
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa
File: ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa (raw, json)
Hash identifier: gHxQHxerRZ+OugaHLGq6s1gfiYrrUgG8hNYUFy152o8=
Subject key identifier: 85:58:01:7D:77:D2:D1:71:A1:EF:B8:E6:FF:5A:62:18:35:B4:CE:8C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E086633AE8DFEB2A770BDC180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.96.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:33:ae:8d:fe:b2:a7:70:bd:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=529b6f86-515a-46a8-bbfe-c3fee6daf745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:d3:9a:f6:8e:fd:0e:80:9a:9b:57:4b:bb:
c8:c6:d9:20:ed:5b:da:1c:56:bd:55:83:9a:a2:a7:
0e:33:9e:c0:0e:0d:8f:48:4d:e2:d8:77:97:e7:1c:
1a:02:93:c1:aa:54:ef:af:d6:39:24:63:b0:b1:1c:
43:bd:fe:aa:e8:20:32:9b:0c:53:12:a3:81:d1:78:
c1:81:72:b2:11:57:57:5a:92:5d:48:ee:23:cc:e9:
61:c2:a5:16:33:ca:10:ac:90:4a:d4:aa:7e:cd:cb:
79:03:7a:de:e0:64:a3:c3:47:73:b2:9e:f6:1c:2e:
77:4e:26:b2:28:32:d8:32:e5:08:6d:77:a8:57:87:
ee:49:da:70:30:c3:df:af:b9:12:5d:db:b0:57:f5:
0b:2c:ef:a4:c1:39:8f:67:34:16:14:f5:27:99:b5:
10:85:41:26:19:0f:ff:1d:2c:4e:5b:b1:cb:42:52:
39:be:a1:77:7a:5f:8e:b0:51:74:77:38:1b:c3:be:
c9:2e:f3:77:31:f3:bb:1c:47:aa:5f:e0:cb:7d:05:
32:98:79:26:76:16:88:1f:b3:95:58:d0:10:cd:13:
12:47:8c:33:eb:09:15:85:6d:1e:bb:4c:78:2f:36:
dc:a9:67:38:a2:cc:73:2f:4b:ad:94:af:04:9c:7f:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:01:7D:77:D2:D1:71:A1:EF:B8:E6:FF:5A:62:18:35:B4:CE:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca5c65bb-078a-3bc4-90c4-d7cab5a676ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:dc:e1:5b:53:00:4d:a1:c1:fa:9e:e1:a5:ec:54:9a:c5:3b:
a7:f9:0c:9b:13:17:2a:69:32:5b:b8:d4:2d:1c:8a:cd:54:59:
db:74:cf:c4:fa:af:3b:c2:59:16:6f:aa:f3:c7:8e:f5:7a:39:
8d:6c:ac:4d:f8:bc:a7:73:9c:ab:f7:51:79:d5:ec:41:b5:a5:
55:68:be:8d:fa:26:35:dc:04:eb:b7:24:b7:02:89:2a:6e:f6:
59:19:ad:24:02:31:8b:12:de:07:2e:74:e7:90:62:82:eb:6f:
bd:52:ff:b5:8f:30:49:1c:07:18:3a:af:03:68:6f:e8:b2:69:
d7:8b:20:ce:78:dc:51:6e:53:20:81:2d:ac:9e:28:1f:57:70:
fe:63:59:95:9b:41:18:b5:a9:82:e2:6a:21:4d:64:17:0a:d5:
c3:bb:73:6b:78:36:3d:23:08:7a:ec:e8:0a:aa:5c:19:51:fd:
56:da:5d:c5:dc:c0:c1:f0:b5:33:8d:29:c9:de:79:66:6d:b1:
c1:16:b0:83:ba:b5:68:bd:51:65:83:a1:d7:a5:b2:b6:cd:91:
d9:f0:41:cd:68:01:61:e1:4c:42:49:a1:d8:f6:22:9b:ca:a5:
d4:a7:11:d0:3b:d3:d6:f3:0d:61:14:37:92:34:8b:7f:35:dc:
8f:76:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:16 2026 by rpki-client