
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa
File: d45e4854-2481-3de3-ae93-5079464c2fae.roa (raw, json)
Hash identifier: jY+SRw2WloLMWGQvZjA5/W8yD/VTm6OWy132LWeuX4g=
Subject key identifier: 3D:8E:94:03:8B:10:88:E1:41:49:89:7C:DB:08:BC:E2:BD:A9:35:B9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E086605055AAD0D7BA90C7800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 34.71.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:05:05:5a:ad:0d:7b:a9:0c:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=6d7d2c0b-2711-47b9-ab8f-3c25eb4027a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:68:ac:c2:f5:29:6c:42:0e:79:ba:38:36:64:
86:50:9d:75:5c:74:e6:1a:25:f7:11:ad:50:e9:f5:
0b:bd:e8:9c:bc:e1:78:3b:d9:f0:a9:55:ab:64:63:
3d:71:d3:01:89:10:54:3b:ee:52:fa:d7:38:6d:3e:
50:d6:9e:12:e8:d5:0f:e5:b4:bf:e8:04:cb:11:85:
bc:e6:98:b4:d1:c6:c8:7c:05:82:ec:8c:4c:1b:ab:
96:15:5d:69:44:e7:f5:7b:84:aa:c8:65:19:50:74:
83:8d:47:24:bb:b0:2e:d4:45:9c:73:d2:8c:01:b3:
7c:02:7b:c5:41:20:5d:b8:08:96:c2:55:bc:b8:38:
4f:72:08:3e:f6:aa:95:df:0f:a5:bb:cd:0e:af:13:
ef:3e:95:07:91:1c:8e:f3:53:c6:bf:ef:2b:91:45:
b6:72:d2:8a:dc:ed:45:b8:56:31:2f:ac:d3:65:8e:
97:74:23:31:19:05:e1:20:b7:da:b9:d4:96:d2:d0:
44:89:37:34:83:4e:97:85:50:69:0d:b3:52:17:43:
51:fd:19:6c:ef:f3:58:71:da:7b:20:a5:50:4d:be:
e9:aa:eb:ae:4e:b4:de:da:cb:f4:61:d0:0b:23:c4:
d1:92:79:b4:31:a9:e1:71:48:b8:62:49:ec:25:af:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:94:03:8B:10:88:E1:41:49:89:7C:DB:08:BC:E2:BD:A9:35:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:7c:a5:49:c9:42:32:e6:78:17:ae:42:a2:d3:a2:01:c0:5d:
a5:c3:55:8f:5b:eb:54:9e:62:78:ab:06:93:5c:c0:f6:bb:4d:
94:1a:9a:8c:3a:01:4f:20:02:e4:10:da:7d:d9:af:f1:bd:47:
0f:92:19:0b:1d:c9:aa:62:b1:20:51:7e:55:25:f4:26:ec:59:
c5:a1:49:67:8a:b7:53:10:08:0b:4f:43:92:f7:b8:76:fe:75:
2a:f1:6e:08:6e:8d:c8:20:1f:26:13:68:b5:10:4f:f6:0d:b6:
f5:41:79:29:0e:95:51:52:4a:e7:8f:17:7f:cf:0f:0e:71:99:
db:73:19:c6:ef:92:88:a2:73:3c:f8:3a:88:91:d6:7e:44:d2:
e9:8b:21:c6:72:45:99:22:2b:62:fe:94:79:7b:3a:94:80:43:
c1:3c:36:a6:94:28:76:47:33:5e:ed:d9:70:39:57:bc:46:21:
cf:e7:41:86:90:28:34:f8:83:60:8d:0c:91:2c:cc:57:90:c0:
a1:e3:fd:cd:62:5f:60:82:bd:a3:ad:d1:0d:1a:c6:7d:5c:a3:
d8:28:9c:0c:13:f6:0a:4f:f6:27:c0:f6:df:04:5c:79:d6:9c:
87:f4:1f:36:30:f5:c4:6d:d5:0f:37:02:fa:2c:d6:c0:d5:20:
ad:87:7f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:05 2026 by rpki-client