
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fefae72-1a85-32c2-a098-870593b0aeb4.roa
File: 7fefae72-1a85-32c2-a098-870593b0aeb4.roa (raw, json)
Hash identifier: h25XZLfJsC0hy7mG04WsRY5sRQCCUTYVWyJg7LVMYFo=
Subject key identifier: 9C:57:F6:1C:CE:A6:4E:A7:2A:CD:8B:99:E2:EA:44:76:C4:6F:69:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3D94B8A954BD796DDB8DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fefae72-1a85-32c2-a098-870593b0aeb4.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.203.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:94:b8:a9:54:bd:79:6d:db:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=cd93f552-d3c6-481c-882b-ab4498d48eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:d5:e1:4e:e7:59:d2:67:23:ab:e9:c5:6b:
56:dd:74:59:9a:2f:4d:cd:f8:3d:fd:26:a7:9e:df:
9a:28:2e:ba:40:ca:d4:96:0e:b4:05:96:48:b6:f7:
08:12:2b:5e:32:31:dd:a5:47:53:34:e1:39:5e:be:
81:ab:14:d4:68:84:60:81:f6:ab:32:b6:8b:ee:13:
70:a9:ee:74:54:ed:70:26:52:24:71:51:65:ce:41:
50:d8:bd:19:54:e7:6f:78:8c:1c:0a:c7:c5:b8:ab:
46:a0:d2:c3:4a:16:7e:4b:a9:0f:68:4a:2e:d1:02:
cb:3a:2c:f3:a3:62:3f:93:18:a7:a9:b5:b6:4c:2f:
83:e5:73:06:74:6e:62:93:21:b8:60:3e:54:9f:df:
1a:cc:77:09:1a:0f:cc:5a:36:94:d5:2c:ec:9d:bb:
79:31:1e:c7:bc:19:c8:ee:5e:3f:3e:4e:7c:35:bf:
62:98:ef:54:d9:32:da:15:f5:28:65:53:d7:21:12:
4d:05:a5:35:15:4a:f3:32:bf:af:07:d2:69:e7:e8:
67:d0:4b:0f:a6:55:a2:a5:e8:04:d4:35:eb:09:c6:
ed:fb:f5:b4:70:03:78:2c:b1:c7:30:fe:be:f5:95:
34:d8:2e:1a:fc:29:36:de:b7:f4:e5:94:24:90:36:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:F6:1C:CE:A6:4E:A7:2A:CD:8B:99:E2:EA:44:76:C4:6F:69:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7fefae72-1a85-32c2-a098-870593b0aeb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:51:3b:77:94:a8:75:3c:b2:52:b7:98:4e:60:07:2c:34:6f:
8a:32:76:e4:7e:4f:d2:30:4c:31:91:6a:4f:90:df:52:84:df:
30:01:12:90:76:a2:40:f3:21:24:c4:b9:c9:0f:33:0c:d9:f6:
15:d8:2a:f4:99:60:03:1a:1f:df:2d:8a:5f:25:a7:7d:24:0a:
e7:7a:53:8b:cc:e1:38:f2:7d:66:da:2f:11:a1:fa:2f:82:60:
83:57:60:76:c1:73:88:45:33:ba:64:39:ad:18:62:3a:7b:03:
d1:50:a2:ea:7a:d3:fd:38:76:3f:41:0c:e5:8d:0a:4e:a4:64:
63:58:64:1d:20:fa:c7:9f:77:22:f4:9e:c5:8a:16:11:7f:4f:
2f:54:9e:4c:a0:06:0a:26:0e:36:63:04:e4:ec:61:ac:01:d4:
91:d2:f1:f8:89:3b:73:d7:8c:f0:05:2e:f2:77:58:49:c0:11:
25:5f:c4:09:fa:19:08:82:19:cf:8e:df:09:1f:55:91:15:ef:
8d:bb:25:69:74:9d:3d:0e:90:d8:3e:51:de:40:82:46:5a:26:
1d:90:5e:e7:5d:1e:69:bf:49:6e:4d:93:a9:0e:2a:a3:1a:e7:
4f:0c:0e:62:ec:82:89:a9:d5:50:8d:53:f5:88:23:62:db:0e:
72:67:bb:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZS4qVS9eW3bjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
Y2Q5M2Y1NTItZDNjNi00ODFjLTg4MmItYWI0NDk4ZDQ4ZWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYfV4U7nWdJnI6vpxWtW3XRZmi9Nzfg9/San
nt+aKC66QMrUlg60BZZItvcIEiteMjHdpUdTNOE5Xr6BqxTUaIRggfarMraL7hNw
qe50VO1wJlIkcVFlzkFQ2L0ZVOdveIwcCsfFuKtGoNLDShZ+S6kPaEou0QLLOizz
o2I/kxinqbW2TC+D5XMGdG5ikyG4YD5Un98azHcJGg/MWjaU1Szsnbt5MR7HvBnI
7l4/Pk58Nb9imO9U2TLaFfUoZVPXIRJNBaU1FUrzMr+vB9Jp5+hn0EsPplWipegE
1DXrCcbt+/W0cAN4LLHHMP6+9ZU02C4a/Ck23rf05ZQkkDbnLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJxX9hzOpk6nKs2LmeLqRHbEb2nVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2ZlZmFlNzItMWE4NS0z
MmMyLWEwOTgtODcwNTkzYjBhZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5RO3eUqHU8slK3mE5gByw0b4oyduR+T9IwTDGRak+Q31KE3zABEpB2
okDzISTEuckPMwzZ9hXYKvSZYAMaH98til8lp30kCud6U4vM4TjyfWbaLxGh+i+C
YINXYHbBc4hFM7pkOa0YYjp7A9FQoup60/04dj9BDOWNCk6kZGNYZB0g+sefdyL0
nsWKFhF/Ty9UnkygBgomDjZjBOTsYawB1JHS8fiJO3PXjPAFLvJ3WEnAESVfxAn6
GQiCGc+O3wkfVZEV7427JWl0nT0OkNg+Ud5AgkZaJh2QXuddHmm/SW5Nk6kOKqMa
508MDmLsgomp1VCNU/WII2LbDnJnuyo=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:49:57 2026 by rpki-client