
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa
File: 86bed144-128f-3b1b-8d74-51dbbfc5c638.roa (raw, json)
Hash identifier: N+UmxHG4cSccc2sTYw0BeYVfRMVRLgsjaAMuE7MpdHY=
Subject key identifier: B4:5A:2D:49:E8:0B:61:66:09:BB:E2:27:40:64:72:42:29:76:F0:62
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584B6797980A06AA9C7F8C268280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa
Signing time: Sat 04 Oct 2025 01:00:33 +0000
ROA not before: Sat 04 Oct 2025 01:00:33 +0000
ROA not after: Fri 02 Jan 2026 02:00:33 +0000
asID: 396982
IP address blocks: 34.134.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:67:97:98:0a:06:aa:9c:7f:8c:26:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 4 01:00:33 2025 GMT
Not After : Jan 2 02:00:33 2026 GMT
Subject: CN=8e0a8aa3-0893-4311-8eb5-6e21e724e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:83:09:e1:ba:09:77:ed:78:8b:63:da:4d:
86:0c:75:8e:ca:e7:c3:e4:e2:fe:47:95:27:87:01:
22:90:4f:ee:59:0b:07:50:96:69:aa:c3:9f:8c:32:
71:73:46:f3:73:a7:b0:2e:3f:11:aa:b2:19:36:a5:
28:c1:03:be:79:a8:0e:62:e0:fc:95:1e:86:ea:f5:
d9:49:2c:bb:7d:71:8e:73:7d:36:58:2b:50:37:a6:
cc:f8:cc:da:c8:47:c2:de:c5:a9:f7:7d:e9:3e:e9:
e7:ef:84:12:1d:e9:dc:17:4d:25:a7:b5:a1:f7:4b:
46:5f:5a:95:04:f9:42:aa:87:2c:d2:6a:26:63:a4:
f8:f6:8f:99:0e:b0:94:98:a7:b8:72:1f:29:14:dd:
ff:80:8f:df:54:b9:c5:f8:fc:22:5d:f3:54:50:5e:
2e:88:c8:18:b0:c7:d4:cf:0b:f6:1a:cd:93:a9:d9:
09:21:73:13:cd:65:5b:1a:bd:e6:f3:18:72:c0:85:
c9:2a:20:78:82:2f:93:ba:c2:57:a0:fb:7b:71:0c:
f2:22:52:2a:a4:92:9d:f9:bd:fe:af:2c:61:25:c0:
f4:c9:23:b1:0d:90:0b:eb:8d:94:ec:43:c8:c6:19:
41:3f:82:a0:79:26:42:8c:79:01:0d:91:d0:70:cb:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:2D:49:E8:0B:61:66:09:BB:E2:27:40:64:72:42:29:76:F0:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.134.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:f5:73:5e:56:65:1f:24:6f:d0:6d:65:f2:fa:67:c7:19:1c:
7d:46:e7:96:57:20:b5:6d:20:3e:0e:2e:66:e1:bb:2c:12:36:
71:74:74:8c:3d:8c:0b:65:c9:3d:fe:fc:52:96:11:9b:6f:b3:
e9:7e:e5:86:ce:4d:74:cc:af:cc:ed:41:f2:e3:d5:3f:84:85:
a8:54:1f:fb:96:bc:52:f9:2c:db:17:49:70:91:4d:61:e0:b2:
7e:80:f7:0a:99:f7:d6:b0:56:b4:dc:48:96:77:00:4a:c2:ba:
79:2a:11:ab:72:9e:eb:cb:cc:89:c7:af:2c:a6:3b:46:c3:e9:
52:08:9d:f2:09:f3:79:bc:a4:06:a4:ea:4a:5d:9a:ba:63:50:
ca:87:a1:d9:40:9e:9f:6a:81:81:ae:82:97:9b:6b:3c:16:06:
7f:e5:f2:2d:bd:38:af:15:fb:24:d4:aa:ff:b1:e1:1f:e1:aa:
d5:1a:82:cc:fc:0e:9d:01:c4:b8:24:5c:61:de:e0:d9:51:20:
f2:5b:89:ea:e1:d2:67:4c:59:a7:78:94:36:47:05:97:2c:f1:
52:96:23:07:6a:fa:99:d2:39:4b:0d:be:18:8c:00:06:7a:73:
f8:f1:dd:cd:34:9d:49:dc:00:af:cc:d7:43:33:7f:12:f1:a5:
70:30:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:54:54 2025 by rpki-client