
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
File: 00848c69-e0a2-30a1-87c4-14728f62595e.roa (raw, json)
Hash identifier: O35vkhm0B46IhAC2ACr1tH0AKUvriD9y1XzK9SuBRS4=
Subject key identifier: FA:E6:56:A4:21:A6:0E:73:72:4D:CC:AB:6E:B7:B7:61:EB:6D:FA:AD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584B6797AB8A42C14A8C61B05000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
Signing time: Sat 04 Oct 2025 01:00:33 +0000
ROA not before: Sat 04 Oct 2025 01:00:33 +0000
ROA not after: Fri 02 Jan 2026 02:00:33 +0000
asID: 396982
IP address blocks: 35.192.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:67:97:ab:8a:42:c1:4a:8c:61:b0:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Oct 4 01:00:33 2025 GMT
Not After : Jan 2 02:00:33 2026 GMT
Subject: CN=ffd60a64-8368-43a2-b684-747e6b6643a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:47:30:fc:e3:4f:2a:a7:b0:71:8f:f5:64:
c7:37:ce:56:25:6b:62:aa:aa:b6:aa:15:f3:6b:98:
69:cc:cc:15:29:10:e9:70:80:da:b4:ab:f9:a0:00:
ca:f0:49:5a:0c:c3:7f:d9:67:c3:2c:b7:85:c2:75:
8b:44:92:e2:9c:dd:09:1c:18:22:06:93:9c:6c:b5:
8e:ad:43:0b:19:23:f7:b0:5e:f6:d1:da:fc:27:17:
46:dc:22:cb:0f:da:b2:61:06:b0:7f:75:d0:23:3a:
09:af:57:96:4e:98:0e:86:03:a1:53:ce:12:13:04:
bc:0b:2c:a7:12:7e:09:4e:74:2e:3c:cf:b1:14:95:
cc:8c:11:52:5d:75:df:2b:0c:e1:79:18:db:5a:23:
64:d9:56:19:0f:08:1e:1a:a5:3b:23:ac:f1:1d:23:
21:15:8d:87:da:ed:c7:90:ba:9e:18:8e:a0:dc:0c:
64:43:c0:bf:f5:63:77:a8:20:db:08:5c:d5:7a:02:
e0:52:ce:2b:79:66:78:de:97:3b:eb:cb:8b:d6:57:
69:1f:71:c6:2f:e6:7f:6c:4f:71:bd:34:db:71:d8:
9d:3d:32:2d:5f:4d:20:64:49:3f:36:8c:f4:17:c0:
c0:26:47:ee:20:98:90:f8:85:2e:bc:6b:0c:3b:76:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E6:56:A4:21:A6:0E:73:72:4D:CC:AB:6E:B7:B7:61:EB:6D:FA:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e2:5f:9d:9b:65:9f:51:86:08:60:28:73:6d:16:59:23:29:
bb:4e:ba:19:9b:b9:17:c2:42:e1:8a:89:fe:ac:63:9b:88:f8:
06:c0:c1:af:e2:5c:b5:4d:a3:7c:eb:3e:cc:a1:d1:0e:4d:78:
07:97:62:4d:8b:00:6f:24:76:af:8c:44:94:3a:e8:2f:cb:16:
18:c2:f3:d1:d0:0e:c9:54:4c:a0:9c:da:e0:cf:cf:38:e4:10:
31:33:66:51:4a:c7:c3:40:df:94:98:f4:d7:e2:e8:69:98:94:
ed:f8:d2:a8:94:cd:e7:47:c9:57:b0:63:58:5d:99:72:94:33:
a9:44:8a:3d:73:8b:1b:f8:0e:61:c2:ff:1e:79:fc:53:8e:9b:
f4:7f:31:e6:f3:c0:ab:96:96:6b:ad:4e:19:df:d8:6a:47:c7:
fb:e5:0b:8e:82:4d:3d:2d:51:bb:0a:bf:ba:16:5b:89:dd:71:
54:1f:bd:cd:33:81:62:ad:26:74:71:5f:19:b1:d6:52:8d:72:
8d:de:66:8a:dd:9d:72:db:fa:7b:82:19:f9:dc:10:fd:cd:c0:
e7:24:e6:6b:00:b8:c7:0f:6a:2b:62:ec:76:68:47:6e:07:d5:
b9:22:3d:84:92:71:4f:8b:0f:8c:a9:29:10:db:27:6e:94:5c:
4d:80:29:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl6uKQsFKjGGwUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZmZkNjBhNjQtODM2OC00M2EyLWI2ODQtNzQ3ZTZiNjY0M2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx1HMPzjTyqnsHGP9WTHN85WJWtiqqq2qhXz
a5hpzMwVKRDpcIDatKv5oADK8ElaDMN/2WfDLLeFwnWLRJLinN0JHBgiBpOcbLWO
rUMLGSP3sF720dr8JxdG3CLLD9qyYQawf3XQIzoJr1eWTpgOhgOhU84SEwS8Cyyn
En4JTnQuPM+xFJXMjBFSXXXfKwzheRjbWiNk2VYZDwgeGqU7I6zxHSMhFY2H2u3H
kLqeGI6g3AxkQ8C/9WN3qCDbCFzVegLgUs4reWZ43pc768uL1ldpH3HGL+Z/bE9x
vTTbcdidPTItX00gZEk/Noz0F8DAJkfuIJiQ+IUuvGsMO3Y2GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrmVqQhpg5zck3Mq263t2HrbfqtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDA4NDhjNjktZTBhMi0z
MGExLTg3YzQtMTQ3MjhmNjI1OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8DwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPiX52bZZ9RhghgKHNtFlkjKbtOuhmbuRfCQuGKif6sY5uI+AbAwa/i
XLVNo3zrPsyh0Q5NeAeXYk2LAG8kdq+MRJQ66C/LFhjC89HQDslUTKCc2uDPzzjk
EDEzZlFKx8NA35SY9Nfi6GmYlO340qiUzedHyVewY1hdmXKUM6lEij1zixv4DmHC
/x55/FOOm/R/MebzwKuWlmutThnf2GpHx/vlC46CTT0tUbsKv7oWW4ndcVQfvc0z
gWKtJnRxXxmx1lKNco3eZordnXLb+nuCGfncEP3NwOck5msAuMcPaiti7HZoR24H
1bkiPYSScU+LD4ypKRDbJ26UXE2AKTU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:49:30 2025 by rpki-client