
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa
File: d40d9eae-327f-3a10-8667-6fef8f5952bf.roa (raw, json)
Hash identifier: odQ+2fhrCiESXkz3Y4BtoW2VpFpUFvE+L6iEAsQYOYc=
Subject key identifier: 98:6E:C1:33:E7:65:3F:A2:3F:2C:A2:0F:44:2F:EC:04:37:99:91:B7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA715AEDEC99567C276F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.238.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:71:5a:ed:ec:99:56:7c:27:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=ed94ada6-e9b4-4828-90f0-527a2c23348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:02:30:63:48:65:89:54:1b:bd:52:60:bf:
b3:32:d3:22:4b:77:37:7b:66:7a:e4:43:be:88:c0:
66:66:a1:52:d2:fc:c2:f7:de:70:70:18:c6:d1:ab:
44:89:50:81:34:76:5e:06:af:fe:35:fe:4c:00:e2:
88:a9:f0:ff:2a:66:e9:c2:63:94:3e:26:da:cb:65:
37:82:d9:d2:f5:01:1a:5d:f9:b2:69:f9:83:1e:50:
da:4a:84:2d:e0:fc:9f:d7:3d:1d:38:70:02:6f:d3:
35:6e:10:32:56:2d:79:ce:94:40:a2:20:42:81:86:
d3:95:15:19:a9:a0:26:2d:d5:d2:ff:08:a9:78:ea:
95:21:de:b5:39:97:5b:8e:1e:10:10:11:c9:0e:ab:
c2:ee:dd:54:8d:6a:7f:c8:a1:86:a0:96:26:7c:93:
d1:75:2d:87:9b:14:c1:cf:d7:16:26:97:d4:f0:ff:
34:03:ee:36:c3:aa:e1:d1:11:d9:93:d7:de:45:0a:
19:19:eb:49:38:b8:3c:2a:92:e6:b3:51:95:58:67:
60:2d:bb:85:38:94:19:0f:c4:82:d2:af:2f:22:b3:
f4:2a:fa:14:29:13:16:13:e2:3a:2f:1f:ab:4a:a4:
24:f4:84:d6:97:e6:02:c8:a2:ca:fd:30:60:98:0b:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:C1:33:E7:65:3F:A2:3F:2C:A2:0F:44:2F:EC:04:37:99:91:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d40d9eae-327f-3a10-8667-6fef8f5952bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:d8:be:0f:51:bb:53:1f:c4:34:15:14:5b:82:f9:a9:fd:ce:
ee:e4:9c:8d:0d:52:6f:db:92:5c:8f:a9:b2:50:b1:af:2d:fa:
88:1f:1d:f6:86:c5:4e:5e:c2:57:0d:2e:80:3d:f0:68:26:34:
a3:71:fb:fc:9c:e8:09:b7:a9:4d:74:a5:6b:b1:a5:a6:da:f5:
f4:62:54:ac:51:7c:c7:55:39:68:e9:b2:0b:eb:99:b0:65:fd:
36:3d:8a:52:3f:8c:34:e5:fa:38:82:1c:3a:c9:07:0d:fe:29:
d8:92:cf:90:85:f7:82:51:30:9f:dc:11:b5:6e:fd:03:d1:9b:
3a:a1:39:f0:e5:06:bd:ae:26:52:fc:e5:59:27:ec:a7:11:36:
a2:23:7a:ac:fb:ce:04:26:03:71:e2:99:49:86:cf:53:01:a5:
25:e7:ee:91:46:bc:3b:fd:b4:78:24:6a:72:46:0b:f9:60:23:
ab:31:c5:70:8b:43:05:6b:ac:e9:1b:99:b1:1a:ff:82:47:10:
1b:2f:98:ea:89:69:cf:c4:93:dc:1f:85:00:8c:f4:29:ca:40:
b5:01:e8:94:f8:84:a6:de:5f:c3:5d:ef:94:35:71:d8:7f:06:
d1:df:e7:3a:01:94:de:43:bd:19:93:8c:fb:99:2c:b0:de:e6:
b8:d4:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:53:17 2026 by rpki-client