
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa
File: cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa (raw, json)
Hash identifier: 6KPsIGAKF26wdSyuSruXQypmCoqbTow6N4Bm5Sy/Dh8=
Subject key identifier: 1E:79:11:B1:67:D9:55:C4:03:BD:36:80:85:66:A2:B5:B2:5E:B9:1D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D60E510AC8EF86CBD095E0280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 396982
IP address blocks: 34.158.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:10:ac:8e:f8:6c:bd:09:5e:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=8f3c3844-031a-4500-89ba-e0a45fcd84a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:75:c0:4c:9b:71:2e:df:57:ee:de:a6:69:da:
6b:a4:fe:b6:40:3c:03:f9:57:23:81:4f:27:d8:bc:
18:8b:87:01:b0:f1:c0:90:c5:1c:dc:d3:f9:2b:91:
cd:4d:ea:c3:72:a9:e3:64:93:14:b5:4f:83:8e:f2:
d1:3c:49:bf:4d:31:55:77:ad:81:e5:d2:44:d6:ad:
c6:80:ed:d8:4c:cc:f1:e7:43:5c:c8:58:53:84:2f:
57:26:92:26:58:45:3a:1b:af:40:69:18:93:4f:bb:
bb:9c:da:14:00:b6:22:39:98:64:de:4c:5a:84:26:
2a:46:b3:58:f4:0d:c2:e6:1a:a3:56:52:6a:c5:11:
98:ee:9d:98:0a:be:da:25:0b:d6:5d:fb:9a:c9:9e:
20:b9:1c:3d:ce:38:2a:96:57:dd:00:c8:9b:07:6c:
14:3d:13:c7:2d:7b:99:ed:df:7d:cb:f3:62:28:d1:
71:98:a3:0a:9e:ed:be:44:cb:12:06:52:e1:fd:30:
4b:38:8b:4c:b0:3d:fa:9b:68:6d:c6:e3:12:10:82:
5f:72:7b:1c:c7:87:9b:df:b2:09:03:5b:54:c8:c5:
97:13:4c:b8:b5:f8:90:7f:bc:f5:84:62:77:f5:bb:
07:17:e7:aa:92:7b:56:5f:b0:60:80:55:09:62:2d:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:11:B1:67:D9:55:C4:03:BD:36:80:85:66:A2:B5:B2:5E:B9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf872cc9-a86b-3ecb-b84f-06e73dff6867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.158.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4a:a4:08:b9:30:fd:7e:f9:a6:e3:26:13:cf:c7:1c:99:c8:
98:22:73:18:96:00:8a:4b:e4:62:20:be:6f:0e:04:3c:4a:4d:
2b:0c:28:0c:8a:a4:8e:7d:fb:f3:4a:e9:a1:00:77:15:bd:a0:
39:15:6e:86:50:1d:1d:7a:4a:ba:3a:88:1b:94:63:d1:40:11:
73:8f:75:5c:4f:2c:21:be:a9:c7:bb:56:b6:b4:2e:c9:83:b6:
89:71:7e:9f:95:23:b5:7b:ed:b5:58:b8:40:b0:ce:05:b6:44:
5b:d1:b3:12:ca:ed:87:9d:c0:2d:ac:f2:0e:0d:c5:73:8e:b1:
8e:52:6d:0f:fe:10:79:80:16:8e:45:be:72:1c:d4:19:8e:b4:
35:25:df:91:3b:a8:77:3e:4a:23:14:7e:cf:40:18:8b:d9:89:
5d:7b:6a:1b:1b:f8:87:ef:f9:0c:a0:0c:e6:64:57:b0:aa:f1:
8e:04:eb:67:6b:fb:ea:ea:7c:52:68:87:20:8c:55:0a:00:29:
48:0a:19:0e:8c:8b:56:f5:b5:81:f3:22:27:61:62:fd:95:79:
fa:b8:77:8f:6f:49:fb:bb:30:79:c6:65:73:85:46:17:92:de:
6a:ec:14:2e:b5:d8:76:cc:3e:8d:5b:c7:92:77:8c:40:c1:0d:
a1:3d:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:36 2026 by rpki-client