
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa
File: 25cf0945-d5e8-3596-b1e6-0f7575079833.roa (raw, json)
Hash identifier: wdeu4UY+L2Kc8rILQu2Ew1PjwFr0dc0oEV38OpwRmRw=
Subject key identifier: 99:F0:79:EC:FF:62:AC:B3:BC:47:28:EE:9B:1F:7F:C4:32:E6:C7:D1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA44DA239289469F486600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.243.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:44:da:23:92:89:46:9f:48:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=19bc061c-6bef-4ab8-b77e-c7efa5af316c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:f4:92:64:6c:d9:1f:40:17:7f:c3:af:b3:
bc:d6:b4:86:61:bb:d8:e6:f1:10:37:f2:73:b8:eb:
7d:b9:40:67:3d:15:17:27:1d:62:1d:a8:3e:f0:af:
84:45:5b:73:27:09:9a:0a:17:f0:01:1c:60:d1:a4:
3f:d8:62:21:38:a4:b7:aa:80:c5:77:2e:bf:c6:6e:
55:39:bc:a6:2e:27:10:d4:d5:43:cb:49:fb:5e:e3:
ee:f4:5b:a5:14:4c:48:7d:8b:dc:b8:81:73:7a:d0:
8c:1d:d2:37:59:a2:95:6c:19:ae:90:ad:64:6d:ee:
17:34:25:4e:d3:53:7b:35:3b:bf:f1:a0:d3:5e:5e:
47:68:f9:9e:75:ec:74:11:ba:0c:13:fe:39:4d:79:
d9:47:0d:2e:72:8c:b4:b8:ba:8c:30:be:54:62:62:
02:24:d3:63:df:74:79:1b:4f:6c:d2:27:28:85:9a:
ba:5a:03:1a:57:34:33:5b:56:07:13:3c:63:18:09:
04:5b:7a:f0:cb:a9:d6:7f:55:84:34:6b:fc:a6:f9:
4e:01:fd:87:32:80:ce:b5:75:7a:c5:7f:0e:66:e8:
29:9e:9b:cb:df:3c:1b:6e:a0:a7:8a:3f:ee:2b:12:
5c:d0:e8:4e:f7:5d:7d:f6:03:93:51:6d:cd:a4:30:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:79:EC:FF:62:AC:B3:BC:47:28:EE:9B:1F:7F:C4:32:E6:C7:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a6:df:25:7c:1c:43:e1:47:36:ac:a7:1f:d6:ac:a5:26:c3:
43:0b:bf:88:d9:6b:dd:55:be:2b:ea:af:62:af:69:c4:13:17:
5d:cd:e4:96:53:e8:34:0f:3e:0d:de:f0:bf:6d:0e:54:d3:6e:
d8:98:27:dc:8e:90:df:40:12:7d:85:c1:61:83:6a:e7:45:95:
ba:e3:ec:0f:81:e1:c7:b1:43:ae:ba:0f:6f:73:f9:18:58:8b:
c8:0f:fc:ed:ef:cd:fb:c4:e6:ac:7e:ce:f8:92:19:65:3a:99:
a0:ee:0c:ea:fa:06:33:4e:af:e0:fd:47:38:64:4c:0f:34:6f:
ae:e1:19:26:80:19:0a:76:1d:bb:5c:be:3f:1a:a3:f8:0c:92:
2b:29:dc:18:61:9b:14:4a:87:f3:67:28:82:fc:c4:7d:e5:be:
a7:fe:de:54:5d:46:0a:a4:64:5e:55:35:ff:ee:da:c0:1e:3c:
1f:24:5e:14:5a:68:7d:15:c7:39:76:3e:6f:f5:93:a3:dc:35:
b0:0d:a2:c0:10:b1:e0:b4:08:04:dc:cc:68:9e:d2:ff:03:8f:
31:b9:4b:9b:24:7c:60:cd:40:3c:8d:e7:2a:b4:16:23:30:6b:
d4:1e:8b:b2:25:c6:95:d4:2a:b3:f8:cd:12:2e:82:8f:b7:56:
71:24:1e:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkTaI5KJRp9IZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
MTliYzA2MWMtNmJlZi00YWI4LWI3N2UtYzdlZmE1YWYzMTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMP0kmRs2R9AF3/Dr7O81rSGYbvY5vEQN/Jz
uOt9uUBnPRUXJx1iHag+8K+ERVtzJwmaChfwARxg0aQ/2GIhOKS3qoDFdy6/xm5V
ObymLicQ1NVDy0n7XuPu9FulFExIfYvcuIFzetCMHdI3WaKVbBmukK1kbe4XNCVO
01N7NTu/8aDTXl5HaPmedex0EboME/45TXnZRw0ucoy0uLqMML5UYmICJNNj33R5
G09s0icohZq6WgMaVzQzW1YHEzxjGAkEW3rwy6nWf1WENGv8pvlOAf2HMoDOtXV6
xX8OZugpnpvL3zwbbqCnij/uKxJc0OhO91199gOTUW3NpDAAMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnweez/YqyzvEco7psff8Qy5sfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjVjZjA5NDUtZDVlOC0z
NTk2LWIxZTYtMGY3NTc1MDc5ODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI/MoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6m3yV8HEPhRzaspx/WrKUmw0MLv4jZa91Vvivqr2KvacQTF13N5JZT
6DQPPg3e8L9tDlTTbtiYJ9yOkN9AEn2FwWGDaudFlbrj7A+B4cexQ666D29z+RhY
i8gP/O3vzfvE5qx+zviSGWU6maDuDOr6BjNOr+D9RzhkTA80b67hGSaAGQp2Hbtc
vj8ao/gMkisp3BhhmxRKh/NnKIL8xH3lvqf+3lRdRgqkZF5VNf/u2sAePB8kXhRa
aH0Vxzl2Pm/1k6PcNbANosAQseC0CATczGie0v8DjzG5S5skfGDNQDyN5yq0FiMw
a9Qei7IlxpXUKrP4zRIugo+3VnEkHh4=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:50:56 2026 by rpki-client