
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/610fbe64-b752-3803-bca4-40bf16a45194.roa
File: 610fbe64-b752-3803-bca4-40bf16a45194.roa (raw, json)
Hash identifier: 1mMmS6i1oyLAAEzhqV+k6XnAWr4S+ba9BP5zM/m3Dag=
Subject key identifier: 54:BD:DB:CB:96:D7:E4:60:F3:A9:2C:90:0A:85:1A:58:F7:8C:71:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3D98BC7CE95BE4595F0700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/610fbe64-b752-3803-bca4-40bf16a45194.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.189.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:98:bc:7c:e9:5b:e4:59:5f:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=da0d5f1c-2037-4b59-ab36-5eb2a5e5d8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:d5:b9:d7:fc:46:13:3f:ce:eb:95:8d:3e:
28:af:e6:0e:c9:ea:ea:b9:74:98:0d:c4:1e:71:ee:
61:35:59:4e:c3:41:ab:24:ec:cd:08:cd:7f:3c:8c:
ba:05:a8:42:d5:b5:d4:5c:48:60:b4:9e:00:22:3c:
53:80:89:e6:85:60:a8:1f:ec:88:fb:1b:0f:10:19:
67:34:00:18:17:17:ce:cb:11:2c:f5:1a:09:e1:b7:
5e:7d:9d:16:66:64:aa:f6:24:cc:25:3f:4d:69:26:
67:ba:5f:b4:2d:6f:fc:f5:16:42:49:de:b6:4a:5e:
01:00:1d:b3:d3:24:66:81:7f:0c:cc:dd:87:b0:c4:
eb:a9:18:e3:65:5c:1e:fe:0f:cc:bd:15:6b:77:4a:
60:b8:ae:3b:36:80:1b:4a:2c:f8:72:9c:f7:8c:3e:
e9:9c:f4:15:e9:42:aa:5f:74:8e:39:03:1d:ad:39:
3e:50:f2:25:5e:57:7c:e7:67:96:d4:0c:51:74:0a:
0d:03:e1:99:78:15:0a:f5:37:5c:99:2c:76:b4:63:
69:d2:72:47:a3:df:6c:b9:6a:56:19:fd:73:42:be:
43:11:c0:9e:78:79:20:58:79:34:ea:4b:76:b2:47:
2e:ba:44:6e:00:d7:b0:02:68:d9:64:b4:57:88:43:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BD:DB:CB:96:D7:E4:60:F3:A9:2C:90:0A:85:1A:58:F7:8C:71:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/610fbe64-b752-3803-bca4-40bf16a45194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.189.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:14:8a:5b:87:eb:15:f5:8f:49:76:11:b8:25:db:bb:65:78:
8a:23:9e:61:89:75:ab:14:ec:9c:a4:a7:da:a7:32:e0:86:cd:
e9:03:dc:3d:d4:24:7a:a0:5c:35:9b:ec:60:2f:99:9d:e5:55:
b6:16:0a:bc:7c:65:92:4f:a9:c5:23:3b:56:72:5b:ad:12:11:
6c:4f:c5:55:99:6f:e3:d2:55:be:56:c6:bd:3a:54:3a:9c:51:
e1:70:59:1a:06:8c:65:dc:af:de:e2:18:c5:ba:c3:0d:fb:fb:
4d:fd:23:d2:73:98:43:24:39:af:52:cf:f7:15:9e:69:5f:70:
ab:a6:82:ad:5b:f6:57:e0:c2:1f:6d:a4:87:f8:45:f1:76:fc:
87:91:76:6e:da:5d:02:9e:44:80:8f:d4:f1:1c:4f:11:b1:ff:
d7:16:18:40:7d:15:b6:40:4b:a0:b3:b9:fd:a1:f6:71:bb:73:
4c:da:7b:27:4a:af:4e:33:4b:af:2d:96:d7:5e:fa:d7:e6:f2:
7e:f8:d7:73:ed:b4:78:62:2d:8d:a4:3c:07:e8:69:0c:df:c0:
65:67:0c:fb:f7:11:24:4f:fe:a2:26:05:da:37:2b:e0:f1:1e:
b9:69:f2:80:88:4d:00:c7:4c:28:23:25:85:a0:ef:2a:d2:1f:
c0:e6:20:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZi8fOlb5FlfBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZGEwZDVmMWMtMjAzNy00YjU5LWFiMzYtNWViMmE1ZTVkOGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucHVudf8RhM/zuuVjT4or+YOyerquXSYDcQe
ce5hNVlOw0GrJOzNCM1/PIy6BahC1bXUXEhgtJ4AIjxTgInmhWCoH+yI+xsPEBln
NAAYFxfOyxEs9RoJ4bdefZ0WZmSq9iTMJT9NaSZnul+0LW/89RZCSd62Sl4BAB2z
0yRmgX8MzN2HsMTrqRjjZVwe/g/MvRVrd0pguK47NoAbSiz4cpz3jD7pnPQV6UKq
X3SOOQMdrTk+UPIlXld852eW1AxRdAoNA+GZeBUK9TdcmSx2tGNp0nJHo99suWpW
Gf1zQr5DEcCeeHkgWHk06kt2skcuukRuANewAmjZZLRXiEOgXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFS928uW1+Rg86kskAqFGlj3jHGPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjEwZmJlNjQtYjc1Mi0z
ODAzLWJjYTQtNDBiZjE2YTQ1MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI73gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUUiluH6xX1j0l2Ebgl27tleIojnmGJdasU7Jykp9qnMuCGzekD3D3U
JHqgXDWb7GAvmZ3lVbYWCrx8ZZJPqcUjO1ZyW60SEWxPxVWZb+PSVb5Wxr06VDqc
UeFwWRoGjGXcr97iGMW6ww37+039I9JzmEMkOa9Sz/cVnmlfcKumgq1b9lfgwh9t
pIf4RfF2/IeRdm7aXQKeRICP1PEcTxGx/9cWGEB9FbZAS6Czuf2h9nG7c0zaeydK
r04zS68tltde+tfm8n7413PttHhiLY2kPAfoaQzfwGVnDPv3ESRP/qImBdo3K+Dx
Hrlp8oCITQDHTCgjJYWg7yrSH8DmIBI=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:58:07 2026 by rpki-client