
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea4d80f9-0319-362e-8222-2647fc8e3b32.roa
File: ea4d80f9-0319-362e-8222-2647fc8e3b32.roa (raw, json)
Hash identifier: YMmAzDtZzyWRK2Yp2Ow5zfRtb0eVsFgDaMZgkReqPXY=
Subject key identifier: 00:DD:E5:91:C1:A4:E3:1A:FD:12:E8:1A:4F:66:FE:22:70:DE:D6:E5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA32BD85766C73257E2880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea4d80f9-0319-362e-8222-2647fc8e3b32.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.239.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:32:bd:85:76:6c:73:25:7e:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=5b8881da-2b2c-4845-9823-994ffba7e619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:de:72:a8:ae:13:e5:6f:62:72:2c:48:32:
c2:b8:f1:56:25:92:81:47:88:90:90:09:f8:88:d6:
c7:2e:2a:28:4f:2c:c2:9e:84:fd:6c:27:93:cc:9a:
9e:39:32:1c:8b:02:67:32:1c:7c:23:a7:3d:67:04:
c4:7b:7e:10:0c:a7:fe:f3:a0:4f:61:4c:03:bd:f6:
57:bc:c0:96:9e:6d:df:36:e8:fd:a9:8f:11:a9:42:
70:c1:72:b2:90:45:37:06:47:ff:1c:13:f2:c1:6b:
7d:05:b9:19:80:fa:77:33:65:da:38:11:29:4a:67:
9c:86:b2:86:ef:ae:50:7c:8e:99:cf:85:c4:11:bd:
ae:a8:4f:9c:18:ec:75:fa:10:46:1a:64:47:b4:12:
d8:0b:4c:e5:81:7e:ea:a2:41:59:49:a2:84:e8:b7:
1b:78:3c:30:ab:ea:f9:ab:2d:39:60:71:14:a1:20:
a9:0a:55:05:ae:fe:36:ef:50:2c:92:82:8b:c6:37:
02:32:a9:9d:16:dc:5c:48:7b:b7:9d:65:bd:3c:84:
2f:8c:55:fb:c7:bc:8f:ff:6b:c7:c5:82:b4:11:de:
3e:7c:b5:a8:72:c4:99:89:f8:ec:f9:1a:a1:04:99:
6f:ed:78:6b:61:b9:d4:a9:2b:a3:7a:8e:ef:21:e1:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:E5:91:C1:A4:E3:1A:FD:12:E8:1A:4F:66:FE:22:70:DE:D6:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea4d80f9-0319-362e-8222-2647fc8e3b32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.239.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4e:eb:f7:40:32:03:45:5c:ea:b6:f5:b4:bd:7f:6b:ec:e6:
83:67:6b:5f:c1:5a:2b:08:d5:bb:34:3a:e9:76:ae:93:39:c2:
dc:16:6c:46:42:eb:dc:45:44:76:e4:36:06:28:ff:a3:96:64:
bc:fc:6d:41:19:3d:d7:c7:af:8f:d5:be:e0:41:d0:40:b4:e2:
b2:5f:b9:c7:20:26:b3:a6:bd:ff:9d:8e:42:ed:40:cd:62:46:
d7:92:ae:49:16:ec:33:18:41:6c:fa:8a:71:04:b9:4d:c4:6f:
6f:2f:ff:c6:ca:e9:86:38:20:7a:08:60:32:9b:18:e5:21:f9:
f1:9e:c9:2f:ac:0f:9e:cb:2e:c9:0c:82:8e:62:ce:30:09:23:
d7:c9:ad:d2:d9:53:77:29:a4:ff:e3:f1:a2:ac:1a:05:c4:89:
f5:8c:ad:db:f0:b3:3b:93:43:c7:4f:f0:94:ae:37:94:57:7b:
59:6c:3d:fa:6a:62:37:a6:81:39:e5:60:4a:39:8c:4c:82:5c:
9d:ff:83:3b:56:6c:ba:2b:b3:25:5c:bf:33:79:18:3e:70:b5:
ae:0c:00:3c:d0:b5:47:13:5b:e7:1c:96:5d:74:1d:d7:6a:03:
cb:1e:1a:d5:b9:70:8d:cf:65:c7:c8:34:01:45:e7:29:b1:7d:
7a:9a:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:51 2026 by rpki-client