
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa
File: ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa (raw, json)
Hash identifier: O755j3OdAUUP+sCHTE9Qnpr9fIxxQok9DbLWKNDBbiQ=
Subject key identifier: 85:EC:F7:03:1F:37:6A:EE:86:E8:3C:88:77:E9:D0:B1:B0:A5:E7:AA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AA591E000494F1767E9450
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 35.236.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:59:1e:00:04:94:f1:76:7e:94:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=66c763e2-8302-49f2-a6ef-0d46ea2121c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:54:71:78:d2:75:2b:a5:95:04:b5:21:4f:
c2:ba:cd:85:63:9f:59:41:ef:f9:a2:76:8f:e5:76:
1b:be:65:ef:c7:5a:9f:3d:9d:57:6e:14:9a:7a:b4:
cb:2d:84:13:d7:14:51:72:21:1b:e8:9f:af:79:ba:
30:33:b0:52:6c:89:39:dc:97:cd:0c:c4:9a:89:aa:
60:df:0e:7b:57:a0:b6:e9:21:ee:95:f8:c8:43:17:
b7:ba:d8:b9:03:25:de:02:2a:0e:f6:b2:52:3a:ce:
c0:cd:25:95:7a:5a:94:6d:72:93:50:cb:99:6d:5e:
85:2b:8f:91:64:33:3d:b2:64:9b:aa:d3:08:cf:87:
e1:c0:a2:2d:f6:41:da:f3:ca:33:b2:98:38:5b:a9:
06:18:6f:33:a3:53:1d:f0:9f:c4:34:57:7f:89:00:
1b:7f:33:ab:d4:36:05:37:f5:30:27:21:f3:c1:8c:
cb:ed:f3:67:b3:a6:37:4a:4a:71:b5:99:fa:1e:e5:
82:47:50:17:9d:85:23:24:d2:ca:2d:9c:24:b5:64:
e6:6d:ad:28:dd:b1:f1:4a:cd:86:03:60:fe:06:31:
2d:c8:5d:c9:db:8a:10:f5:0c:9a:00:8c:7a:b5:32:
b4:5b:8d:0a:a3:3e:e7:5b:72:3a:93:3e:b0:3e:7d:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:F7:03:1F:37:6A:EE:86:E8:3C:88:77:E9:D0:B1:B0:A5:E7:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.236.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:95:d4:c9:47:95:9d:d0:2e:eb:2a:c6:6d:69:c1:e5:c1:54:
f5:dd:c4:16:7c:c4:2d:82:69:4d:0c:47:73:6b:00:a1:fa:16:
29:ba:38:8f:8c:55:7a:cd:cc:0d:6b:0c:b5:74:fd:c5:60:53:
6f:f1:19:3e:43:22:0d:b9:13:39:ad:fe:cf:27:d1:14:a0:6d:
4e:f8:b9:b5:d6:c6:2b:8d:71:58:e9:95:39:d6:af:7d:4e:34:
71:a5:4c:5e:99:77:1d:66:15:50:43:a9:ac:a1:61:a8:38:49:
f0:0f:15:dc:f5:f0:3e:59:90:e7:81:f7:f9:bc:1b:08:d8:5b:
d6:8a:c2:0f:2f:e2:90:13:67:4b:d9:b0:df:29:79:7b:05:88:
d0:a1:0d:c7:da:6d:57:e1:e9:7a:34:30:66:d4:26:57:67:43:
93:86:ed:b8:4d:74:84:df:98:2a:2f:d2:0c:c3:24:8c:bc:e6:
cf:9b:64:09:09:0c:06:b8:5e:25:b7:2f:03:86:5d:21:a4:2f:
f4:6e:3e:2b:75:58:c0:82:4e:7f:b4:97:af:f9:b8:08:75:83:
bc:86:79:dd:53:56:a6:74:0a:18:bf:6e:95:15:3f:b0:8f:60:
33:b2:03:69:73:06:2f:ec:71:0b:2c:9b:79:da:ac:dc:b9:a1:
32:df:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:29 2026 by rpki-client