
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed89b7c5-3e90-3431-bd00-dba5c332885c.roa
File: ed89b7c5-3e90-3431-bd00-dba5c332885c.roa (raw, json)
Hash identifier: vPBu7ynCLg2uSO/28RtfFtuecGa2wufSe9yJMO2SXq0=
Subject key identifier: C8:96:6A:9D:F7:24:20:10:9D:C4:31:8C:61:7F:90:A0:4E:3E:BD:C6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3DA29DF3BFD6115B121E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed89b7c5-3e90-3431-bd00-dba5c332885c.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.196.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:a2:9d:f3:bf:d6:11:5b:12:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=4b579566-bb60-49dc-8280-4f1292056bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:2c:cc:78:7e:03:c6:2d:a3:ae:69:a8:96:
0c:6f:6b:d4:81:cf:cb:dd:e5:1f:f9:ef:76:92:2d:
a4:15:bc:49:d5:17:14:92:1a:14:c4:8c:6f:c3:c9:
fa:41:23:04:71:47:3c:eb:fd:75:83:21:8d:68:b4:
d9:14:59:7e:96:1d:74:5a:df:91:2a:cc:78:51:eb:
4b:f0:2b:85:51:0c:b3:bf:6b:87:1c:64:ff:37:51:
12:f5:46:58:04:97:83:82:ec:f6:5f:46:ef:7d:a3:
f4:46:0a:46:f4:0d:01:1c:b2:e4:de:8d:4b:be:c2:
15:32:21:6f:b6:13:d0:b7:a2:bf:64:0b:20:9b:13:
d9:70:87:db:c5:ea:62:54:04:08:2e:e0:7a:fd:8c:
6e:f6:d4:6a:f0:87:47:61:9d:ed:85:f4:00:5f:c0:
c2:17:f0:4c:fa:49:79:49:cf:a5:02:70:79:20:75:
fe:7e:ed:7d:b1:a3:14:87:3d:55:cf:18:3a:b1:ce:
92:cb:fe:ca:5d:68:fc:34:10:80:83:94:a8:e0:06:
c5:44:09:3d:62:8f:5a:18:1f:ad:a1:af:f9:b4:c9:
c8:e8:a0:73:60:d0:b5:71:9c:3e:3a:3e:0a:6d:01:
f7:1b:2a:6a:0f:51:54:b4:38:16:58:cf:ee:d2:6c:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:6A:9D:F7:24:20:10:9D:C4:31:8C:61:7F:90:A0:4E:3E:BD:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed89b7c5-3e90-3431-bd00-dba5c332885c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.196.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:28:98:17:29:c1:28:84:4b:9d:67:76:05:a8:5a:82:0f:4a:
b9:17:2f:b3:d9:3c:16:c6:54:e7:94:ca:3b:ee:d8:5b:a9:d7:
19:a1:5e:4e:8e:25:3f:c9:e1:a8:12:b7:d7:29:d4:5b:79:93:
4e:be:23:a3:4e:3a:25:01:2b:3a:d5:1d:d1:49:ab:09:62:64:
3a:cc:39:b1:14:72:d9:d1:d8:4d:f4:9e:43:bd:8a:0d:1c:06:
99:26:7e:70:b7:e5:9d:37:dd:2c:91:07:8f:2b:94:11:79:b9:
28:c1:26:71:fb:27:6d:86:3a:ee:96:0f:a2:52:bd:ed:76:34:
78:72:48:fe:62:98:5d:8e:48:91:59:30:19:51:95:73:6e:8e:
bc:54:9e:c7:7a:aa:b5:de:b5:e3:30:0a:72:26:9d:80:36:2f:
98:5d:6e:a2:8a:c2:f8:e9:4b:79:13:fc:fd:d4:af:70:d4:27:
8f:da:7d:77:8e:4c:ec:f6:66:80:c8:d1:ca:7e:9b:d4:bf:b8:
49:5f:19:49:b2:4d:e4:c2:94:f4:89:a8:c0:ab:af:e9:fb:a8:
9a:4d:4e:39:0c:cd:8b:fe:90:43:a2:8b:31:07:4a:67:67:40:
1f:fa:f1:5e:c2:cf:8e:ca:d2:02:31:36:af:4e:48:da:e5:54:
0b:cf:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:31:22 2026 by rpki-client