
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa
File: d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa (raw, json)
Hash identifier: 0oE+x1Mzg/Ica70fBX/rCZgm7AxApU70P4Jh5ZgP/wY=
Subject key identifier: BE:E5:BD:EF:46:E7:6E:FC:E4:AC:01:5A:AA:AB:B7:98:F0:ED:D0:BD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D5F7FAEDAA5C9FDE9765B6C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa
Signing time: Thu 02 Apr 2026 13:00:30 +0000
ROA not before: Thu 02 Apr 2026 13:00:30 +0000
ROA not after: Wed 01 Jul 2026 13:00:30 +0000
asID: 15169
IP address blocks: 34.4.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:7f:ae:da:a5:c9:fd:e9:76:5b:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 2 13:00:30 2026 GMT
Not After : Jul 1 13:00:30 2026 GMT
Subject: CN=14dbf3ec-5375-4599-adff-22c6dbe32828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:04:da:6f:29:ec:b1:a7:96:14:53:e0:f0:
65:cb:1d:55:27:c3:83:d5:b4:ed:cc:ab:ce:52:b6:
54:ff:1f:d5:6a:58:97:f1:78:22:c4:59:d7:77:be:
68:90:12:4d:ef:19:eb:84:90:9b:58:de:18:e2:7e:
7d:dd:97:77:4e:f1:26:e6:1e:8f:81:20:e3:36:f3:
fb:37:c2:db:46:d3:a7:b8:6d:41:28:cf:94:6d:24:
a1:f4:29:87:b9:d3:3b:16:4b:df:74:5c:05:ce:92:
38:f3:78:81:6c:bc:d9:3c:97:92:57:42:73:6a:3e:
0b:be:46:16:55:92:8e:9e:87:84:0d:b2:73:ff:a2:
ad:cf:6f:5c:6f:50:5e:c6:64:fe:8b:9c:b8:0b:c1:
e1:98:e7:00:67:e0:ff:4f:b1:be:11:d4:7e:8f:54:
50:7d:71:8a:94:c9:3d:ca:dd:91:c7:15:39:9d:71:
4c:5f:ee:aa:27:44:c5:f8:4c:36:56:f8:65:6d:65:
cb:b6:7d:b1:44:09:04:17:58:93:ff:f6:09:da:d9:
df:bb:ff:a8:4e:15:96:4d:a8:6d:57:51:9e:19:4f:
f7:76:27:98:ae:83:79:cf:b0:89:38:63:c9:ab:33:
3d:20:72:53:bf:3c:42:e0:b0:10:18:dc:a0:ff:13:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:BD:EF:46:E7:6E:FC:E4:AC:01:5A:AA:AB:B7:98:F0:ED:D0:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7d82387-6d1f-31ce-92c6-5da60bcb6c73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.4.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:58:d5:81:c6:f8:6e:24:2a:40:8c:d4:5a:5d:f3:42:8a:fe:
89:70:d1:c3:9a:95:a1:3e:0e:10:5b:54:ef:91:e9:6f:fe:6e:
f3:80:9c:6e:7e:26:a9:b2:97:79:4b:ad:0a:00:b8:a3:b6:e4:
b8:ff:c2:35:17:47:63:24:1c:09:4b:17:de:36:35:e0:c8:48:
cb:33:c5:4f:7c:c4:06:67:a8:99:5e:86:dd:e8:d4:82:30:10:
79:bd:f2:21:79:76:03:fc:e8:85:54:d2:04:01:7c:2e:c8:a6:
f2:47:40:8c:07:74:c3:bb:c3:29:2c:63:4b:c1:37:d7:c6:e4:
0c:c7:d6:a5:b2:2a:0a:1f:3e:25:ae:28:67:0d:23:32:1b:5d:
2e:41:cb:49:be:76:9e:fe:6f:86:af:4c:e6:81:17:21:08:52:
62:4f:45:24:9c:90:e2:68:a9:7d:56:d9:e8:53:55:55:17:03:
ad:24:ff:fa:b6:03:10:22:66:ad:0d:5c:89:ea:9b:10:eb:21:
7c:09:92:07:a3:20:9d:ee:07:e4:bc:53:34:7f:8a:7b:64:70:
0e:00:c9:02:b2:8a:13:2f:8c:1e:c3:07:c8:e4:4f:81:99:ac:
3e:d2:fb:86:98:eb:7f:10:bf:94:db:a5:8c:6f:0f:16:04:28:
c0:12:d6:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff67apcn96XZbbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk
MTRkYmYzZWMtNTM3NS00NTk5LWFkZmYtMjJjNmRiZTMyODI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHoE2m8p7LGnlhRT4PBlyx1VJ8OD1bTtzKvO
UrZU/x/ValiX8XgixFnXd75okBJN7xnrhJCbWN4Y4n593Zd3TvEm5h6PgSDjNvP7
N8LbRtOnuG1BKM+UbSSh9CmHudM7FkvfdFwFzpI483iBbLzZPJeSV0Jzaj4LvkYW
VZKOnoeEDbJz/6Ktz29cb1BexmT+i5y4C8HhmOcAZ+D/T7G+EdR+j1RQfXGKlMk9
yt2RxxU5nXFMX+6qJ0TF+Ew2VvhlbWXLtn2xRAkEF1iT//YJ2tnfu/+oThWWTaht
V1GeGU/3dieYroN5z7CJOGPJqzM9IHJTvzxC4LAQGNyg/xNE4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7lve9G52785KwBWqqrt5jw7dC9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDdkODIzODctNmQxZi0z
MWNlLTkyYzYtNWRhNjBiY2I2YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5Y1YHG+G4kKkCM1Fpd80KK/olw0cOalaE+DhBbVO+R6W/+bvOAnG5+
Jqmyl3lLrQoAuKO25Lj/wjUXR2MkHAlLF942NeDISMszxU98xAZnqJleht3o1IIw
EHm98iF5dgP86IVU0gQBfC7IpvJHQIwHdMO7wyksY0vBN9fG5AzH1qWyKgofPiWu
KGcNIzIbXS5By0m+dp7+b4avTOaBFyEIUmJPRSSckOJoqX1W2ehTVVUXA60k//q2
AxAiZq0NXInqmxDrIXwJkgejIJ3uB+S8UzR/intkcA4AyQKyihMvjB7DB8jkT4GZ
rD7S+4aY638Qv5TbpYxvDxYEKMAS1gQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:40:45 2026 by rpki-client