
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa
File: 8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa (raw, json)
Hash identifier: 5MXhwIVTaKwJTkj5UIfQ2G6P7h5bk3UsTFSoPI5uEr8=
Subject key identifier: 07:0C:FD:59:16:94:6C:67:0A:73:84:F9:4B:0C:91:D5:EC:7A:F8:DE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA4BA86D762FDE8F9CC7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 35.212.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:4b:a8:6d:76:2f:de:8f:9c:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=3cbef41c-66f0-4d53-9df9-9be331077089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:3e:bf:3a:34:0e:63:40:bf:33:d9:c7:82:
21:c1:ab:20:b6:ad:c9:b6:e6:a5:11:df:7a:61:c5:
5f:c5:d2:39:84:f0:20:6e:20:d3:71:7a:35:63:ba:
aa:79:e9:74:32:91:49:4a:bd:84:8a:61:34:09:36:
65:ea:39:84:19:95:50:cc:28:67:fc:e5:5e:05:cd:
06:6b:c6:c9:ee:dd:51:35:bc:62:4c:06:9a:79:c1:
49:11:5c:9f:a5:94:74:7c:ff:13:76:11:d5:89:65:
99:9f:d7:c0:13:0c:4d:bc:0f:ca:c6:05:5e:03:34:
ad:32:9a:11:67:bc:d7:90:ac:15:42:a2:b8:c3:84:
64:45:38:fc:a1:df:3a:57:e4:9f:37:29:8e:86:b5:
20:30:15:a2:eb:b4:02:ec:78:5e:48:2c:f1:21:4a:
b4:d4:5e:6a:0d:9d:20:2f:03:64:20:cb:00:14:2b:
6a:45:f1:f0:c2:8d:7a:a6:23:64:28:36:0a:24:6c:
b7:47:12:75:54:52:23:9b:23:ba:07:54:c7:af:24:
d7:d9:a2:19:0b:7a:49:16:50:b7:1c:58:08:d8:61:
20:cc:1d:98:78:71:68:59:84:80:c8:c8:8a:e6:9f:
fd:b9:3f:7f:9b:21:8b:e6:19:53:a0:a2:95:5b:8a:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0C:FD:59:16:94:6C:67:0A:73:84:F9:4B:0C:91:D5:EC:7A:F8:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8a0c33a6-29e7-3dd4-ab27-a26c20752ac7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.212.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:c7:68:6d:28:61:b6:1e:86:3e:a4:4f:f5:f7:77:b4:46:ef:
7e:04:b2:9c:59:a8:2e:b9:d6:52:2e:c9:af:46:ff:04:ec:1e:
bb:f9:f7:93:1a:09:66:e8:26:29:1e:b8:1d:2f:6e:77:7d:a1:
0e:7a:d5:9e:ad:67:80:a4:e0:0b:d2:8f:08:05:b1:c4:e5:b1:
eb:80:68:d5:d0:fe:d8:e3:f8:34:99:69:81:4c:b5:eb:c3:ff:
9d:84:32:f3:ef:f9:ff:0d:84:a2:6c:01:c5:21:cb:a0:19:76:
f5:23:fc:24:c2:26:49:fd:e4:61:9f:c3:77:07:62:35:b7:22:
17:de:bf:d3:75:a2:fb:3a:ea:f2:d7:20:98:41:2e:4c:48:ef:
de:1b:9a:15:2b:07:1e:d1:d3:99:53:f0:33:ad:c7:40:a8:f2:
ac:63:72:56:da:10:3d:1d:87:3f:eb:08:22:01:f8:f7:c7:e5:
2d:8b:f3:64:75:b4:69:79:b9:59:bb:78:b0:46:97:d7:53:25:
cd:98:f7:12:1c:48:76:57:0c:ba:ce:d6:bc:59:ed:0d:27:15:
0d:00:2d:73:48:de:8d:eb:87:fe:2d:2b:a7:3b:40:15:ec:01:
f8:04:06:ed:7f:2e:6b:91:ed:21:26:db:5f:5f:fd:8d:af:5c:
1c:77:80:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqkuobXYv3o+cx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
M2NiZWY0MWMtNjZmMC00ZDUzLTlkZjktOWJlMzMxMDc3MDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NY+vzo0DmNAvzPZx4Ihwasgtq3JtualEd96
YcVfxdI5hPAgbiDTcXo1Y7qqeel0MpFJSr2EimE0CTZl6jmEGZVQzChn/OVeBc0G
a8bJ7t1RNbxiTAaaecFJEVyfpZR0fP8TdhHViWWZn9fAEwxNvA/KxgVeAzStMpoR
Z7zXkKwVQqK4w4RkRTj8od86V+SfNymOhrUgMBWi67QC7HheSCzxIUq01F5qDZ0g
LwNkIMsAFCtqRfHwwo16piNkKDYKJGy3RxJ1VFIjmyO6B1THryTX2aIZC3pJFlC3
HFgI2GEgzB2YeHFoWYSAyMiK5p/9uT9/myGL5hlToKKVW4o57QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcM/VkWlGxnCnOE+UsMkdXsevjeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGEwYzMzYTYtMjllNy0z
ZGQ0LWFiMjctYTI2YzIwNzUyYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9QAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7HaG0oYbYehj6kT/X3d7RG734EspxZqC651lIuya9G/wTsHrv595Ma
CWboJikeuB0vbnd9oQ561Z6tZ4Ck4AvSjwgFscTlseuAaNXQ/tjj+DSZaYFMtevD
/52EMvPv+f8NhKJsAcUhy6AZdvUj/CTCJkn95GGfw3cHYjW3Ihfev9N1ovs66vLX
IJhBLkxI794bmhUrBx7R05lT8DOtx0Co8qxjclbaED0dhz/rCCIB+PfH5S2L82R1
tGl5uVm7eLBGl9dTJc2Y9xIcSHZXDLrO1rxZ7Q0nFQ0ALXNI3o3rh/4tK6c7QBXs
AfgEBu1/LmuR7SEm219f/Y2vXBx3gHg=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:51 2026 by rpki-client