
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa
File: 7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa (raw, json)
Hash identifier: LjFbVh7FFrAVK4WdBKTw2/os9DdUzrIbh/HXrCAxVfI=
Subject key identifier: B2:AD:7C:43:6B:B7:F8:E9:AA:0E:F0:A5:32:42:27:C4:ED:B4:A4:48
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3D7ED3E405FBBC6A655D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.222.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:7e:d3:e4:05:fb:bc:6a:65:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=4c4619bc-ddb4-40be-b013-58cfa97597dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:56:c1:fa:d9:ad:c3:58:98:3e:fa:0b:ff:
e1:9d:fa:5a:b7:80:74:51:cb:a8:00:ea:ce:f2:79:
cd:96:87:79:fe:4a:a2:1a:71:9e:e4:98:f7:ed:ac:
7a:5e:9f:95:0f:10:c7:b7:2f:a1:9a:fa:77:d3:5f:
29:f4:ba:48:2b:28:95:6a:a5:ed:57:3e:bd:cb:0b:
44:60:af:0f:41:9b:f6:c5:83:f5:e3:86:29:df:15:
bb:2e:69:01:77:65:51:7e:5e:f5:8d:8b:85:47:ad:
c1:c2:5c:c2:fd:9f:81:28:96:4f:f2:77:39:3b:89:
18:47:29:39:0f:a9:6d:32:19:19:d0:eb:e0:00:e8:
6b:ec:bc:09:67:65:18:cc:01:40:e5:f6:ae:7b:cd:
f8:4e:d5:ab:33:19:1e:b7:f0:9b:46:79:4c:58:c8:
c6:5c:59:ad:51:43:72:fd:dd:55:1e:c6:0a:23:62:
d7:fd:93:4b:b1:b1:6b:08:dd:46:e7:9c:31:61:7f:
cb:87:66:df:85:c6:a4:4d:8b:14:35:48:d8:55:75:
c6:ab:dd:4e:14:c6:0b:65:a6:23:01:88:ef:fd:63:
ff:11:93:7c:4e:fe:3c:d9:f7:4b:b6:81:a7:0a:1e:
d3:e5:5d:8b:86:64:db:3e:84:b7:41:d6:dd:df:3b:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:7C:43:6B:B7:F8:E9:AA:0E:F0:A5:32:42:27:C4:ED:B4:A4:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f5:b7:db:2b:75:32:5d:5b:80:cb:e9:9f:05:f2:b1:a2:1a:
29:c2:eb:9c:6f:61:07:09:ee:02:8e:ed:e8:04:e3:55:66:0b:
3e:49:d4:3c:f9:1b:96:0f:1f:7d:e3:37:86:a6:0a:80:a5:66:
f3:53:c4:57:6b:83:53:e9:9e:d2:e6:4b:6b:cb:c9:08:2c:07:
56:65:b2:0e:9b:bc:8c:71:78:f0:dc:ea:24:dd:62:72:d5:b2:
15:ec:fe:37:23:a7:81:50:9a:e0:d0:22:14:a5:2d:77:16:73:
0e:30:13:d5:9e:e1:1d:86:a4:9f:68:90:ff:78:1a:97:5d:ea:
20:84:2a:cf:26:6b:3e:97:df:d0:aa:3b:95:26:53:7d:e0:b0:
52:d8:88:aa:85:ce:e4:1d:d7:1e:e5:bf:71:33:b4:1a:68:8b:
b2:79:38:ea:7e:aa:00:d9:dc:22:f4:9d:44:25:74:74:e2:9e:
a8:d7:65:a5:88:b0:c1:46:e5:42:26:ed:68:5c:91:57:e6:d3:
1f:46:6a:51:1a:c9:b7:e1:5b:05:d0:4c:9c:c9:9e:49:c0:93:
68:9b:3c:68:8a:c6:67:5a:7d:d3:e1:54:e8:78:d4:bb:08:12:
16:51:af:bc:ad:6d:17:22:98:91:ab:b4:f7:df:b0:12:92:e9:
ad:18:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:14:16 2026 by rpki-client