
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23a66970-3a8f-38c0-99b0-dee4b34755ba.roa
File: 23a66970-3a8f-38c0-99b0-dee4b34755ba.roa (raw, json)
Hash identifier: o3vP0di5bcYwvjtksc+Ag4ZfZFfM7WmE13PGtyzQlN4=
Subject key identifier: 89:17:19:E9:90:2D:8B:6F:45:C6:3D:D2:B1:3C:3B:64:79:8E:03:27
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AAAA305CF54E2B4B1C4440
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23a66970-3a8f-38c0-99b0-dee4b34755ba.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.242.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:aa:30:5c:f5:4e:2b:4b:1c:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=9b7054a6-2b53-4259-adc0-81d208ec7820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:e6:1b:50:05:9d:90:d1:3c:55:f3:89:b2:
13:7c:fe:a4:c7:df:93:0a:7a:52:cc:59:d6:54:74:
07:a5:1f:09:fe:d4:4c:a7:39:8d:cf:ab:1a:41:08:
d7:44:02:4a:d5:dd:0e:04:c2:19:9e:f6:8a:8a:d7:
47:34:90:70:c6:72:3f:7a:c1:9f:84:4d:a6:e8:77:
17:6b:20:da:9f:de:4a:83:27:ce:ee:50:6e:8c:51:
38:d5:a1:b5:1a:35:b2:37:a0:1c:1e:1b:76:95:e2:
dd:8e:dc:d9:db:0c:8a:ab:cd:4d:7a:c1:fb:11:66:
91:a8:9c:c4:6d:a3:fe:85:1a:26:93:34:ec:5b:15:
60:30:10:f0:37:0d:6a:6d:5f:6c:87:90:bc:1e:0c:
5b:6f:7b:d0:f7:1d:c7:4a:ee:2f:9f:73:1e:52:c8:
ea:c6:77:15:61:36:e8:73:96:94:77:72:41:4c:78:
4b:eb:a8:45:44:02:f3:5d:97:b9:3a:c6:c0:ed:f9:
8f:08:2c:97:bd:50:46:0e:3e:44:ca:b3:b2:2c:74:
f3:69:de:83:57:50:3b:ef:2b:d2:59:5d:e2:2e:ca:
73:d1:da:da:49:eb:9c:47:a7:ad:9c:d8:ed:76:d9:
ff:ff:32:e8:3d:47:7f:3c:ac:5b:4c:e8:cf:de:da:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:19:E9:90:2D:8B:6F:45:C6:3D:D2:B1:3C:3B:64:79:8E:03:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23a66970-3a8f-38c0-99b0-dee4b34755ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.242.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e3:0c:9c:2c:05:e2:d4:0f:f4:5a:1d:62:2f:40:de:05:55:
4f:2f:41:7a:aa:cd:f8:11:12:62:ff:e6:d4:bd:04:f6:25:2b:
e6:3d:54:18:34:aa:70:7f:ef:3f:87:bd:22:2d:e1:24:c5:bc:
2b:99:29:28:71:38:87:5a:08:17:fc:ff:32:22:e8:4d:44:20:
6c:e5:d4:9b:ff:38:a1:2d:54:35:8f:6d:c4:de:4a:91:3f:66:
e6:a0:9e:fe:57:ff:fc:f8:fa:56:a9:54:fc:21:0b:1a:39:66:
b7:36:d1:86:6b:d7:9f:29:8c:ef:93:94:85:0a:a9:6c:a3:41:
f0:8a:2b:65:da:ff:fc:00:fd:2e:df:44:a8:1e:d5:f6:52:a7:
f1:80:9f:93:df:fe:05:12:59:10:15:bc:5c:91:b3:63:1b:c8:
58:4c:cb:e7:3f:39:b0:fd:8d:60:b1:a0:29:87:6b:41:70:7e:
fe:73:76:18:22:7c:b7:48:d5:50:06:a9:81:b5:79:ab:26:53:
4b:f7:85:a4:00:90:30:16:94:06:5e:27:32:d5:c5:82:bc:9d:
d1:3c:e7:07:bb:2c:4c:13:e2:5b:5b:89:0e:a1:b4:3c:3b:a6:
a8:e1:be:34:9a:45:e4:08:cd:6c:bc:4d:83:5a:f7:2a:26:17:
e9:a2:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:50:59 2026 by rpki-client