
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa
File: 890641f9-0aae-3a09-b375-d5faed4942f2.roa (raw, json)
Hash identifier: UDG9CT4syqxDRGLhLoMgqarojPxsCDVibMp9jZQRYb8=
Subject key identifier: 10:17:86:DA:8E:F6:FE:2B:D3:52:CE:24:2C:06:76:1A:07:EE:A1:1F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E0865F2402E3AFA09161C2F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.64.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:65:f2:40:2e:3a:fa:09:16:1c:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=44cd086b-a3c8-4355-87c4-3455bef66b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:bb:a6:e6:67:9b:f7:bf:66:67:18:f3:c9:
29:1e:0d:36:5f:ff:41:97:3d:49:28:90:88:9e:a3:
7c:79:b4:b3:44:76:79:e9:84:06:8a:fb:0a:7d:24:
f8:fd:cb:3e:52:dc:14:f3:d8:f3:ca:23:57:16:fa:
72:82:fe:50:c8:e0:82:b7:44:85:2f:db:79:dd:0d:
ce:7f:1f:e5:2e:eb:b9:45:4b:92:03:0a:58:a9:e9:
a6:ac:52:25:51:9c:cc:36:ab:f6:c5:f6:fa:6b:6e:
ca:5d:f3:b2:cd:f4:98:2e:70:52:59:e1:0d:49:fd:
54:15:48:af:93:7f:8a:9d:cd:95:f1:45:c2:a1:93:
f4:c7:79:c4:26:f5:a9:a9:c8:e7:5e:95:58:e1:99:
28:ff:e9:f9:11:cf:64:6e:85:5e:bf:30:59:bb:99:
ce:d2:8b:ad:10:91:54:63:b6:76:b9:1c:5b:07:d3:
2e:bb:db:15:c1:ce:2e:81:38:a5:14:e2:0d:f8:37:
bc:b3:ea:eb:2d:e2:73:a5:ce:c6:62:d6:d7:d9:64:
32:5a:b6:e6:e9:4b:85:5f:3a:53:3e:82:e0:88:5c:
96:75:fa:bb:bd:75:f2:54:a4:30:e2:0d:e7:3d:f3:
b2:6d:b2:6f:83:a0:30:d0:e3:cd:0a:4f:74:90:6d:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:86:DA:8E:F6:FE:2B:D3:52:CE:24:2C:06:76:1A:07:EE:A1:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/890641f9-0aae-3a09-b375-d5faed4942f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.64.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:dc:3f:fc:b1:52:0c:e6:34:f1:c3:1b:27:9e:8c:20:87:6f:
64:5d:a7:26:8c:0d:a8:1e:82:fa:3b:47:ab:4f:91:b8:da:ac:
04:a4:81:c3:3a:3c:04:41:32:c4:37:78:b0:b9:52:9f:18:d9:
fc:ac:f9:e2:5d:b7:8a:15:e2:e1:da:62:29:48:26:3e:3c:99:
a8:b3:22:8e:00:b6:08:b0:42:17:d5:e0:e5:d8:61:e9:34:c6:
c8:c1:d0:ba:a8:72:09:b1:2f:98:ad:fb:c6:0c:1e:7c:4a:e7:
3b:da:4f:ef:5f:2a:63:c0:72:eb:9a:39:d7:aa:e8:4d:40:b1:
e9:1b:e4:2d:c2:52:fb:b9:e9:ec:3e:f2:90:2d:14:24:d3:f7:
da:e8:a9:02:68:1d:c3:bc:14:7d:ba:f8:b9:43:f6:13:a4:24:
51:60:f1:e2:a3:6a:fe:99:88:86:a3:bd:59:23:69:45:ef:22:
34:73:de:64:49:f9:a5:0e:9e:3c:00:69:93:ba:0a:dc:da:54:
cc:61:2d:18:27:d5:51:43:af:cd:d0:8b:ca:41:87:2f:1f:20:
bf:19:11:d8:28:4d:0c:12:bb:82:b9:f8:a9:6d:01:88:12:ee:
d0:02:53:f6:f5:f8:ba:55:42:8d:e4:ef:e4:37:a4:b5:ab:70:
ab:92:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:38 2026 by rpki-client