
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa
File: fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa (raw, json)
Hash identifier: gcSACYtVyx8Ft1NAHKzOdTT3SsSlw0Qls2DO+0Qm3rE=
Subject key identifier: FD:FA:BC:B7:1F:53:4E:8B:72:4E:B2:6D:95:D2:57:61:A1:CF:9D:2D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EA788351F2C7AB119561A6450
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 19527
IP address blocks: 34.1.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:35:1f:2c:7a:b1:19:56:1a:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9957b50e-3552-4fcd-81f3-77c5134858c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:39:52:1d:dd:a7:f3:b6:ac:31:cd:76:34:
25:f2:6b:8d:0a:e0:82:85:30:13:ad:01:cf:42:aa:
42:7a:e3:cf:c7:58:f5:61:3a:62:9c:da:81:19:e0:
80:86:e4:3c:50:31:c6:ee:f8:aa:70:4a:23:c0:9f:
b2:ac:4a:29:c3:ef:c3:6c:b6:a9:86:4d:2e:ea:22:
40:58:e8:bf:ba:7b:44:a5:fd:9d:81:1c:e4:9c:3c:
e0:77:55:b8:81:33:5c:36:82:cb:ff:6e:24:d2:6e:
64:26:13:6a:1b:a3:e0:d4:2b:c9:34:b0:9b:5a:68:
e1:de:ef:e3:f5:a8:f5:9d:8a:e8:89:4d:27:94:87:
e0:c5:78:b0:9b:7c:d5:36:63:e9:1d:52:eb:3b:8d:
e0:d7:4f:3f:ec:5c:63:9c:ca:72:00:fa:df:72:42:
9b:79:75:bf:2f:3b:f1:f1:c3:24:3c:8c:f2:35:fd:
f4:85:c3:86:20:5d:c5:97:98:42:21:16:cd:c6:90:
73:a5:fe:4a:14:19:80:65:ca:c1:85:53:6c:74:af:
73:96:66:16:24:cc:eb:58:1f:a2:63:65:3d:93:64:
e5:a3:c3:1b:de:c5:8c:40:8a:1b:62:2a:26:ea:da:
ab:9c:32:86:6d:bd:53:d7:bd:a6:00:2b:08:b8:e5:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:BC:B7:1F:53:4E:8B:72:4E:B2:6D:95:D2:57:61:A1:CF:9D:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:8c:21:25:e1:c9:70:55:78:66:b1:44:29:79:e2:21:91:99:
24:fa:69:28:e3:c2:4e:29:e6:15:ff:4d:b7:ee:17:8b:c0:4b:
ec:3c:fe:aa:21:0e:8d:0d:aa:9d:69:44:a1:52:c4:dd:61:ea:
f2:b6:28:8d:26:cf:ce:02:23:15:62:c7:83:b6:f7:23:b7:f0:
9a:18:61:6d:c4:f5:90:37:e3:1c:dc:fb:09:14:ac:82:45:c0:
af:61:7d:3d:d3:01:02:83:78:bb:72:51:af:56:37:37:50:19:
1b:f1:60:8f:fe:e5:76:39:c5:f3:71:31:05:1c:96:b4:69:c8:
2c:b8:9b:48:aa:b5:4c:56:22:ad:90:0c:e9:d9:ed:bb:f6:9e:
d7:ed:4e:24:76:d8:2e:48:39:9f:fd:1c:3c:cf:b0:a3:3e:37:
0f:0c:55:a1:e4:9a:54:ae:50:9e:8d:63:65:1e:44:17:44:b1:
b3:d4:56:b9:b9:ba:ac:ed:02:0a:a6:93:5a:90:94:59:bb:b1:
7d:16:07:2c:ff:96:0b:3b:32:e7:94:96:e7:1c:1c:77:7e:93:
f3:43:c7:93:eb:82:eb:b2:49:ec:ad:9b:59:c8:67:28:71:c9:
3d:94:14:c4:80:15:2a:a8:6f:b3:55:cb:40:3a:4c:ab:36:9f:
20:20:9c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:50:42 2026 by rpki-client