
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf312abc-f9e5-39b2-8cba-6637fecf3ba1.roa
File: bf312abc-f9e5-39b2-8cba-6637fecf3ba1.roa (raw, json)
Hash identifier: LxI7j1w6RK4AjFjTBLDL+DrPIr75Duv2beUuKgkAk6M=
Subject key identifier: 2D:60:62:BE:A8:1B:EE:E1:BB:28:88:48:30:74:44:F7:14:35:61:76
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584B9EED47719C6AEC7C985A9D8C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf312abc-f9e5-39b2-8cba-6637fecf3ba1.roa
Signing time: Thu 23 Oct 2025 20:43:30 +0000
ROA not before: Thu 23 Oct 2025 20:43:30 +0000
ROA not after: Wed 21 Jan 2026 21:43:30 +0000
asID: 396982
IP address blocks: 35.216.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:ed:47:71:9c:6a:ec:7c:98:5a:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 23 20:43:30 2025 GMT
Not After : Jan 21 21:43:30 2026 GMT
Subject: CN=d01e0347-cfb4-4e2b-b088-7cf46cdf8bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:72:a1:51:78:03:93:30:56:10:3a:fc:cc:
86:6f:6b:fa:4f:c1:04:f2:be:8a:3f:ed:bc:6e:a9:
09:ef:06:fd:c7:ee:aa:e2:4d:8e:1b:df:2f:8c:e3:
89:a5:55:96:fe:c5:dd:dd:b1:41:b2:47:c0:78:06:
fb:4e:b2:9e:c5:6c:c4:dd:5c:1e:5f:b2:70:7a:62:
80:b1:24:f5:06:c1:ef:f3:30:ac:fd:f5:2b:10:45:
2e:9c:11:5e:8f:03:07:e6:83:94:e4:6c:8d:a6:24:
c4:2a:2f:a0:b0:dc:0b:b9:52:95:7a:d8:e5:1f:49:
12:1c:04:6f:5a:2d:83:86:c8:39:d1:ce:91:5d:d5:
8b:d3:ce:af:f1:e7:0b:89:49:93:52:59:dc:ee:89:
a8:68:88:64:27:21:ae:a2:5c:64:0e:d5:f3:71:ed:
03:9e:9b:e6:91:7e:de:d1:eb:47:9f:ea:a7:44:d8:
bb:a0:7d:92:61:8b:7f:93:99:26:fc:61:1a:fc:63:
3d:86:5d:40:bf:16:66:71:94:7b:11:b6:d7:fb:15:
ea:fa:7d:8c:2a:62:c1:9d:06:5d:10:e9:de:34:42:
e9:5e:cc:0c:55:b6:f1:18:7b:f6:c4:3c:36:97:16:
d3:77:38:0f:26:0d:ed:e2:28:1a:ed:fc:11:2c:3f:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:62:BE:A8:1B:EE:E1:BB:28:88:48:30:74:44:F7:14:35:61:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf312abc-f9e5-39b2-8cba-6637fecf3ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:b5:e6:b7:25:0b:a3:c1:9c:08:10:46:a5:e3:10:e4:96:b9:
0b:ee:6e:e4:c0:16:20:c9:0c:8c:ef:f0:11:e2:d4:3d:8a:62:
e0:c1:56:6c:de:ee:44:5d:f3:e6:ee:e5:fe:e5:49:82:3d:98:
c9:7d:a1:89:2e:67:fa:bf:35:5e:38:b9:fc:b2:0a:8a:03:8a:
3e:66:a7:68:5d:83:e2:02:15:f8:27:d1:8e:89:10:c6:8d:92:
31:38:e9:b0:45:b7:fd:ce:10:29:91:29:41:91:c8:c0:7a:06:
99:77:6c:7c:e1:db:8a:bd:8e:ec:86:05:ae:85:d9:40:42:83:
6e:33:70:c2:7c:18:ba:e9:80:84:28:47:43:d0:a4:6b:4b:d6:
dc:31:99:7a:c3:67:1b:63:45:e1:c2:15:35:50:4b:13:f9:ef:
3d:3c:6e:9e:9b:1c:6a:67:8a:0c:fc:5a:04:90:88:10:da:54:
9d:48:9a:f6:28:fc:24:75:04:45:dc:8e:30:45:08:02:62:a6:
66:33:43:64:7a:9c:51:a1:73:b8:ef:2c:c8:cb:fa:24:29:23:
ef:2e:f9:20:9d:16:e0:69:cb:69:18:03:2e:6b:4e:05:02:7c:
c6:73:43:a6:10:ac:4f:53:dd:ff:11:2d:1b:c4:a1:df:5b:0f:
e5:e3:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:51:02 2025 by rpki-client