
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa
File: 0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa (raw, json)
Hash identifier: gDEFoywpiG2APftYHzkTvURtYHM3k4JARkBkjknauKw=
Subject key identifier: 4B:62:D3:EE:CA:F0:08:90:F4:82:45:2C:43:D2:9D:89:8A:E1:C3:2E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E08663316C62EF87D54AFA900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 35.223.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:33:16:c6:2e:f8:7d:54:af:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=19629217-8eb1-4a16-8de7-22349976fe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:a0:93:7a:40:66:15:36:13:2f:7a:26:63:
e5:38:fa:d6:ef:02:e4:74:98:4c:f4:9b:a2:2d:aa:
5f:e3:d2:13:5e:0e:53:b6:39:7f:85:93:45:b7:ba:
e6:4e:da:b6:63:c2:61:c5:af:8e:4f:b8:ba:43:d2:
41:70:55:a5:3f:5b:d0:f6:d8:c7:7d:e4:ea:2a:13:
39:a6:fb:4e:95:ac:96:f2:8e:31:b2:e0:70:bc:4a:
e1:c7:37:57:a7:dd:d4:d1:94:bb:54:a7:31:7b:54:
1b:25:0d:11:ef:68:e0:f8:bb:28:95:4b:f1:3d:36:
56:f4:f5:0d:e6:7a:95:ba:46:77:66:c7:35:90:59:
f1:ca:91:66:84:a4:f1:83:51:4d:60:eb:6b:87:e4:
a2:93:be:a1:29:03:75:e8:a7:c4:85:4a:fd:f0:b9:
9d:4b:1f:6e:60:a0:75:e4:ca:a4:5a:67:e9:ad:34:
30:d1:42:d8:bb:d1:cd:b7:8f:22:d5:44:3a:74:47:
75:c3:4e:c9:81:19:a9:f2:52:bb:8e:73:83:91:77:
eb:0f:28:01:ca:82:69:13:3b:a9:1e:8e:17:0a:ff:
9c:eb:cc:b6:b7:93:b9:50:46:99:7b:6b:d7:20:62:
15:7e:a2:7d:6b:8c:d6:9e:34:8e:99:f5:0e:8c:ab:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:D3:EE:CA:F0:08:90:F4:82:45:2C:43:D2:9D:89:8A:E1:C3:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ae1a8ea-9cac-39db-8d8d-1cccc23de8bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.223.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:63:f2:db:ca:dd:8e:24:9b:90:43:6f:8c:c7:3b:f5:71:fe:
4e:49:e3:42:ab:cb:98:11:1b:ad:11:50:4b:9e:73:c1:35:40:
42:0e:61:e5:9c:81:ea:68:f5:7e:8e:81:bb:9a:e3:a6:0f:4d:
8d:8c:94:3d:7b:d5:7e:4f:e0:ba:25:36:7c:71:03:7a:8e:b6:
a2:89:77:7c:bf:7a:ac:2c:34:af:d8:72:19:d9:f4:2d:46:d2:
17:dc:60:5c:d0:52:1c:11:c0:5e:f9:16:38:c6:39:8d:7e:45:
08:2a:1f:2a:b4:bc:2d:16:51:ec:e1:1a:6a:97:1f:21:2a:e2:
5e:87:6c:bc:1c:f5:56:70:24:80:a4:52:42:2b:a0:d2:64:96:
17:6d:05:b6:bc:d6:6f:51:ee:10:49:d7:2f:04:66:e7:29:5d:
d7:64:ad:d8:5d:1d:d6:56:f0:e5:28:cb:6e:50:92:5a:77:ab:
45:38:18:a4:e6:af:88:c4:b6:98:89:d5:51:9b:ec:93:39:3a:
3b:ce:40:71:1f:b5:fe:85:e7:f5:a8:ce:75:30:d5:3b:5c:27:
52:d1:f2:63:dc:fc:6c:13:65:06:4f:a1:42:8e:ed:68:06:05:
3a:07:d8:df:41:0b:a1:05:d2:9c:f1:0d:0d:ba:d3:36:bd:a6:
35:b2:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:47 2026 by rpki-client