
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba6cfa8f-146e-300a-9a7b-5e201a789e5a.roa
File: ba6cfa8f-146e-300a-9a7b-5e201a789e5a.roa (raw, json)
Hash identifier: eYbiYL+vkKlxC11V95bWlSxBobaWcIZ24GZarhLXP1A=
Subject key identifier: 2E:5A:65:E7:BA:2E:94:A6:3B:2C:5D:19:E5:54:65:28:BF:D0:E1:2B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E9EB01AE736449D10C9AEC880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba6cfa8f-146e-300a-9a7b-5e201a789e5a.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 43515
IP address blocks: 34.3.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:b0:1a:e7:36:44:9d:10:c9:ae:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=c48cc768-0a11-4f44-af16-2e71bba6bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:53:b0:e6:4b:c5:b2:80:70:b8:46:bd:81:
42:6c:ec:4e:19:ce:3a:63:61:be:57:65:79:1e:97:
a0:e2:53:bf:21:f5:cd:57:68:3a:99:3b:b3:f8:b7:
44:e0:d7:ee:a1:9a:be:e5:e2:25:83:33:0f:f1:8d:
99:f2:6f:86:ed:9d:1a:38:40:39:63:e1:fc:fd:d6:
8f:ef:51:74:db:87:7f:38:51:41:f3:a1:55:ed:48:
f8:7a:a9:b8:bf:53:97:bb:e0:a1:11:a0:cc:3e:b3:
40:4b:88:4c:a4:1e:2f:02:d0:78:d9:02:f3:86:d1:
db:9e:40:d0:b9:ff:63:ad:0a:0f:9c:7a:e8:b4:60:
31:91:a3:c3:1e:fe:d8:d2:c0:39:20:de:eb:b3:c5:
23:95:d5:c4:35:d9:90:7b:ac:2b:13:db:d5:f2:8f:
92:d1:eb:6e:0e:15:2d:26:b0:bc:30:73:e4:8c:ec:
d2:a5:17:3b:c5:5a:25:c0:c2:df:2b:fa:28:b8:f9:
73:5c:ff:90:36:3a:a8:95:3f:b3:94:60:0b:26:7e:
10:22:c4:f2:ec:0e:0b:a4:d2:19:78:21:54:a6:b2:
54:0c:4f:25:92:62:48:75:de:ca:50:a4:8a:48:12:
e7:e8:96:a2:bf:fb:2e:57:45:ae:a0:fb:fd:30:10:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:65:E7:BA:2E:94:A6:3B:2C:5D:19:E5:54:65:28:BF:D0:E1:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba6cfa8f-146e-300a-9a7b-5e201a789e5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:63:32:5d:7b:ce:af:fd:9c:34:f6:d1:96:cf:7e:87:f3:99:
08:23:0a:86:b3:e2:87:cf:70:ca:2c:86:c5:0c:4b:08:03:62:
72:3a:4f:3e:e9:40:49:68:59:a3:c7:68:05:2d:91:e1:00:84:
4a:19:88:f3:55:e8:5c:8c:d1:1d:3b:7d:9e:19:c6:b7:f3:c2:
ae:34:6b:3e:e2:f2:19:87:ab:c4:c9:b9:e7:25:a2:d2:59:63:
7c:c4:a5:cd:ae:85:26:b7:82:bd:de:8e:a7:1e:f6:83:17:1b:
36:82:a5:e0:6c:e7:0a:c1:ca:c6:04:ce:e4:b2:72:9d:b9:09:
91:4c:d2:14:9a:f1:5b:d5:32:15:eb:08:a2:11:03:2a:38:76:
b7:9f:74:a8:a5:82:c5:00:e7:e3:e1:26:b9:29:f1:25:8e:2e:
b6:96:ee:75:90:57:8d:9d:72:00:1c:9f:54:35:cf:79:1e:5e:
c1:54:a6:d6:05:3e:a7:51:6e:33:02:a2:47:b3:83:c2:49:9b:
dd:8d:34:f8:e8:84:26:28:5e:bb:af:a8:64:8c:50:86:21:da:
2e:c6:5a:6c:c1:da:bd:a7:31:bf:00:ed:d2:3a:62:b0:b0:89:
e8:1c:11:ab:1b:32:55:d4:ba:33:49:12:8a:22:43:c3:23:19:
99:88:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:40:22 2026 by rpki-client