
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa
File: cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa (raw, json)
Hash identifier: O+mxsV0IEYPdKB2nnl5xtKdGCMO2rwco8610rQRdQWk=
Subject key identifier: 96:8D:1D:51:81:A1:BA:3A:55:D9:E9:1F:00:CA:DC:32:AE:F5:E2:1A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA6E0D38BF9738C5E57940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.202.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:6e:0d:38:bf:97:38:c5:e5:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=3feb77e2-880f-4125-b5db-42bfa75d0073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:a9:f5:83:53:57:f8:56:cc:f0:f0:49:47:
b6:aa:cf:0f:50:ab:c6:a0:60:15:a0:23:56:f8:63:
b7:c3:a3:ea:8e:7c:78:bb:6c:be:c7:37:87:70:34:
ef:48:7b:64:e2:a4:7e:c4:4f:cc:94:03:7c:2e:2b:
1c:0b:b2:1d:aa:ef:75:f7:24:c5:b9:07:14:cb:5d:
2d:06:e2:20:4a:0b:3e:f9:ea:54:40:5a:b4:d7:f7:
cf:e9:8e:19:31:dd:e3:6e:d1:58:f5:b0:02:1c:a5:
3b:8b:f6:c4:17:fb:6c:79:ea:71:59:aa:d2:ec:9b:
94:e3:88:de:da:c8:82:a1:3b:2c:76:b2:a3:85:e0:
87:c3:49:4f:46:9b:27:0b:79:12:8f:e3:b1:d0:ed:
25:ac:6a:71:d8:5a:36:aa:98:16:80:fd:89:ca:b2:
9b:d4:0b:58:9f:fb:f5:8c:98:b4:b0:30:68:1d:df:
5b:f1:67:22:aa:7b:8c:e9:eb:c5:42:b2:e6:87:52:
88:00:d4:aa:f0:95:70:cb:4b:de:ec:32:90:6b:a7:
9e:4d:c0:9f:72:1c:02:90:ad:d8:03:2d:c1:7b:6c:
f4:9c:2a:f3:29:80:00:d6:99:6b:b9:a7:91:2d:4c:
b0:a1:fd:74:e5:96:6f:9e:84:c7:e1:90:84:9c:3a:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:1D:51:81:A1:BA:3A:55:D9:E9:1F:00:CA:DC:32:AE:F5:E2:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbef08e-e9fd-3703-9efd-c532d3cbb943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.202.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:56:be:72:b1:01:7c:e2:4c:ea:cf:91:08:a6:81:4e:bc:98:
9b:b9:4d:cd:53:c5:ab:0b:f5:30:5f:dc:e3:5f:f6:a1:25:5f:
a0:6a:a9:e3:0b:47:5b:57:db:e1:c1:6e:38:0b:f1:c7:5b:eb:
f8:10:c2:fe:c1:8a:d6:c4:fe:81:bc:b9:c8:78:b4:84:4b:ba:
95:7b:3b:4e:ab:56:4a:30:19:f8:9e:39:69:e7:0d:3f:7a:0e:
21:73:37:a3:13:60:48:12:c1:e2:07:a0:7b:52:48:9b:30:5e:
55:df:6e:f7:58:48:fc:3c:d8:87:64:0a:24:f2:a0:b9:0c:7f:
20:8d:3f:d7:9f:98:dd:17:b0:65:44:b2:94:1b:d4:f3:aa:bf:
62:2b:a7:14:cf:2d:e4:8d:d6:0d:52:d2:eb:8c:df:47:15:47:
2c:82:cb:1a:d6:6d:9a:6d:59:c8:8d:40:e9:f7:b9:21:23:9e:
ff:b6:93:3a:ce:71:39:9c:39:00:c1:4f:8e:c9:ce:e8:ca:9a:
fb:23:3e:b2:73:dc:38:77:f3:bf:63:6c:cd:93:71:a2:f1:ee:
49:b2:51:d9:5c:b8:c8:ca:a5:95:ca:68:69:6a:fa:e1:62:67:
b9:0f:37:29:ea:53:5e:71:08:19:31:9e:9a:4d:d7:1f:f9:22:
44:a2:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:07 2026 by rpki-client