
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87adb934-2468-3be7-af65-7d03ef63c5bb.roa
File: 87adb934-2468-3be7-af65-7d03ef63c5bb.roa (raw, json)
Hash identifier: JzRcSYiafIBTpWnx98NZYgzvpRR6Ly4D9LlZhdoxSbw=
Subject key identifier: 87:6D:FA:6B:19:47:04:44:FF:48:0B:C6:69:B1:B5:9C:01:58:FC:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AAA793F8A33C28BABFF100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87adb934-2468-3be7-af65-7d03ef63c5bb.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.190.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:a7:93:f8:a3:3c:28:ba:bf:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=9eaac483-eeb9-48f0-a4ff-7e45f3d0129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:b9:b9:0e:28:38:8a:22:34:bb:10:95:3d:
e6:5c:c6:b3:8e:5d:ab:25:54:9c:51:fb:79:52:e8:
56:e0:c1:c8:23:e3:b6:f3:09:e3:08:78:f7:e1:74:
17:19:ee:ea:3d:65:5b:2c:e5:7c:f8:60:55:ac:23:
eb:3d:43:fd:6a:35:ad:7d:de:8f:7d:cc:32:c3:de:
2e:64:01:e7:f3:39:14:63:73:c6:ec:ff:f1:15:d7:
be:79:72:0c:ba:3d:e9:34:29:9e:af:45:8f:c1:69:
ce:1e:11:03:02:18:38:e0:1f:5d:2c:e8:f9:50:f4:
81:81:aa:21:96:85:10:48:79:b5:5d:82:bd:6a:2a:
14:ab:97:e1:dd:d7:a3:14:95:cf:33:ab:f4:ec:37:
f9:db:5b:1f:56:9e:2b:19:08:ce:c3:ae:57:a2:d1:
8f:5f:8e:67:82:9d:66:80:41:12:c3:80:0e:ae:0e:
d2:bc:ef:21:52:f8:66:a8:8a:d2:b2:b1:a9:00:bd:
11:a1:0c:5c:ae:44:c3:87:97:4a:24:bf:1d:9d:e7:
75:dd:d4:c4:42:c1:73:b3:61:e7:b2:63:ce:44:47:
7e:ce:7f:a5:ed:8e:5c:98:c7:57:e3:e8:f4:87:68:
a6:a1:59:d6:78:77:57:06:4b:90:91:34:b8:91:2d:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6D:FA:6B:19:47:04:44:FF:48:0B:C6:69:B1:B5:9C:01:58:FC:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87adb934-2468-3be7-af65-7d03ef63c5bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.190.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3d:ca:08:1a:50:3f:bc:2c:6a:14:ad:d3:d2:0d:17:44:a7:
67:e9:3e:f0:4c:14:b4:f9:28:47:fd:d3:60:93:e6:af:9d:00:
77:e5:fd:de:e4:0e:c4:1a:12:2d:de:73:92:cc:bd:86:d7:c4:
a0:c8:f6:87:71:8e:b3:6b:25:d0:d9:9d:80:c8:b8:a4:a2:86:
5a:ea:27:2b:71:26:87:38:0e:36:32:5e:43:88:42:d6:de:9e:
25:14:f8:03:2c:e4:91:fc:0b:0e:36:f7:43:fa:c2:0c:66:dd:
0a:a4:f0:98:fe:c5:89:c0:c1:3b:15:ef:e0:b1:54:a7:35:f2:
b7:eb:82:c3:1b:f9:30:3b:fb:55:89:3d:7b:48:96:e3:b1:f9:
3c:f0:75:3f:88:61:25:89:02:9f:c9:47:97:2c:ae:2e:e1:8b:
7e:76:da:c7:71:62:46:0c:0f:81:4f:74:b8:ae:80:67:83:c7:
44:46:84:35:32:b1:31:ed:1c:1d:fd:7b:4a:ed:e9:a8:9f:53:
2e:2f:87:0c:40:bf:2e:f4:89:62:a9:c7:bc:fb:89:4f:9c:79:
a8:e0:2c:00:05:67:1c:79:f8:65:30:ed:0d:87:a2:ef:30:ea:
41:4c:c5:cd:3c:cf:7d:31:18:54:d2:9c:f6:b9:51:88:3e:b1:
f9:ab:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:53 2026 by rpki-client