
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20ef04f8-af07-30e0-98d3-0f5600820e98.roa
File: 20ef04f8-af07-30e0-98d3-0f5600820e98.roa (raw, json)
Hash identifier: R2mFnm/3xRv6UpZit/xVsohJxTfD+kJif8So1LscVJc=
Subject key identifier: 19:0C:54:3A:FF:10:62:BA:37:D4:1F:EF:47:25:C3:68:FB:8B:DA:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EAA51FFD2C4E9FFD43CDC8200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20ef04f8-af07-30e0-98d3-0f5600820e98.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 396982
IP address blocks: 35.200.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:ff:d2:c4:e9:ff:d4:3c:dc:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=a5e1f25a-a14c-4d76-b650-6c2499864091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:11:86:df:7a:59:6f:b3:ec:43:5b:81:d8:
d4:3f:f9:ac:4c:5d:8f:45:37:27:31:cc:90:a0:8c:
f1:11:07:95:c6:5d:5c:7e:69:fb:6c:87:b8:f3:1c:
b2:dd:69:64:dd:16:0f:34:03:ab:ee:a4:f5:73:fe:
c0:34:bf:11:d6:63:74:28:9e:17:fe:e6:fa:6e:65:
46:09:25:a9:4c:14:00:08:8a:af:58:c8:43:db:d5:
a6:79:f8:1c:38:87:b6:0c:e8:bd:35:09:0e:47:43:
b4:f1:13:68:e9:74:d6:a9:61:89:28:fe:5e:e5:fd:
6b:b6:75:20:7e:8e:73:36:e9:6b:0f:bb:14:4b:aa:
1c:a2:b0:19:f0:84:bb:ce:13:cd:9b:c5:87:fd:33:
16:29:33:a3:3c:26:fa:43:a2:94:d7:b3:fe:a8:0e:
16:82:8e:ad:f9:13:ea:9f:68:71:65:9d:4b:e8:64:
6b:9e:c9:7e:0d:f9:23:b1:85:d4:71:79:c1:20:91:
7b:7a:ce:3c:40:e0:0d:03:22:d1:43:a7:64:d9:62:
37:84:cb:0a:55:36:1c:f0:d1:00:ce:e9:2c:40:63:
1d:eb:2a:dc:4f:34:31:7f:6e:c9:0f:70:f8:cf:63:
f9:b1:e6:b8:fc:f2:15:ee:7c:88:73:c8:d8:ec:ff:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0C:54:3A:FF:10:62:BA:37:D4:1F:EF:47:25:C3:68:FB:8B:DA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20ef04f8-af07-30e0-98d3-0f5600820e98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:40:3d:2d:b1:2f:26:44:ea:13:e7:ef:2c:02:00:a2:30:d1:
e5:6b:dd:96:3f:78:6e:9d:70:64:70:76:3d:c5:a0:d5:18:81:
7b:b5:4f:5f:62:03:00:f0:e0:39:a4:7e:a7:9e:98:33:bc:df:
60:9e:7d:d9:2e:6d:d1:f7:91:79:7f:7a:d6:de:5f:59:d7:b3:
b2:b7:90:e9:36:c4:ab:83:6d:45:f2:60:b8:f0:e2:08:90:4a:
c1:68:3e:1b:5e:7f:20:77:d4:bd:3d:41:72:2a:2b:b3:a6:c1:
ef:fa:b1:53:e9:d5:a9:74:8b:bd:55:d1:78:4a:44:31:37:c3:
7c:75:29:7c:40:49:ed:05:8f:dc:b0:7e:0d:83:d6:75:63:a7:
ea:b5:b0:bd:d5:9c:a9:c2:bf:55:a3:7e:5d:50:89:4d:ff:cf:
48:4c:42:9c:64:24:aa:2b:0d:f5:5d:8e:26:93:6c:f2:ac:f0:
a5:a3:d8:ae:f0:29:08:51:36:3e:9f:bd:f9:ed:57:92:b8:dd:
b5:cb:fe:5c:00:21:96:ae:27:c4:8a:6a:09:76:c0:58:8a:4b:
51:50:b0:e1:27:ca:9c:8c:c1:32:86:c2:30:8e:9f:6f:ae:b6:
2f:09:e6:82:1a:80:93:b8:f6:f2:af:01:2e:0c:cd:e5:5d:58:
5a:1b:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:54:32 2026 by rpki-client