
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa
File: dafc535e-769c-3c75-884c-f554eca0ad04.roa (raw, json)
Hash identifier: EbOV9iF1ZtrS0TozwsvcGRXGqSWFyCIJgu05qgg0ycM=
Subject key identifier: BD:1D:EE:07:DD:0B:85:B3:98:E7:F2:01:1B:01:A8:75:5A:FC:3E:9D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EA7875CB245A3AD0CA0CB4AD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 396982
IP address blocks: 34.153.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:5c:b2:45:a3:ad:0c:a0:cb:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=962b9f2b-0198-4b3e-8ab3-3ad6ef55d135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:e7:78:e8:a6:b1:99:ed:d9:ea:b9:5c:ac:
2d:06:e6:b0:48:6f:41:9f:24:ea:dd:04:0f:26:05:
03:5c:a8:31:ce:63:21:3e:5b:21:e9:86:f2:24:0f:
e0:51:4a:12:ee:6b:16:22:6a:9d:04:cd:6f:6c:43:
b3:27:34:a4:bc:8d:8e:60:d9:13:c9:60:a8:38:30:
d6:53:9a:13:76:1d:39:eb:bf:49:73:f5:e4:9f:5f:
9d:75:ac:17:34:0b:1f:be:3d:65:95:62:d4:6b:23:
a8:a3:fc:8e:02:c7:d5:0c:42:7b:67:3d:b6:8c:be:
05:03:7b:84:b0:e9:ae:cd:03:77:84:ac:2d:86:ae:
e5:cf:21:3f:c8:94:86:f5:22:9e:cc:e8:7b:91:ee:
f3:ec:84:b0:73:d0:1e:36:53:52:4a:d4:2c:5f:66:
49:6d:16:b3:a3:1a:50:67:76:c0:c8:11:fe:9d:d6:
03:5d:2a:fa:3f:33:31:10:8c:78:19:ef:ec:33:48:
35:9d:24:23:7d:f4:f6:58:ca:8e:ef:0c:4c:09:c4:
0d:b9:ee:75:8c:36:62:93:c0:4f:d8:95:ec:fb:02:
81:e8:91:71:34:72:c8:92:d9:6e:8c:8c:91:dd:a2:
17:02:6c:a4:e6:7a:0f:45:98:ff:10:6c:98:a1:33:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:EE:07:DD:0B:85:B3:98:E7:F2:01:1B:01:A8:75:5A:FC:3E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dafc535e-769c-3c75-884c-f554eca0ad04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.153.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:6b:d0:42:e4:ba:86:66:85:19:93:cf:4d:66:d4:23:77:c7:
53:a5:bf:fb:73:fa:a8:6f:d8:05:9b:0d:12:a6:89:f6:f9:15:
f4:bf:43:5f:3f:95:1f:9c:45:30:99:1c:3f:ea:76:8c:c6:26:
d3:62:7f:da:25:9b:4d:1f:3c:31:0a:1c:fa:e5:bd:7d:37:09:
4f:01:cd:64:cf:e6:27:51:21:c0:93:47:12:f5:d5:84:c2:73:
e7:3d:95:8c:76:8d:be:ce:45:93:c7:55:17:e5:95:5b:3c:ad:
33:64:01:a4:aa:71:b8:25:50:1f:c2:73:96:09:29:96:1c:da:
39:11:18:1d:1d:d3:af:ec:bd:66:19:3b:27:e6:8d:74:87:be:
13:32:fb:80:8e:65:8d:75:ff:f7:4d:8f:65:a5:7c:cf:7d:f4:
50:81:22:cb:51:43:8f:04:bc:5b:ac:b1:87:e2:ce:4b:f3:e1:
45:06:42:91:cd:82:82:36:3b:ff:ed:f3:fd:1f:e1:db:36:2b:
2c:08:39:3a:8b:69:7a:37:b3:c2:b4:f2:1c:ba:ab:70:19:42:
ad:da:45:e0:20:57:93:82:c2:8b:d8:86:35:65:18:e5:8a:1e:
47:17:df:ff:de:db:68:df:a9:d3:85:a7:3f:cd:1d:45:d4:10:
8b:6e:29:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:28:01 2026 by rpki-client