
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa
File: ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa (raw, json)
Hash identifier: YrNox8eIwp4KwuPTSVWewxHiOxiqz1ypl2vPxWmheWg=
Subject key identifier: 25:BF:8A:31:38:8E:6B:D4:59:53:C2:2E:A4:9B:6B:F7:AD:1C:F6:3B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EAA51B6C5EA4528E7B8DF7780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 396982
IP address blocks: 35.199.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:b6:c5:ea:45:28:e7:b8:df:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=ef918f86-95cb-4851-94f6-7427112a5d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:f4:88:e7:1e:50:3d:a2:8c:58:39:e2:30:
dd:eb:6d:6e:e7:42:2c:18:c2:60:ac:5a:1a:be:7d:
3d:54:e3:8b:aa:58:41:3f:60:48:af:8e:02:99:d4:
d7:da:a2:1e:e3:e0:7f:be:94:7b:9f:30:5f:03:16:
0a:69:ec:83:4a:cc:77:70:06:50:48:e7:46:fe:b9:
5e:9a:15:b1:48:b5:85:cf:48:bf:93:7b:3b:3d:e0:
3e:23:d4:52:bd:e0:61:30:14:95:2e:d1:97:0c:f4:
00:58:09:fd:49:76:8a:47:ce:27:0c:89:3a:a9:ed:
11:c7:83:87:21:a8:0b:29:7a:63:02:c5:3a:9b:41:
fb:be:b8:f9:07:35:87:35:0e:c9:6b:d6:9f:4f:1b:
18:bd:ba:6d:f2:a8:26:c6:e7:66:af:cc:c8:b4:b4:
f7:e4:d3:83:f8:16:af:39:ae:7c:e5:6c:6d:c2:c0:
68:ef:31:e1:68:41:3f:76:6f:68:25:69:21:67:1f:
d1:b5:54:ba:93:b5:65:1e:62:34:70:3e:30:1f:e9:
90:26:db:a7:a5:71:f2:b9:39:a7:08:a4:5d:23:a7:
6b:68:9b:51:84:f0:f5:f2:c7:08:b2:1e:76:e0:62:
83:2d:c3:e2:83:94:1f:a8:58:2f:af:0c:d2:09:9e:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:8A:31:38:8E:6B:D4:59:53:C2:2E:A4:9B:6B:F7:AD:1C:F6:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2fa1d9-d5e9-3a37-a66d-b06008e03b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.199.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:bb:d3:1d:38:e0:ce:56:30:3c:f0:ca:a9:bb:2c:ed:b3:fa:
55:9f:63:3e:67:77:9b:e9:47:88:3e:53:1b:87:a2:83:b5:96:
80:5f:20:c4:1e:88:8b:65:06:78:52:90:85:3c:ae:98:02:71:
39:fd:72:d2:88:9e:e3:a9:f5:06:ce:3f:57:4e:a0:11:da:ff:
12:46:22:81:e0:e5:89:1e:41:99:e3:24:64:34:98:d6:48:93:
c2:bc:9e:e2:7c:90:f8:00:4c:5b:b5:cf:3c:1b:a3:00:97:d6:
ca:c8:19:06:bd:d6:26:06:a7:f5:8e:ad:a5:e1:96:1e:c2:e6:
93:56:aa:9f:80:69:46:ca:e8:77:2a:24:7a:67:6b:eb:08:c7:
91:bc:b2:53:02:2d:6b:4c:16:28:4d:76:70:fa:ec:fe:51:a7:
2d:9c:4c:9d:9d:dd:8a:a1:3e:e9:d7:05:3f:07:c9:2a:56:4b:
c3:35:51:31:51:1f:07:86:b6:e0:bf:f1:3c:9e:1d:d5:0f:ef:
e4:5f:c9:39:37:07:ea:71:bf:3d:00:78:e2:f0:30:21:fa:66:
6b:e4:0d:67:8e:0d:c3:88:e4:8b:a9:d1:b3:17:2e:4f:ee:41:
c8:6a:50:0d:32:31:db:f9:70:c9:86:35:b1:91:69:0c:60:d0:
42:2d:1f:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUbbF6kUo57jfd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
ZWY5MThmODYtOTVjYi00ODUxLTk0ZjYtNzQyNzExMmE1ZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfH0iOceUD2ijFg54jDd621u50IsGMJgrFoa
vn09VOOLqlhBP2BIr44CmdTX2qIe4+B/vpR7nzBfAxYKaeyDSsx3cAZQSOdG/rle
mhWxSLWFz0i/k3s7PeA+I9RSveBhMBSVLtGXDPQAWAn9SXaKR84nDIk6qe0Rx4OH
IagLKXpjAsU6m0H7vrj5BzWHNQ7Ja9afTxsYvbpt8qgmxudmr8zItLT35NOD+Bav
Oa585WxtwsBo7zHhaEE/dm9oJWkhZx/RtVS6k7VlHmI0cD4wH+mQJtunpXHyuTmn
CKRdI6draJtRhPD18scIsh524GKDLcPig5QfqFgvrwzSCZ7bHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCW/ijE4jmvUWVPCLqSba/etHPY7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmEyZmExZDktZDVlOS0z
YTM3LWE2NmQtYjA2MDA4ZTAzYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJm70x044M5WMDzwyqm7LO2z+lWfYz5nd5vpR4g+UxuHooO1loBfIMQe
iItlBnhSkIU8rpgCcTn9ctKInuOp9QbOP1dOoBHa/xJGIoHg5YkeQZnjJGQ0mNZI
k8K8nuJ8kPgATFu1zzwbowCX1srIGQa91iYGp/WOraXhlh7C5pNWqp+AaUbK6Hcq
JHpna+sIx5G8slMCLWtMFihNdnD67P5Rpy2cTJ2d3YqhPunXBT8HySpWS8M1UTFR
HweGtuC/8TyeHdUP7+RfyTk3B+pxvz0AeOLwMCH6ZmvkDWeODcOI5Iup0bMXLk/u
QchqUA0yMdv5cMmGNbGRaQxg0EItHyQ=
-----END CERTIFICATE-----
Generated at Sat Aug 8 01:49:42 2026 by rpki-client