
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce473861-4db8-363e-b279-2689229642cd.roa
File: ce473861-4db8-363e-b279-2689229642cd.roa (raw, json)
Hash identifier: v0jfOMOa5KNU1AWd9mICt02nBA5rsVj4erMGVEq+Z7I=
Subject key identifier: B2:87:07:31:2D:F5:D7:77:D9:B1:89:F9:45:1C:12:94:06:45:07:02
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3D8FD57DA3EC1201909F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce473861-4db8-363e-b279-2689229642cd.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.221.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:8f:d5:7d:a3:ec:12:01:90:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=f2f69478-5021-4f24-838d-668164991eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b1:12:dd:64:60:e0:8c:94:ad:26:41:6f:66:
0a:f5:82:28:c1:de:b9:2c:13:1c:af:9d:b3:d1:39:
be:78:4b:55:f5:f7:5d:23:7e:cf:d5:d7:ce:f8:45:
88:71:dc:f8:76:ef:5b:2e:13:cf:cb:70:5f:a1:d5:
91:67:94:71:f3:1e:c7:6e:e7:d8:23:22:93:4e:44:
d9:04:31:41:fc:82:18:91:92:15:50:68:c8:ea:b3:
f9:55:4b:33:96:32:07:3e:b2:0f:b9:33:85:80:f3:
8e:0c:27:ca:77:e5:00:a0:45:bf:9e:29:cf:b6:01:
c3:3a:3b:a6:70:89:c2:32:e0:b4:39:1c:20:25:dc:
f2:0d:f4:e0:05:3d:c2:11:af:59:b4:23:ab:ec:4e:
79:fa:70:f0:ae:50:d1:6e:20:e6:ef:97:14:af:52:
78:52:de:bd:c2:7a:e7:d7:9d:99:1a:17:be:5b:d4:
6e:01:d7:65:e9:92:75:07:c1:e0:ba:4f:ce:06:22:
56:3e:c3:2f:4c:cb:5f:54:ad:12:71:81:17:20:f8:
5d:f3:07:dc:a9:1a:3f:51:91:b1:33:7d:bd:18:f7:
0e:50:8e:90:5a:e7:ae:0d:13:f3:a5:fc:81:7d:ec:
3d:bd:29:f5:ef:6e:b8:0d:6e:59:a7:86:2c:51:d4:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:07:31:2D:F5:D7:77:D9:B1:89:F9:45:1C:12:94:06:45:07:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce473861-4db8-363e-b279-2689229642cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:d5:d7:2e:8b:c9:35:e7:03:44:61:ea:d8:eb:11:c4:7e:56:
fc:49:a8:68:d8:01:6c:4b:e2:42:47:52:35:97:09:2d:77:50:
fc:fb:a5:45:4b:da:0c:b3:f0:91:c7:10:c8:af:bf:66:12:25:
00:a9:a9:c8:37:90:f4:e6:fb:48:e9:7c:b8:ff:2c:5e:d6:fb:
a8:80:58:56:be:6e:4d:1f:f9:e3:33:d7:a4:d0:b2:c6:e9:e4:
36:a3:f0:64:df:4c:d1:82:7b:55:3b:c1:15:d9:51:e8:33:13:
17:fd:00:09:2c:ee:3e:bc:fa:c7:e3:d0:51:e5:1d:d6:32:47:
0e:50:bf:fd:d5:7c:7a:93:a5:33:ed:8b:3a:5c:ed:07:84:f4:
2a:b5:0b:25:b1:4c:28:62:67:88:53:a4:27:b8:2a:36:9b:18:
f0:9d:a9:c6:98:83:60:07:c3:9f:3f:07:7a:ff:b1:53:d1:ae:
29:02:b6:40:4a:3d:d7:0e:bd:18:cb:cd:c4:01:dd:4a:e1:83:
9b:ed:94:bf:94:f9:fa:27:05:e3:61:07:20:ad:68:3c:80:d9:
d3:4e:d9:85:fd:6c:54:08:01:fe:91:4e:fe:8f:45:b9:8a:4a:
66:1a:c5:03:09:38:62:55:99:59:7a:34:4d:31:be:99:8c:91:
fc:1e:23:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:00:33 2026 by rpki-client