
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4218466-bbbc-3bcd-ae1d-9499a8cf7e01.roa
File: a4218466-bbbc-3bcd-ae1d-9499a8cf7e01.roa (raw, json)
Hash identifier: K20fNFvHoAafSjUbkDa/l5oWXFehblveIrhXL4aPzy4=
Subject key identifier: 46:CD:50:28:5C:61:A0:1D:99:8D:A2:0C:60:4E:09:D4:C7:91:F2:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D5FB34EB3DC5273F9C7921700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4218466-bbbc-3bcd-ae1d-9499a8cf7e01.roa
Signing time: Thu 02 Apr 2026 14:44:39 +0000
ROA not before: Thu 02 Apr 2026 14:44:39 +0000
ROA not after: Wed 01 Jul 2026 14:44:39 +0000
asID: 396982
IP address blocks: 35.252.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:b3:4e:b3:dc:52:73:f9:c7:92:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 2 14:44:39 2026 GMT
Not After : Jul 1 14:44:39 2026 GMT
Subject: CN=ec87390d-ef70-48ae-a797-a298c36b9aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:22:d2:06:77:73:6d:7f:0b:9a:03:c5:3d:
f2:61:a1:07:41:53:49:ab:84:6e:b6:e9:5f:fe:af:
44:79:6d:e1:7b:32:d5:bb:37:6c:54:f0:6f:47:7a:
e2:61:b3:74:58:f8:29:c4:95:02:6f:0d:6d:22:b8:
1b:db:65:e6:e8:bf:be:24:7e:76:fc:81:ce:f1:f4:
09:ba:57:b4:4e:90:b1:46:93:22:34:d7:89:aa:c5:
15:9b:0d:01:3a:2f:46:18:6a:25:da:f6:36:08:ce:
04:ec:f1:2a:a9:f8:d0:7f:99:53:13:92:59:09:37:
de:0e:53:b6:34:8b:5f:a7:c0:a1:2d:dd:78:7e:fb:
3d:0c:3c:9e:41:f3:00:aa:40:be:39:f5:d8:67:8a:
21:90:98:86:9c:10:82:4f:88:ee:9d:83:e0:2c:32:
c6:33:6c:9e:ca:87:f2:00:48:38:c3:df:54:50:ee:
75:a5:34:9a:cd:82:f6:f0:af:62:9f:dd:87:7f:a3:
8b:03:ff:dd:ea:85:ff:1a:37:c1:de:32:89:ce:65:
cd:1f:75:bc:2a:19:d1:ab:30:a4:fb:ff:fa:d6:bc:
38:e1:fc:b3:fc:0e:43:6e:bd:6e:48:9f:92:15:c2:
89:0e:a1:69:82:ab:7d:d4:37:b1:e4:38:af:ee:20:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:50:28:5C:61:A0:1D:99:8D:A2:0C:60:4E:09:D4:C7:91:F2:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4218466-bbbc-3bcd-ae1d-9499a8cf7e01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.252.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:3e:5f:15:1f:38:38:74:c6:fd:73:a6:56:ec:ad:e7:b9:01:
c3:eb:a7:60:ca:31:24:6a:13:b2:ae:6a:60:70:68:b8:f0:85:
b0:da:8f:96:c1:25:85:63:38:29:de:c5:2c:d0:05:f2:19:9a:
d9:92:65:30:f2:1a:eb:4c:64:3b:4e:2d:ad:35:c0:ea:26:91:
1b:29:b8:b6:73:98:a8:de:38:47:2f:dc:05:c8:d0:bb:ad:33:
6a:1f:6e:f6:8e:c4:51:a8:eb:4c:4a:19:10:e9:d6:ec:56:bb:
e8:22:ed:b8:6a:a4:3d:c9:ed:69:12:4b:ff:e1:73:e9:13:49:
60:b5:0f:5b:79:d9:95:a1:f3:11:c7:2d:a8:01:00:8c:f2:34:
86:55:17:b0:ad:cf:d6:f2:d9:34:c7:2b:4c:3b:c9:bc:0a:b2:
c9:3d:ab:bf:15:5a:2c:23:24:12:3c:02:f1:93:43:3c:b5:c5:
be:72:ef:e0:f7:5e:1c:62:f8:f1:2a:e1:7f:0d:33:5f:ec:a5:
ba:e2:22:1e:42:22:67:d8:a4:f9:b4:1e:f7:39:bc:a0:d4:ff:
96:10:8b:7d:93:ae:da:be:df:2d:f1:55:86:53:a7:aa:d6:e8:
66:56:6e:59:e7:fa:70:08:1f:d4:85:ed:c1:94:61:27:6d:a9:
31:08:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:57:14 2026 by rpki-client