
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa
File: bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa (raw, json)
Hash identifier: x0Dp4fhABhAurn8Lo0puok3KpuGQ4VNC57mXBwG131I=
Subject key identifier: 65:04:CE:FF:E7:99:2B:20:75:A8:C7:5B:17:51:10:65:17:27:C7:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E0866506D059F6F4383292580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.158.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:50:6d:05:9f:6f:43:83:29:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=f689bf9a-16dc-48da-9b10-80433a803bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:24:e3:c8:51:74:ef:6f:86:d0:80:21:5e:
8c:b7:b4:fc:9d:ce:12:32:01:eb:53:94:ff:8c:40:
c6:0e:ab:85:66:8e:d9:66:ff:99:be:9d:fb:e9:0d:
a3:99:00:15:1f:75:21:cd:58:8f:8b:ab:84:a5:44:
7d:b3:df:aa:75:48:05:6e:da:2a:82:31:f2:04:a3:
10:19:3a:13:bd:66:d5:0e:f5:00:05:5e:3a:ae:70:
fc:e9:c3:69:b1:ac:b8:df:de:c9:68:ad:09:40:ed:
61:a1:d0:0a:ea:64:bd:d7:b7:f4:55:38:43:eb:ac:
98:73:a1:33:3b:83:85:79:8c:d0:f6:a6:07:b8:11:
61:25:55:3d:32:0f:69:e1:67:38:77:eb:60:2b:df:
ae:82:61:1c:6b:f5:80:b9:ef:a6:d0:fe:30:5f:a9:
f7:34:6d:1b:86:2a:53:ae:e8:26:f6:57:6d:6d:e5:
7e:66:75:d4:fb:a1:5d:b1:af:2b:65:ea:3d:a9:74:
8d:e9:ea:56:b7:6c:f5:b1:ce:36:c7:ba:8b:fd:d6:
00:93:85:c7:d3:72:32:62:4f:a1:16:44:38:4c:f8:
53:23:b4:33:9c:33:b2:85:19:db:3c:57:53:8b:b7:
76:84:d6:09:d8:fb:38:e2:0b:f8:5b:c6:83:23:bb:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:CE:FF:E7:99:2B:20:75:A8:C7:5B:17:51:10:65:17:27:C7:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.158.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:51:97:d8:24:44:0c:02:0b:2c:e2:76:d0:06:03:78:3f:d9:
9d:c3:4c:15:05:3a:9e:f3:e2:15:5f:b5:3d:b2:52:ab:a8:f0:
65:f9:d6:26:b7:f0:83:7b:95:bb:3b:2b:cd:6f:a5:2c:d2:ac:
79:b2:2b:2e:bb:b2:00:0a:b0:7c:dc:30:6e:5e:eb:de:b4:86:
dc:36:24:17:4a:a6:aa:1a:49:b5:62:16:07:98:38:04:1a:8e:
98:9e:22:32:41:34:4f:60:de:dd:5c:40:ab:47:a8:ee:23:14:
c7:01:31:46:b6:4b:2e:20:6e:99:f8:bb:45:11:b0:86:d5:db:
14:a9:42:5b:23:d5:ab:04:13:dc:71:c3:25:e2:c5:ec:6a:6f:
5c:e3:a9:8e:46:0d:e0:93:51:45:2d:8a:0d:d3:cd:99:0b:ad:
50:90:72:b6:c5:e8:25:32:99:2a:09:1e:eb:d8:a2:8b:d0:30:
fd:15:86:0f:06:bd:a4:38:f1:63:12:d5:77:dd:c0:ae:ef:a8:
88:83:7d:f0:03:26:08:44:8f:fe:65:17:b3:aa:d4:a7:7b:a6:
76:46:17:eb:e3:75:a0:8d:e7:2e:ea:08:23:10:63:07:62:b7:
9c:69:be:16:39:fc:c5:16:c5:fd:a5:0a:56:da:c2:f2:09:eb:
35:ba:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:25 2026 by rpki-client