe:19:e4:8e:2f:2f:51:ab:c4:12:
04:84:b5:85:aa:2c:c7:28:56:02:ef:26:c4:cf:02:82:25:b3:
30:b9:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:27:04 2026 by rpki-client