
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5c6315d-e75b-3449-b4c6-97c9fa108954.roa
File: b5c6315d-e75b-3449-b4c6-97c9fa108954.roa (raw, json)
Hash identifier: oDOb3MpYRXtGQkho7Q8+XCdwdH+JoHPOSApU0cvDw40=
Subject key identifier: 44:0D:9A:49:8E:BB:C3:A0:59:07:09:BE:31:39:A1:BE:50:51:31:96
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D27AAA111843AD12293FA3F20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5c6315d-e75b-3449-b4c6-97c9fa108954.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 19527
IP address blocks: 35.206.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:a1:11:84:3a:d1:22:93:fa:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=080ac09d-e7cc-4b75-a170-97aab7c63f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:1d:74:55:12:68:3c:1f:23:64:97:8c:f2:
c1:73:fb:71:2f:dc:75:93:1e:2b:d4:2f:14:79:69:
c8:81:8d:a0:65:f6:63:e1:99:2c:d8:13:bf:1f:de:
b5:85:79:56:7f:e5:cf:62:c2:50:ea:73:20:0b:80:
59:9f:de:12:18:a2:dd:e9:dc:5a:d2:9b:f8:4a:46:
3d:79:6d:58:5b:3b:26:35:48:3c:cb:17:29:d8:31:
99:2a:f9:a6:0c:fc:28:d1:33:80:52:0d:8f:1c:af:
bc:e1:be:d2:0d:08:73:7c:7e:c1:40:ff:a6:dd:f8:
4c:3c:77:92:37:3b:a8:16:fd:68:6d:cc:cc:1f:18:
33:cd:fc:58:fc:b3:ec:d4:c3:91:06:3d:ef:24:41:
36:da:f2:e9:23:19:f4:2e:2b:e0:19:2b:c4:74:22:
89:4c:df:c0:7d:0a:9c:f0:be:0a:ae:93:d6:d4:0f:
c8:fc:bc:0f:cd:a6:73:af:ff:43:9a:99:8f:d4:64:
98:8b:ad:f8:26:20:20:36:b1:44:ac:67:96:53:f3:
84:53:21:46:92:85:63:df:6c:2d:c5:6d:b8:55:7e:
39:ba:64:3a:3b:0c:f8:66:35:e4:4a:2a:3a:ea:cd:
d5:77:c9:b3:85:eb:81:c1:56:ec:b0:89:d9:11:d8:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:9A:49:8E:BB:C3:A0:59:07:09:BE:31:39:A1:BE:50:51:31:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5c6315d-e75b-3449-b4c6-97c9fa108954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:31:97:50:fa:14:69:93:b2:05:f8:9c:f5:ac:c1:b2:7e:c7:
b7:74:7d:e3:c9:d5:2c:6f:96:59:ed:ad:ba:8a:b2:d3:5e:c8:
e4:c1:07:93:d3:6b:f0:58:b7:8c:09:5e:a4:2d:1c:75:66:93:
74:37:78:3d:6f:81:9f:cd:ae:b2:8d:71:09:df:07:80:bb:13:
a0:f3:30:e5:92:61:f1:55:16:28:da:a2:c6:64:7c:3b:4f:10:
3f:b7:16:49:c6:96:fe:fb:a4:03:d1:d7:80:ff:06:c1:0f:6d:
20:a4:7c:85:56:6d:45:a7:7e:82:05:a6:3e:b7:af:ef:31:8d:
dd:84:b2:50:33:b4:29:f4:72:bf:40:62:f5:ec:97:b4:e6:d3:
ee:c1:67:ef:46:b4:ed:3f:80:73:0f:5a:87:53:19:06:ee:10:
c1:96:cd:5f:69:97:af:45:7b:e3:c7:ee:4c:19:86:bb:e4:f8:
6c:04:5a:81:4b:37:06:23:41:71:4b:4a:13:c4:b4:36:93:b3:
b0:66:b0:14:38:2f:dc:3a:6b:cb:8e:bf:80:f3:89:28:db:7b:
ba:ed:8a:6d:a7:67:5c:c7:68:c6:ba:cc:52:ff:da:ea:09:44:
66:17:12:e4:9c:00:32:2d:2c:91:ff:20:2d:0b:8e:90:b2:fa:
c7:60:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:27 2026 by rpki-client