
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa
File: bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa (raw, json)
Hash identifier: SL6HuW9mazB1ncVm35i+xBM2olfFR0h6pGGst8xzBJM=
Subject key identifier: 0B:17:F1:30:57:6D:49:D5:6F:A2:8A:93:D4:54:9E:99:5E:38:F9:CE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F4C3D92D62FCFA124BA6C3040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 396982
IP address blocks: 35.194.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:92:d6:2f:cf:a1:24:ba:6c:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=844eb30b-cc1a-4053-b822-25d95e3a44e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:4d:a7:aa:da:57:fd:ae:9f:8e:b4:39:1f:
28:67:cb:7c:0d:b9:98:ab:ef:19:61:65:43:74:c2:
66:fd:d9:29:7d:e1:c5:2d:19:13:4a:90:52:f3:c5:
5c:ef:0f:cd:f5:fb:24:1d:c5:81:46:1c:63:b6:15:
64:04:66:a3:05:e7:42:e0:ee:f6:8a:b9:d4:cf:1f:
5a:ce:97:5d:bd:76:10:24:9f:61:ce:d8:fd:34:9e:
73:3e:e2:75:0e:d6:81:49:db:f2:a2:7f:f8:bc:a7:
da:06:97:2c:a8:f1:0b:ec:cb:04:b5:b1:0f:ad:6f:
fb:13:42:80:17:bb:30:83:2d:e4:bc:9a:74:15:23:
df:2c:b5:ae:ec:42:94:01:b2:09:bc:42:56:d2:7e:
9a:3f:ab:36:bc:60:ce:43:d0:91:d9:1c:aa:67:78:
80:c6:43:8a:1d:a6:9c:38:a0:7d:f9:bf:1e:9a:69:
95:3e:3c:79:f7:40:cb:aa:7e:33:24:f1:ce:75:56:
5f:eb:f5:09:f2:89:7d:c1:91:73:df:27:15:b6:b0:
5f:9e:3d:79:75:f3:4c:4e:74:0c:34:56:9b:ce:42:
6c:2c:91:2d:b4:d1:c6:0b:85:3f:e0:b4:b1:22:40:
8a:59:3e:64:b5:87:3e:e7:f6:28:ea:0a:f7:1d:18:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:F1:30:57:6D:49:D5:6F:A2:8A:93:D4:54:9E:99:5E:38:F9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.194.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:28:9b:90:23:11:1f:76:57:ca:bf:59:5b:f9:84:ff:aa:17:
e9:6a:1c:06:d5:7d:13:a8:e5:58:18:c5:25:a8:0c:1d:9c:e5:
43:64:d0:51:dc:35:de:41:7a:c9:59:b5:92:a2:7b:52:4f:e9:
4e:00:89:fb:0c:81:e7:fb:92:3c:3f:ad:27:87:bd:b3:7b:87:
78:34:bc:0f:d3:a0:dc:7c:00:42:12:43:7d:8b:3b:64:bb:2d:
bf:28:43:a3:07:4c:8a:77:ea:88:b9:0f:cb:db:20:af:93:da:
3b:06:7f:e7:71:c1:b0:fb:6a:10:93:0b:b4:48:73:9a:ca:b5:
f2:02:a5:26:8b:d0:db:ba:27:6e:b1:67:1f:c3:fd:34:0f:05:
1c:dd:b8:ac:11:bc:61:6c:d2:9d:67:0b:ec:26:cd:4a:57:61:
e1:df:37:67:48:93:8d:88:0c:d6:e4:ec:f7:44:fe:94:cd:7c:
40:38:ba:69:0b:31:de:13:ab:f0:89:38:99:c1:09:f7:ce:19:
5e:6c:2b:a4:e3:97:ee:76:1c:51:c7:36:46:71:7a:6b:b6:9e:
6f:46:a1:52:a8:13:4c:17:a6:e5:8e:61:fd:67:ba:b4:ea:a8:
8e:dd:ff:bc:41:ef:b6:1a:7c:68:ae:76:f5:6a:44:c3:71:d2:
81:3a:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:55:17 2026 by rpki-client