
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa
File: 2d99e677-3ef8-3316-bf46-496cdddd10aa.roa (raw, json)
Hash identifier: Eh/RwnIesMChzbyibfHvpfueBHPF8YMDdGykmUs30AM=
Subject key identifier: A7:C4:E6:CA:0D:93:1C:E5:15:34:44:20:A7:E8:DA:A3:11:7E:F9:4D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA6E2F690F149405B30180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.243.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:6e:2f:69:0f:14:94:05:b3:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=20fa2f82-0834-4b88-b849-7c45c1f98295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:9e:bd:a9:ed:d7:22:32:bf:8d:cc:b9:65:
04:5e:70:db:f4:56:31:60:2d:1e:05:56:4e:96:dc:
23:eb:6f:d0:11:a1:a7:fd:37:7d:e1:87:6d:bd:31:
38:fd:83:c9:c1:cd:26:dc:01:65:ae:57:97:80:41:
70:b2:1f:a2:32:93:40:3f:02:49:26:87:a8:e0:ea:
42:55:9e:65:37:b2:a8:82:36:15:5d:56:26:02:d1:
46:82:24:5c:c0:b5:04:61:6c:8e:ff:7c:ed:8f:3e:
ca:20:c7:09:1b:75:83:9d:92:a8:d9:4d:12:fe:2a:
53:48:f9:e5:4b:e2:65:26:4c:bb:45:ef:4a:54:16:
59:eb:48:b6:e5:53:7e:38:82:72:b4:a5:9a:c4:47:
81:2c:56:a8:83:18:9d:45:54:5e:4f:1e:f5:7f:67:
32:77:52:1b:93:74:e9:47:b3:6e:c0:d5:9d:28:6d:
8b:6c:fc:51:aa:98:1e:11:69:4f:12:4f:a2:bb:36:
b1:7c:fd:7c:1d:15:0f:bf:db:b2:e5:47:da:3a:56:
a1:e1:26:b4:1d:05:d4:f2:c4:71:07:14:e5:13:27:
dd:62:8f:f6:04:ac:2b:1f:ea:b5:d3:6c:bb:c4:2e:
6d:0c:99:5b:b2:39:28:83:7f:f1:49:47:b4:18:b6:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:E6:CA:0D:93:1C:E5:15:34:44:20:A7:E8:DA:A3:11:7E:F9:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:b8:68:a4:7c:00:8f:9f:86:b3:a2:6a:a6:62:3d:94:7c:c9:
a8:61:51:f2:c8:a2:bb:2c:d8:75:7e:47:ae:cc:36:65:55:99:
cd:31:72:4f:88:1f:fd:6c:46:c9:05:0f:49:c4:b9:4a:d8:2a:
29:db:0a:4d:1a:9e:dc:f8:40:22:ff:58:a0:66:cb:32:1a:bd:
0a:7e:e3:75:ea:a9:f1:a7:eb:cc:bc:c2:3e:5b:ac:42:07:5d:
8c:e2:c3:d1:07:3c:59:ba:d9:62:bc:f8:f5:11:94:7c:dd:9f:
6d:c6:98:be:e6:9e:f5:38:10:c1:50:7a:15:77:85:8d:81:d4:
4b:29:fd:55:a6:90:9b:33:c0:a6:04:33:d9:2f:6e:3d:b4:f8:
06:1d:36:25:88:53:ea:ff:78:51:20:8f:75:e8:f3:5b:03:86:
55:73:45:07:a9:1c:21:b9:b9:2c:a7:b9:bb:63:40:ff:e1:78:
c0:81:3f:0c:bf:09:a1:f6:cc:64:b6:34:60:e2:c3:ee:a3:7e:
73:ff:37:bd:db:79:7b:e2:6a:08:b0:7f:17:c2:20:9b:13:62:
4e:a3:95:68:21:3e:9b:c4:55:32:f0:cc:74:72:a9:f9:0e:34:
00:1d:84:7e:a8:fd:66:58:0a:c9:77:e7:c7:a2:6b:1f:43:23:
49:cb:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:16 2026 by rpki-client