
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa
File: a5b66589-cc75-3b3c-8fd1-571170c6000f.roa (raw, json)
Hash identifier: cIQyF/WCDSDCwqOYaNwbM9mX/akFrWTIc8KZ07lNrds=
Subject key identifier: CD:7F:79:95:00:B7:76:D0:5B:20:6F:5F:19:9D:D5:3B:A5:52:8B:F9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DA5FAC83DCE28F76281C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 19527
IP address blocks: 35.216.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:a5:fa:c8:3d:ce:28:f7:62:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=74be2f14-3b9c-45b1-8a1f-4c2d18e31e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:8c:d3:24:11:4f:21:5c:e1:e6:d0:be:57:
3e:64:8b:36:f7:91:ae:2d:0c:a7:f0:6d:ba:6d:3e:
c1:4a:1b:34:88:98:bc:03:26:89:4a:bb:9a:ac:02:
5e:99:c0:5b:6b:bc:aa:e1:e6:af:7b:8a:df:51:a9:
fb:c9:e3:5a:fb:1b:71:8b:c1:66:a9:38:ee:16:2f:
2c:d7:f6:d8:05:60:c4:ab:45:89:4e:c8:46:91:35:
fd:6b:95:69:13:09:6f:04:3e:00:ea:71:93:d7:40:
df:ec:6e:30:a8:a6:c9:0f:46:e3:56:8c:37:77:42:
d3:ae:0b:79:71:ce:a8:53:85:a1:82:5c:38:94:75:
d8:56:4c:14:7c:50:4b:51:d7:14:89:6e:a4:5c:3a:
c4:09:35:97:53:a7:79:91:74:a2:39:7a:ad:c7:01:
3f:5e:2c:0d:99:6a:8c:96:9f:fa:d6:69:79:f3:ae:
ed:e9:0c:93:db:99:40:14:79:38:8e:50:1c:bc:83:
75:ff:8d:e1:6c:f2:c0:84:4e:88:a7:fe:fc:ac:28:
3a:c3:31:11:e0:b8:91:a0:a2:c6:f3:e7:7a:00:dd:
88:52:2f:6f:ce:1f:be:33:fa:15:c3:2a:45:77:dc:
ae:e0:9e:9b:cf:b6:2d:e0:2e:af:88:1f:03:dc:a9:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7F:79:95:00:B7:76:D0:5B:20:6F:5F:19:9D:D5:3B:A5:52:8B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.216.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:ce:4d:3b:37:04:dd:6c:87:2e:39:55:5f:0a:e4:2c:4b:b6:
20:c6:a8:25:44:47:d3:83:24:b9:ba:6c:25:f2:ea:39:56:63:
d8:c8:27:10:16:fb:51:bb:2f:20:4d:23:24:06:2b:50:93:68:
cf:02:23:ac:3c:a7:cf:57:19:68:ce:fb:33:8e:d5:3f:e4:b1:
35:5f:09:33:30:d1:bd:22:1c:d7:5a:f0:05:93:d4:98:5e:9f:
5a:01:0c:3a:1d:b1:14:5d:fb:24:e7:06:02:68:f7:ea:c7:be:
1e:fa:ab:bd:40:1c:a2:cb:92:d1:01:4c:fe:40:4b:57:a3:e7:
9d:86:b3:14:ee:ee:3a:10:db:db:d3:a3:9c:26:11:08:98:52:
00:47:a5:ff:2c:02:cb:c6:d8:41:5f:1b:73:4f:41:cf:c7:c4:
10:4f:fc:92:76:f7:19:ff:70:4c:89:8a:2b:c6:80:e6:5c:bf:
80:d9:2a:3e:d7:a6:a6:cc:20:99:dc:40:d1:da:94:2e:e2:ed:
78:91:38:b6:a1:30:35:4d:ce:24:a6:bb:ba:e1:1c:bc:fb:d0:
f4:b0:1b:3f:8d:53:83:75:08:3e:7f:ab:5a:b9:b4:16:41:cf:
e4:b2:42:18:73:40:fe:fd:70:c1:75:25:c9:94:ee:f5:c8:10:
36:7b:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:58:56 2026 by rpki-client