
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3f9b34c-c500-362e-b82d-d0622edcae4b.roa
File: a3f9b34c-c500-362e-b82d-d0622edcae4b.roa (raw, json)
Hash identifier: mxXIPh5+ELtWk3x+SrJxf7wsyWFhpVIe1NMN+8Ilf5Q=
Subject key identifier: 5B:83:A0:46:02:7F:6D:9F:8A:D0:0E:AB:2B:56:F8:12:ED:22:1B:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EA787B073FE08FCCA9DEDBD73
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3f9b34c-c500-362e-b82d-d0622edcae4b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 43515
IP address blocks: 34.191.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:b0:73:fe:08:fc:ca:9d:ed:bd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=335d2232-a0d0-4ffd-b707-24ceca8617d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fe:49:1c:d4:90:6b:49:c8:63:c0:aa:75:bf:
a1:40:16:ee:8b:c7:dd:29:bd:5b:1b:44:ab:c6:ff:
63:d2:b9:ea:b0:64:b8:82:27:89:6b:ce:25:64:6b:
cd:a4:f8:a1:f4:3a:b4:73:f8:bd:96:73:36:6f:1b:
8b:d6:f4:63:db:eb:88:cf:e7:6b:73:c1:c0:34:1c:
b9:83:61:56:17:e6:ea:81:2f:72:73:a6:fe:af:b1:
67:56:b1:79:e4:fa:ff:fe:fc:19:39:59:2f:b7:90:
a7:52:16:5c:98:90:f3:28:bb:6b:db:fe:14:35:f9:
1d:e4:dc:8c:36:da:79:60:60:02:09:e1:8f:59:23:
3e:2c:78:e3:a6:ad:ea:88:bd:76:0d:18:ff:8f:ed:
6c:12:ab:3a:fb:75:6a:d2:66:c1:c3:c6:07:8b:2a:
cc:93:74:75:8d:11:38:69:11:16:79:86:06:c7:72:
b2:fe:4e:b2:56:f6:e2:f1:27:c1:39:45:f3:e8:00:
74:a9:dc:c2:71:05:9d:2f:4b:63:8f:de:bc:b8:c6:
9b:c9:ec:6e:11:11:01:aa:56:27:dd:b7:12:96:e1:
11:3c:70:6b:1f:69:aa:12:34:fb:30:d9:85:d7:84:
4e:a5:d9:85:c3:4d:53:ba:42:99:c8:7c:f2:55:4d:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:A0:46:02:7F:6D:9F:8A:D0:0E:AB:2B:56:F8:12:ED:22:1B:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a3f9b34c-c500-362e-b82d-d0622edcae4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.191.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:d5:74:9a:e3:2d:b9:1a:c3:c2:cc:1e:64:e7:eb:eb:21:16:
54:3f:ac:14:0a:2c:a9:8d:1e:fe:8c:b5:1e:1a:86:a8:12:50:
1d:0a:d8:d7:1c:90:90:0e:4e:94:e5:e0:98:7e:5b:87:d6:db:
ec:26:9d:65:f4:10:41:7f:a5:32:e6:db:9d:b9:a9:51:d1:e4:
00:25:62:09:26:4c:11:51:49:e5:2d:27:73:8e:f7:3e:7f:25:
d8:ec:ea:03:c3:44:98:6d:af:0e:55:3d:33:42:a1:27:77:cb:
59:6d:f2:35:ef:f5:c7:95:db:05:93:aa:2d:50:96:63:d5:93:
a3:a7:98:e5:af:44:b2:4b:39:00:c3:a6:98:52:80:81:6b:c1:
cd:fc:ec:67:50:6e:c9:25:6d:ec:3a:17:60:94:f0:eb:d2:7a:
e3:ce:02:5b:57:5b:6a:05:48:0a:36:ce:0d:37:6c:f1:50:e7:
b0:39:9e:fc:c8:ba:8d:fa:ca:73:36:8c:87:5a:2c:14:e8:12:
8e:4c:d7:6c:ce:c6:9c:a4:14:28:65:77:2a:54:9a:26:ac:e3:
b6:c1:05:eb:a1:83:f9:0a:39:91:e9:a6:c0:e0:33:51:dc:2d:
70:42:16:13:11:46:53:47:1d:ee:97:28:bb:fb:c0:ac:94:04:
cc:ec:5f:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh7Bz/gj8yp3tvXMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzM1ZDIyMzItYTBkMC00ZmZkLWI3MDctMjRjZWNhODYxN2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP5JHNSQa0nIY8Cqdb+hQBbui8fdKb1bG0Sr
xv9j0rnqsGS4gieJa84lZGvNpPih9Dq0c/i9lnM2bxuL1vRj2+uIz+drc8HANBy5
g2FWF+bqgS9yc6b+r7FnVrF55Pr//vwZOVkvt5CnUhZcmJDzKLtr2/4UNfkd5NyM
Ntp5YGACCeGPWSM+LHjjpq3qiL12DRj/j+1sEqs6+3Vq0mbBw8YHiyrMk3R1jRE4
aREWeYYGx3Ky/k6yVvbi8SfBOUXz6AB0qdzCcQWdL0tjj968uMabyexuEREBqlYn
3bcSluERPHBrH2mqEjT7MNmF14ROpdmFw01TukKZyHzyVU2RhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuDoEYCf22fitAOqytW+BLtIhuwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTNmOWIzNGMtYzUwMC0z
NjJlLWI4MmQtZDA2MjJlZGNhZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr8YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPVdJrjLbkaw8LMHmTn6+shFlQ/rBQKLKmNHv6MtR4ahqgSUB0K2Ncc
kJAOTpTl4Jh+W4fW2+wmnWX0EEF/pTLm2525qVHR5AAlYgkmTBFRSeUtJ3OO9z5/
Jdjs6gPDRJhtrw5VPTNCoSd3y1lt8jXv9ceV2wWTqi1QlmPVk6OnmOWvRLJLOQDD
pphSgIFrwc387GdQbsklbew6F2CU8OvSeuPOAltXW2oFSAo2zg03bPFQ57A5nvzI
uo36ynM2jIdaLBToEo5M12zOxpykFChldypUmias47bBBeuhg/kKOZHppsDgM1Hc
LXBCFhMRRlNHHe6XKLv7wKyUBMzsX/c=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:59:45 2026 by rpki-client