
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/428689c8-361d-3545-a4f4-1f9de3315cd9.roa
File: 428689c8-361d-3545-a4f4-1f9de3315cd9.roa (raw, json)
Hash identifier: ERaOn9GSWcmrLK1c153yGvICH8SUKJaQKnJ8V7dszio=
Subject key identifier: 92:BA:1A:E4:64:0D:CB:19:36:DD:73:69:0A:F4:5C:ED:BD:85:25:88
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DB811722F3CEACA419500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/428689c8-361d-3545-a4f4-1f9de3315cd9.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.222.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:b8:11:72:2f:3c:ea:ca:41:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=b05b2643-4065-48ad-88b5-602dfae34fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:f5:d9:0e:5e:95:28:73:c8:2b:be:1d:6a:
df:40:e7:9a:66:5d:c3:a7:9c:3c:e1:01:7c:de:d1:
58:2d:1d:07:2d:bd:02:57:3a:64:ed:bc:e8:9b:d5:
3d:bc:a5:58:31:7f:fa:35:5c:7b:a9:6c:a8:ea:d7:
b3:85:1c:97:c8:b9:c5:5f:18:e1:fd:3d:e8:05:10:
21:0c:50:a8:3e:33:8a:7d:50:ae:76:87:d0:c8:9f:
57:f7:61:3a:cb:e8:15:26:85:3f:bc:76:7d:93:8f:
1d:3b:c6:5a:81:c9:67:c4:75:2e:50:2a:ae:d9:2c:
f8:63:3f:2c:f4:bb:b0:1d:02:b9:74:53:af:35:3b:
e0:85:4a:43:6f:65:b8:a6:c3:c6:c8:a1:14:ad:59:
79:28:4e:94:2a:de:df:77:6f:11:93:12:bb:83:0a:
fe:ab:db:b6:82:b4:11:57:89:6c:dd:16:f8:60:79:
6c:07:a8:e2:7d:11:f6:08:f3:86:10:bb:ac:76:18:
23:29:d1:29:4b:31:62:51:9f:e6:85:16:35:29:f5:
b2:9d:bb:ae:6d:a9:b1:38:81:8b:bb:ba:d0:2d:1b:
ab:fe:02:91:3f:da:73:f7:19:57:e5:14:05:3b:46:
02:21:25:0d:54:f8:28:ec:8e:f4:01:61:8b:02:1e:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:1A:E4:64:0D:CB:19:36:DD:73:69:0A:F4:5C:ED:BD:85:25:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/428689c8-361d-3545-a4f4-1f9de3315cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:24:14:15:b6:20:2b:67:a6:e5:3c:00:cc:ba:10:fd:51:41:
a6:4f:e8:57:b4:fe:b9:76:17:56:4f:7f:e3:61:f1:ae:49:1d:
3c:d8:6c:c8:be:d5:05:96:55:87:cf:b6:da:dd:d6:70:20:aa:
44:43:bf:0e:3b:3a:a2:c4:86:02:39:09:2a:2f:5d:11:0c:ad:
09:3c:38:0e:9d:62:15:f6:56:52:be:39:35:be:55:08:59:ba:
b0:a8:53:b1:ea:db:4d:f8:eb:c0:58:b9:d3:44:d9:7e:52:d2:
01:95:a7:e0:12:d6:8d:0b:5a:6e:06:51:10:a5:4b:4d:61:7a:
86:ae:0b:36:27:6a:15:b2:40:78:e7:07:bf:40:4f:91:8d:ac:
7c:4a:81:d8:89:89:07:ce:bb:e7:80:9a:69:79:3a:22:9c:f8:
c7:97:e9:57:dc:31:68:96:45:8d:e5:d2:a8:08:7f:44:1d:83:
81:3d:25:4b:45:fd:73:1f:d0:eb:3a:f6:25:62:04:46:a4:c4:
d1:d8:17:a0:d8:07:3d:d8:9f:05:c7:03:a5:e1:b5:61:8a:53:
38:ad:f6:94:39:7e:f7:fa:d9:c0:56:84:93:8c:36:a7:e4:fa:
4c:66:be:87:75:2c:04:bd:c3:ae:8b:66:27:7f:07:54:fd:93:
c8:69:c7:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPbgRci886spBlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
YjA1YjI2NDMtNDA2NS00OGFkLTg4YjUtNjAyZGZhZTM0ZmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxab12Q5elShzyCu+HWrfQOeaZl3Dp5w84QF8
3tFYLR0HLb0CVzpk7bzom9U9vKVYMX/6NVx7qWyo6tezhRyXyLnFXxjh/T3oBRAh
DFCoPjOKfVCudofQyJ9X92E6y+gVJoU/vHZ9k48dO8ZagclnxHUuUCqu2Sz4Yz8s
9LuwHQK5dFOvNTvghUpDb2W4psPGyKEUrVl5KE6UKt7fd28RkxK7gwr+q9u2grQR
V4ls3Rb4YHlsB6jifRH2CPOGELusdhgjKdEpSzFiUZ/mhRY1KfWynbuubamxOIGL
u7rQLRur/gKRP9pz9xlX5RQFO0YCISUNVPgo7I70AWGLAh6lAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJK6GuRkDcsZNt1zaQr0XO29hSWIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDI4Njg5YzgtMzYxZC0z
NTQ1LWE0ZjQtMWY5ZGUzMzE1Y2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI964MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgkFBW2ICtnpuU8AMy6EP1RQaZP6Fe0/rl2F1ZPf+Nh8a5JHTzYbMi+
1QWWVYfPttrd1nAgqkRDvw47OqLEhgI5CSovXREMrQk8OA6dYhX2VlK+OTW+VQhZ
urCoU7Hq203468BYudNE2X5S0gGVp+AS1o0LWm4GURClS01heoauCzYnahWyQHjn
B79AT5GNrHxKgdiJiQfOu+eAmml5OiKc+MeX6VfcMWiWRY3l0qgIf0Qdg4E9JUtF
/XMf0Os69iViBEakxNHYF6DYBz3YnwXHA6XhtWGKUzit9pQ5fvf62cBWhJOMNqfk
+kxmvod1LAS9w66LZid/B1T9k8hpx8A=
-----END CERTIFICATE-----
Generated at Tue Sep 29 18:51:44 2026 by rpki-client