
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa
File: aa31434b-d455-3716-8753-f1c07991149e.roa (raw, json)
Hash identifier: NxKLE3hkzxjTRx18itvprZhcRTBS8M/OU+YVAYV6rPc=
Subject key identifier: 1F:8A:A6:9A:83:7B:21:B0:90:F6:45:74:06:BC:89:73:47:6A:F8:3B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DC7098213A56641AB5D64
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.188.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:c7:09:82:13:a5:66:41:ab:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=3b421663-ed4f-460b-a7fa-9eecc83b0183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:d3:58:a5:90:c5:aa:d7:c7:b6:cb:89:8a:
5b:7b:ea:cb:24:51:69:e7:df:d1:da:48:94:ad:92:
f7:03:d6:38:2e:0b:2f:9c:98:a9:06:4b:d8:eb:23:
d9:9f:ec:8b:a9:d1:80:01:68:d9:f7:a3:2a:34:5b:
a6:0f:02:e4:3b:12:22:bb:96:25:18:28:1f:b9:8e:
25:9e:c5:ad:07:00:ef:53:6d:86:36:ca:1b:74:f9:
17:8e:66:2d:c2:7c:6a:14:80:82:20:d2:65:6e:cf:
df:4d:fd:49:84:6e:df:c8:81:e7:3e:42:56:d1:6c:
c9:a8:76:7a:c7:6e:ff:f9:d1:4e:18:c1:f3:65:e8:
08:aa:ce:17:eb:34:96:2e:f5:ae:7c:1a:0c:99:49:
db:b8:7f:85:64:07:4d:63:a4:b1:09:a5:ec:7c:b2:
52:1b:5e:db:ec:55:dd:8d:6e:df:b3:65:d5:f1:6c:
a9:00:e2:a8:eb:37:c7:06:fb:11:13:83:dc:44:25:
2d:36:87:2b:92:fa:72:ef:c7:7d:93:b9:75:3e:d5:
6b:82:e9:12:e3:fa:11:cd:73:a4:ca:c1:e0:89:38:
cc:06:53:f2:29:bc:6e:3f:2b:f0:ae:53:69:3c:83:
07:c2:8f:93:73:6f:4e:df:0f:13:4a:65:5d:01:18:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:A6:9A:83:7B:21:B0:90:F6:45:74:06:BC:89:73:47:6A:F8:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:d8:24:6a:6e:b4:bf:a1:1f:60:92:b0:50:f7:1b:4d:4c:f7:
2a:de:12:b3:5d:80:5d:33:5a:1a:ce:23:cd:54:3b:c7:8f:fe:
f4:75:1d:03:e5:b0:70:d6:f1:be:f1:92:3a:9c:3a:83:59:5b:
0d:82:b9:89:70:0e:98:fe:6f:2a:a5:b7:da:fd:74:cf:e6:d7:
64:a2:94:00:27:67:9f:86:50:19:bc:ca:b7:1f:ce:38:3a:8f:
ef:ae:1d:7a:8c:99:5a:09:16:bb:f8:75:05:c3:96:53:f5:07:
9e:48:67:b9:f7:5c:a8:0b:f8:70:ac:46:b6:20:3c:e2:d5:d0:
58:ea:cd:a2:6b:d1:65:3c:50:1a:73:c9:98:71:4b:35:30:ce:
63:3b:86:a8:98:f7:8f:a0:e6:d4:cc:b8:89:d2:0e:23:b1:87:
8a:39:5b:66:19:0e:62:ab:40:3f:a9:b9:61:01:a6:5b:73:3d:
ae:2e:d7:c6:f7:0f:db:2a:56:7d:52:b4:f3:c1:ce:58:6e:fb:
43:b7:e7:bd:fc:03:13:20:c9:04:9e:00:91:0f:fc:49:1c:1c:
7d:05:33:4d:31:c5:13:f7:1a:d3:13:37:f1:c1:f3:7a:2d:cb:
44:f4:5b:23:34:cf:86:f6:9f:fa:58:8c:6f:ef:77:0f:54:9b:
7c:9e:ff:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPccJghOlZkGrXWQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
M2I0MjE2NjMtZWQ0Zi00NjBiLWE3ZmEtOWVlY2M4M2IwMTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNfTWKWQxarXx7bLiYpbe+rLJFFp59/R2kiU
rZL3A9Y4LgsvnJipBkvY6yPZn+yLqdGAAWjZ96MqNFumDwLkOxIiu5YlGCgfuY4l
nsWtBwDvU22GNsobdPkXjmYtwnxqFICCINJlbs/fTf1JhG7fyIHnPkJW0WzJqHZ6
x27/+dFOGMHzZegIqs4X6zSWLvWufBoMmUnbuH+FZAdNY6SxCaXsfLJSG17b7FXd
jW7fs2XV8WypAOKo6zfHBvsRE4PcRCUtNocrkvpy78d9k7l1PtVrgukS4/oRzXOk
ysHgiTjMBlPyKbxuPyvwrlNpPIMHwo+Tc29O3w8TSmVdARiq9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+KppqDeyGwkPZFdAa8iXNHavg7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzMTQzNGItZDQ1NS0z
NzE2LTg3NTMtZjFjMDc5OTExNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7yQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAInYJGputL+hH2CSsFD3G01M9yreErNdgF0zWhrOI81UO8eP/vR1HQPl
sHDW8b7xkjqcOoNZWw2CuYlwDpj+byqlt9r9dM/m12SilAAnZ5+GUBm8yrcfzjg6
j++uHXqMmVoJFrv4dQXDllP1B55IZ7n3XKgL+HCsRrYgPOLV0FjqzaJr0WU8UBpz
yZhxSzUwzmM7hqiY94+g5tTMuInSDiOxh4o5W2YZDmKrQD+puWEBpltzPa4u18b3
D9sqVn1StPPBzlhu+0O35738AxMgyQSeAJEP/EkcHH0FM00xxRP3GtMTN/HB83ot
y0T0WyM0z4b2n/pYjG/vdw9Um3ye/2Y=
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:50:48 2026 by rpki-client