
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
File: 89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa (raw, json)
Hash identifier: m9xDTUzdlcFyFW15toE+1nQf9TnNvn9KvFOeqSq/g3s=
Subject key identifier: 46:8E:8E:7F:AF:27:02:3A:52:FE:CC:22:BD:1D:43:C0:62:7E:D7:79
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F4328584F71EDA1F82B7BF57BB3365760
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
Signing time: Fri 09 Oct 2026 13:00:13 +0000
ROA not before: Fri 09 Oct 2026 13:00:13 +0000
ROA not after: Thu 07 Jan 2027 14:00:13 +0000
asID: 237
IP address blocks: 35.24.0.0/17 maxlen: 17
35.24.128.0/18 maxlen: 18
35.24.192.0/19 maxlen: 19
35.24.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:71:ed:a1:f8:2b:7b:f5:7b:b3:36:57:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Oct 9 13:00:13 2026 GMT
Not After : Jan 7 14:00:13 2027 GMT
Subject: CN=09aed96d-dbd1-4f95-9bdf-531ca4ff794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:f6:e3:58:01:97:ee:88:dd:9d:b4:ee:f1:
ed:10:b7:81:bf:29:a7:2b:54:3d:56:a5:9c:9b:0a:
f4:c3:6d:0b:16:67:b2:41:29:41:24:81:ac:a6:02:
0a:a5:6f:a1:74:c4:8f:8d:71:a0:d1:96:76:46:a3:
36:d0:6e:57:1c:bd:64:93:9b:ea:5f:d6:b7:b4:a6:
81:bb:57:b3:96:16:bd:b7:c3:0f:38:33:8b:65:dd:
d3:b9:0c:1a:1e:b1:42:61:21:ce:09:a3:30:01:ee:
d0:cd:32:44:d0:3f:eb:33:14:a0:b2:ec:65:5b:38:
f8:5d:d5:8d:56:d5:3e:4f:2f:e7:f9:b7:c0:18:9c:
e8:64:f2:c8:4c:c3:f9:01:28:6d:06:f6:19:31:a7:
b3:86:a5:32:29:19:03:b9:06:ea:28:fe:70:3d:6d:
20:02:85:1a:bd:2e:98:32:5c:0b:f3:3b:3b:71:2b:
de:23:72:89:91:18:e0:74:91:48:12:f2:c3:ba:54:
f0:7f:25:ea:e6:57:18:51:39:5a:26:d3:2b:ff:cd:
af:05:8e:6e:6e:52:35:cf:d5:15:e3:47:9c:fe:93:
2c:a0:33:67:f6:8c:b9:eb:e7:ed:bb:22:79:a7:f0:
fc:0e:0a:03:36:68:00:2f:6b:96:ae:36:e0:5e:bb:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:8E:7F:AF:27:02:3A:52:FE:CC:22:BD:1D:43:C0:62:7E:D7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:71:cf:ee:b9:02:4a:b1:96:5a:4b:ce:45:92:00:fb:14:2e:
87:70:76:ea:7f:23:cb:0a:f8:a2:ac:37:d5:d6:ac:ee:55:de:
7d:91:6b:db:b8:a6:7f:23:aa:a3:78:00:89:60:d2:02:a5:81:
7d:ba:db:6e:5b:da:5a:4b:7f:51:8c:fe:29:e3:db:a3:26:91:
ad:66:84:5f:aa:d3:45:4d:db:fe:a4:4c:dd:5f:ab:c3:ef:f5:
5a:72:eb:be:94:19:f5:2d:44:1d:16:0d:c8:5e:c9:a3:16:11:
c1:95:aa:f3:b8:ed:f9:84:e9:e1:25:43:34:36:c4:4e:8a:81:
a5:c7:57:ad:72:c2:ae:79:68:49:7d:26:a4:11:bb:85:16:61:
58:9f:32:b7:e6:4c:ed:f5:13:66:bf:81:37:4d:1e:ef:d9:fb:
e1:56:a1:31:80:34:32:37:91:58:68:e3:e6:73:8f:12:3e:81:
08:d3:fc:a7:66:7b:38:2b:43:8a:38:3f:61:31:5d:c4:6b:1f:
06:36:7e:fe:33:3d:b5:1f:76:a2:d6:7a:69:20:cb:35:fb:45:
74:71:73:ef:cf:f9:73:b9:20:f7:da:21:4a:c3:78:1e:a9:8f:
a8:d8:69:9c:f1:4f:99:26:3a:fe:3e:4f:36:8a:98:f1:75:58:
ab:87:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:46:32 2026 by rpki-client