
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d76625c-4abc-3d0d-abb9-c5888fe01491.roa
File: 9d76625c-4abc-3d0d-abb9-c5888fe01491.roa (raw, json)
Hash identifier: XcrNvbjtCAfE/B+raSkaC5f4hsZjngeCQPUdvlQvUp0=
Subject key identifier: A1:A6:83:36:EC:17:3F:D6:38:D8:C9:18:3F:B1:1E:F4:EC:5A:1E:36
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EA787BC001F82F35E50EF6E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d76625c-4abc-3d0d-abb9-c5888fe01491.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 43515
IP address blocks: 34.2.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:bc:00:1f:82:f3:5e:50:ef:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fb7cdb5f-279f-47af-a400-2722f0039c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:73:45:a7:e3:26:70:71:63:a6:99:40:a7:
96:4f:ca:b0:cb:77:97:c8:ed:8d:13:04:45:80:1c:
22:62:aa:cf:a6:d8:b3:9c:14:9b:d1:7c:28:c7:3d:
f5:76:2c:8f:9e:13:43:29:11:9a:d4:51:cd:d5:73:
44:2d:f4:b4:b0:f4:c5:62:ec:04:89:1d:d0:54:57:
b6:8f:73:66:a2:05:17:90:5d:3d:9c:2e:37:96:75:
2d:83:5a:59:96:22:01:6a:75:d2:be:eb:a7:3c:1d:
a4:a9:44:89:e0:d4:66:ad:f9:e2:df:39:15:7c:b8:
36:0e:99:ab:eb:b4:cd:20:51:1a:70:b5:dc:db:45:
aa:d6:aa:ac:62:fa:7a:9d:3b:a5:28:8a:13:2b:8a:
93:cf:0d:1d:71:b6:9c:be:e4:73:60:73:05:a6:3e:
87:48:a2:4f:d5:8c:c7:8c:a3:6a:48:2f:f9:3f:24:
cf:2e:58:a4:ce:e5:ab:d6:10:df:a4:a8:1f:95:8b:
6d:71:32:fe:25:c2:ff:76:1b:77:d0:ae:92:5c:76:
0c:59:d8:6b:ca:d6:02:e9:ad:bd:ab:fe:be:a0:f7:
43:e6:6c:8a:22:37:d8:05:7c:5d:21:9b:9d:2d:30:
87:73:8c:f6:53:bb:8b:23:17:cc:4d:9e:87:c1:f7:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A6:83:36:EC:17:3F:D6:38:D8:C9:18:3F:B1:1E:F4:EC:5A:1E:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9d76625c-4abc-3d0d-abb9-c5888fe01491.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:92:2e:f0:71:75:cb:08:8e:03:df:6f:38:4f:78:ad:21:a1:
33:e2:b8:17:1e:89:6d:ee:23:5a:7c:63:7a:38:49:30:9c:58:
82:f5:b1:dd:9e:61:c6:fa:02:f6:bb:db:8e:7f:21:eb:8e:e8:
00:78:ad:c7:ba:c4:5f:be:c1:53:2f:d9:6c:ab:a1:4b:1c:8a:
f5:23:b9:df:0a:10:bf:16:66:2b:c4:88:a2:33:ed:c2:95:00:
ff:87:b6:7b:08:16:b4:03:3e:44:4c:82:0f:40:5e:9e:7b:45:
db:4b:23:4b:8e:53:45:8e:fa:13:ed:7f:38:23:c6:dd:0d:87:
3b:e6:e1:6e:69:69:27:2a:6b:42:fd:77:44:99:e4:26:25:66:
ef:59:87:85:48:15:f4:55:ff:3c:b7:57:a6:46:a6:e8:65:e5:
87:e9:e8:61:c7:46:42:a6:c3:20:dd:34:49:ec:43:a3:14:ae:
99:ad:80:7a:1e:88:a9:ae:48:97:be:b2:b5:1f:4f:04:05:6d:
bc:db:e4:1f:ae:fc:22:71:ee:e3:5b:28:e7:8a:a1:33:86:75:
cd:53:34:db:ae:aa:2a:8c:17:76:de:d9:e4:70:87:52:0c:63:
7c:71:30:a2:e9:02:f4:77:d7:42:67:5a:26:0d:6b:ba:56:17:
60:c0:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:19 2026 by rpki-client