
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa
File: cd5516a8-2126-3d90-abde-ee6b599139ab.roa (raw, json)
Hash identifier: yrFyr8DrZ0AnOlzTJ8sKvc8bl+LpZKMEuNErFyInHg8=
Subject key identifier: 60:21:D6:B1:E1:30:33:72:95:C6:62:64:EF:A1:D1:0C:A5:16:8E:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E0866426ECEBFAABBEFADCC80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.99.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:42:6e:ce:bf:aa:bb:ef:ad:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=9b2f0cf3-1c27-4093-9ab1-b20757d27276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:6b:bf:16:ae:f7:96:17:0c:22:f8:58:58:
c3:40:01:62:91:1b:e6:67:1d:c4:f7:58:f0:7c:4a:
2e:3d:ab:ee:77:2f:d1:1b:1b:af:4d:fe:38:7c:74:
a0:88:04:41:be:75:9c:f1:4a:77:2f:07:45:e7:50:
f1:86:53:f3:bb:a4:de:7c:97:80:71:dc:9d:1d:53:
c8:b4:05:d4:cd:bb:5c:41:99:c7:d1:c1:fa:1a:92:
72:f5:7f:d1:b2:07:4f:d7:e0:ad:d8:15:41:cd:0d:
86:62:85:3d:93:15:f4:b0:6b:65:db:cf:1f:d1:05:
6c:3d:1d:09:70:2e:aa:00:48:3d:6c:b9:1e:fe:a2:
0e:2f:f6:62:a2:8c:f4:43:67:b8:41:3c:2e:3b:0e:
30:6f:e5:35:1c:c4:10:32:b4:61:5c:43:c2:45:cb:
c5:a1:78:4b:e9:8f:00:ad:da:fc:02:49:3a:17:d5:
ba:b8:36:6f:09:62:08:13:79:6b:6f:20:fd:95:c2:
65:2f:f5:26:e7:bf:dc:b9:90:07:43:e9:67:26:63:
15:8d:6d:6c:dd:d0:fa:fb:54:99:c7:51:c0:e0:6e:
d8:2f:dc:aa:6b:3a:e3:3a:5b:38:54:ca:52:7b:bb:
cc:9a:3a:8c:4e:45:b6:be:19:c0:ce:06:a6:7e:4f:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:D6:B1:E1:30:33:72:95:C6:62:64:EF:A1:D1:0C:A5:16:8E:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:7a:90:f4:2f:c0:43:47:0f:b2:5f:0b:ac:97:68:80:fa:bc:
a1:7c:36:55:8d:3d:d9:bc:2e:1b:05:75:4b:a8:da:e6:70:82:
3f:4e:7d:a2:f4:59:9c:fc:b1:66:30:54:09:37:ab:4f:40:37:
7a:17:7d:2b:5e:c8:f5:75:f8:a5:db:53:18:ff:00:1c:65:3c:
b9:8a:7e:1d:f0:46:0a:72:fe:1d:d1:87:38:97:22:dc:43:bc:
c8:f3:64:86:39:2b:a4:0c:b7:99:e8:18:81:47:57:1a:f7:a1:
99:d1:01:d4:1e:d8:f7:02:9f:f5:08:65:b6:28:19:09:57:f5:
b4:f1:99:5e:f1:39:21:3e:36:6a:99:1f:6d:65:68:16:b4:26:
27:e5:3e:30:42:84:11:28:67:8d:fd:3f:30:d5:c2:a4:a6:04:
f2:f5:1e:e9:57:9d:f1:34:1b:77:b9:70:0a:77:d6:06:b7:10:
23:04:12:8f:b2:f5:be:ff:bb:3d:6a:3b:76:31:f4:cf:24:8b:
7a:19:cb:51:1a:3b:3e:51:ab:14:48:10:cf:f2:44:d0:12:3f:
73:d9:fd:26:75:e9:ec:ce:bf:40:6b:da:48:ce:66:90:b8:4c:
f4:4f:6f:26:34:0d:2d:7c:7e:af:98:98:ca:c8:50:5f:9d:58:
72:42:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:58 2026 by rpki-client