
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa
File: 9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa (raw, json)
Hash identifier: yiLydgsWIbsNv1ggaFwufC53LSYniDmZ5a8k4+3iTjE=
Subject key identifier: BB:E7:56:65:9B:D1:C4:FF:04:F7:5A:35:4A:4E:3D:27:B7:45:BB:2B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3D815C3D115951071F4300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 34.68.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:81:5c:3d:11:59:51:07:1f:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=3866522c-a8f8-4401-ad04-036802af73ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:cb:13:72:61:e9:3f:4d:53:f4:0e:29:06:
f9:bb:15:72:90:06:f6:03:5f:0e:7b:4d:3e:5e:d8:
3b:66:92:63:83:25:0d:79:56:f0:01:9a:0c:d3:b3:
e4:8b:47:bd:bb:fa:09:4c:0f:34:ce:5a:c8:10:7f:
2b:c4:4a:a9:13:6e:d8:97:99:1d:7a:6c:83:ee:fa:
52:35:35:02:c8:94:f2:f0:f3:31:8b:9a:a7:91:af:
c6:fb:31:33:af:0d:af:8d:d3:b5:32:1b:f2:00:af:
d2:7e:89:0e:61:f5:fd:b6:19:d8:53:8c:13:ba:b1:
8a:22:26:76:c5:e7:af:c6:42:ba:bc:71:dc:45:4d:
9d:0c:ca:c1:5f:67:86:21:a0:c6:f4:96:f8:46:8e:
d5:ee:dc:67:c5:44:3b:d6:5f:88:cd:23:2c:76:d3:
25:54:32:4b:7a:74:c6:f5:bc:7e:04:9b:e4:c4:ee:
fc:cd:3a:6a:fb:48:e0:3e:b7:b7:73:f0:33:a9:91:
49:30:10:1e:30:d6:68:3f:5f:0d:23:8d:cb:5c:2d:
89:2f:c6:01:e0:35:39:b9:bc:8a:f5:3f:24:cf:81:
32:df:16:60:7b:fa:77:9d:26:e7:92:8f:1e:92:13:
bc:fa:e0:e7:42:e5:30:86:bb:c5:d7:fb:9f:06:2a:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:56:65:9B:D1:C4:FF:04:F7:5A:35:4A:4E:3D:27:B7:45:BB:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:17:c0:bc:51:ae:7d:2f:1e:92:d5:08:2b:44:5f:fb:7e:0e:
3b:78:c2:a5:34:d3:c8:63:52:07:df:e9:53:0f:38:c1:db:8c:
ac:fa:f1:2f:d8:0c:ae:11:70:38:d7:26:92:cf:53:ba:fa:e3:
2b:d8:76:86:a5:98:6b:b3:18:fe:41:d5:84:30:75:ed:ab:0b:
f2:32:01:ab:52:9d:85:63:28:5f:27:51:1c:80:24:3e:0d:30:
04:af:e5:40:23:b3:ef:bb:ff:b5:0c:bb:99:f5:23:bf:9d:b9:
be:a8:81:13:44:69:5e:51:f9:4b:a9:14:a4:7f:44:ba:55:06:
ce:57:e5:0a:a0:8e:15:17:4a:9e:e6:07:ed:91:f1:c6:8f:38:
25:e9:e8:9b:e4:6a:42:3c:82:9f:1e:67:c0:6e:b9:36:12:03:
70:db:75:81:5c:04:81:f8:d2:df:34:ad:ce:66:87:d8:1a:5f:
c8:17:6b:96:17:63:85:6f:e4:2f:31:60:b0:b1:0b:00:61:80:
90:85:a4:95:e6:b9:eb:a7:97:7d:a2:81:ba:41:04:a1:9d:64:
a2:e0:2b:27:4d:cc:78:1b:db:09:88:6f:51:64:18:08:75:f5:
87:f7:d9:31:96:cb:4c:ba:72:6c:7a:15:60:18:41:99:42:56:
7b:64:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:36:48 2026 by rpki-client