
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25a9ac21-9865-3f3b-8b21-f8bc33d84ed1.roa
File: 25a9ac21-9865-3f3b-8b21-f8bc33d84ed1.roa (raw, json)
Hash identifier: +QZ/opu4uJHsOXLFlZR2tVXm99qpK1LPEyH9WH4TIC0=
Subject key identifier: 14:D9:AC:7C:31:32:1B:1D:F7:17:A1:D1:01:C9:68:3D:FB:44:CB:A1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3D954D33A0A5DF8FC64300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25a9ac21-9865-3f3b-8b21-f8bc33d84ed1.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.230.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:95:4d:33:a0:a5:df:8f:c6:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=10fc5c5b-46ae-4f2b-b776-5e7dab8edc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:f0:41:68:83:70:46:02:c3:af:6d:a8:e6:
17:26:af:4a:32:b8:e1:73:47:e8:26:e5:27:75:6c:
56:b5:05:b5:fd:40:93:32:fe:ca:73:fa:c4:16:ad:
c1:7f:36:57:ba:ee:d1:96:26:be:5f:82:de:fb:2c:
69:f6:db:6d:34:58:aa:dd:dd:e1:ce:88:2a:df:a8:
22:b3:17:5f:91:d0:89:ab:f5:18:6a:3b:0e:9d:ba:
4d:d2:e1:9d:39:25:92:ca:eb:99:81:74:c2:2d:c3:
a0:04:26:de:16:b7:b2:ed:d9:ef:f0:bd:0e:a8:72:
9c:6c:0d:75:62:1c:23:bb:85:40:d9:e3:0f:4f:6c:
fc:01:f9:da:f2:36:8c:c7:90:8f:bb:a2:b4:00:99:
a1:7c:b1:26:52:a8:c5:1d:d7:64:1e:65:8b:b0:f4:
46:9e:64:25:bb:77:23:44:cc:3e:d0:be:49:7a:86:
cc:92:31:76:1a:25:ac:a2:4e:a1:85:8e:8c:3b:93:
db:e4:86:09:99:14:9f:da:0d:88:75:63:2d:1f:0d:
5a:ee:16:e5:5a:2d:57:d4:e9:16:a0:69:86:01:05:
e3:4e:e2:98:f3:a6:73:b8:c5:63:81:87:71:15:f6:
61:85:9e:68:84:9f:b9:ad:36:09:00:d3:32:c0:66:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:AC:7C:31:32:1B:1D:F7:17:A1:D1:01:C9:68:3D:FB:44:CB:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25a9ac21-9865-3f3b-8b21-f8bc33d84ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.230.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:b2:06:9e:96:6c:3b:07:b9:52:0b:2d:c0:ba:b8:46:8e:65:
dc:11:b1:f6:f4:18:53:a1:00:2f:2b:5c:db:ed:02:41:86:97:
78:3b:0b:d3:2c:48:a0:f8:e1:51:b0:61:b8:e0:9b:d7:e0:51:
1b:a2:6a:20:78:e3:d3:a2:3c:20:43:6c:46:be:a0:c4:9e:c1:
60:c5:93:52:91:07:3d:39:1b:6b:5c:65:cb:5d:ae:47:c9:e1:
eb:32:b3:9f:06:c8:f7:94:ce:b4:4a:ca:aa:be:ee:14:8e:f1:
02:da:51:e2:5e:d8:e2:51:33:51:3d:5c:60:34:c6:3d:8e:92:
03:09:b2:77:b6:16:5d:e0:8f:9b:47:cb:4a:c6:1c:7a:97:8a:
fc:91:e3:31:d1:53:b6:ba:37:86:4c:da:c3:58:00:27:23:5d:
f5:2c:2a:13:f0:01:d3:47:c3:55:df:75:c9:ab:ca:bc:64:86:
1d:cf:61:91:52:19:40:7c:74:76:f7:de:45:0f:f6:f7:1a:6e:
5b:42:cd:3d:9e:28:23:2c:9a:d8:c0:95:b3:6d:4c:86:00:e6:
88:bc:38:ec:b1:bc:e5:92:b6:c4:8f:0d:28:eb:59:fd:1c:61:
26:5d:fc:74:95:8a:25:78:f7:a7:af:5f:b0:bf:c0:d8:a0:ec:
04:76:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 09:02:13 2026 by rpki-client