
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa
File: a1f65c37-2173-3530-83d3-e99277d5c356.roa (raw, json)
Hash identifier: b6O648ZusaqNRmvmH3Yn16+KwoCbnK0zIcPPbigRlvw=
Subject key identifier: 44:C5:94:CA:C2:C4:BE:BF:58:BB:C5:44:EF:E8:D4:B2:4E:65:12:C7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E0005F5A9DECA5FA5963A91C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 104.155.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:05:f5:a9:de:ca:5f:a5:96:3a:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=2f8982f2-a773-44e8-8ba4-a4bbbda17434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:a6:53:fe:e5:43:73:28:76:60:c7:36:a4:
56:00:50:0a:0b:69:d0:67:ae:53:ed:61:e4:a1:22:
32:bf:11:3d:3a:04:21:84:53:05:89:45:dc:ea:d0:
8f:93:f8:5b:0f:aa:98:66:36:ff:3a:91:a3:a7:4d:
27:77:5f:9f:41:b9:ef:08:a9:0e:c7:eb:9c:b2:2c:
60:24:f4:c0:04:8a:04:ce:a3:17:7c:4d:f0:99:58:
4d:63:f0:53:e4:32:45:2a:54:71:09:0e:a9:6d:8d:
2a:8e:74:f0:bd:cd:aa:97:b9:2d:ef:46:0b:0b:a1:
9d:3b:c5:93:40:a4:aa:ce:a4:46:bd:69:7f:b5:48:
b8:e3:a5:3c:73:3a:c1:37:2e:13:ed:da:fa:98:a9:
e2:02:68:4e:f1:a1:3a:b9:25:86:d9:46:75:62:73:
1e:9b:72:74:66:b6:28:bf:a7:8b:4a:e2:2d:9e:0c:
3a:66:f6:c0:7d:48:7e:c6:de:bb:65:c5:9e:ce:d2:
08:e5:81:3e:d6:61:c5:10:13:7c:67:f4:5e:6c:92:
ca:15:53:96:08:9e:8e:88:5c:83:5c:3b:81:ff:66:
51:da:a2:38:76:06:fe:6f:9c:2a:9e:40:ba:aa:68:
21:80:c5:40:cd:1c:8b:ef:87:1b:2a:f9:2b:9b:6c:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C5:94:CA:C2:C4:BE:BF:58:BB:C5:44:EF:E8:D4:B2:4E:65:12:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.155.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:9c:e0:ff:b2:c3:40:fc:2e:68:c1:7b:02:11:b9:7b:1a:0b:
c3:dd:05:62:9a:55:3d:db:26:1b:a3:75:ba:c8:f2:a5:9d:e8:
16:65:33:e3:bc:7c:b9:cd:68:4f:93:b2:b2:c7:62:3c:34:23:
1b:1d:a6:64:b4:e5:02:1d:5f:b5:7f:a4:1a:08:ce:bd:b6:3c:
ca:4a:8d:65:ce:e0:b0:27:c1:3a:db:71:56:c9:4a:b7:2c:c1:
e6:31:af:94:24:3b:23:9a:65:23:83:87:0f:6e:42:ce:5d:6a:
c9:f0:82:b2:b3:b0:7a:71:9e:d6:95:77:46:70:94:11:e7:4c:
6c:19:02:61:8f:a7:16:f6:05:9a:eb:78:0d:8e:2a:7d:f7:87:
0f:91:63:67:25:47:67:9e:6e:31:1a:05:38:46:81:7e:e6:0c:
ba:b2:da:e6:da:37:90:6f:f1:58:50:87:ba:e1:fd:3c:af:9f:
15:0b:69:35:d8:2d:82:3d:f5:03:b1:05:da:69:0e:3e:8a:f9:
93:de:c0:1b:0c:73:bf:ea:a7:52:49:48:da:58:f0:f2:ff:bd:
e7:20:23:d2:bf:48:0e:24:5c:4c:5e:85:ae:24:3e:41:01:38:
51:fc:19:a3:04:90:92:5d:7d:ad:5f:46:b3:dd:d2:90:d7:1f:
24:cb:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:49 2026 by rpki-client