
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17cfe2dc-b644-33bb-bded-1f0961feddfc.roa
File: 17cfe2dc-b644-33bb-bded-1f0961feddfc.roa (raw, json)
Hash identifier: ZMtVnAixKdMxONvrta0g0LbpuFBrSODeIQKlfzB8Lks=
Subject key identifier: 0F:2B:A4:6C:01:6F:90:55:2B:93:DF:00:CE:46:2B:1F:B4:BD:D9:C5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E086623AEFBBC6C2B3F796F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17cfe2dc-b644-33bb-bded-1f0961feddfc.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 35.222.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:23:ae:fb:bc:6c:2b:3f:79:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=399ed7aa-60fd-458e-a35f-b58c3ca90a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:0c:88:cb:22:9e:c1:a9:ec:dc:09:8a:5c:
95:a8:74:d3:4f:a7:ac:0f:a0:89:a6:f7:86:50:8d:
23:af:37:03:84:56:fb:f2:ce:4e:05:3a:56:a9:0d:
e5:28:0e:3e:6a:e2:56:3c:67:d6:85:cc:bd:32:41:
fd:4a:62:05:0b:d6:65:63:f4:14:b1:91:08:c7:30:
48:7f:0e:06:83:ae:0b:73:ff:25:38:4e:cf:0d:7b:
ec:f1:c0:55:17:b6:f1:93:40:a3:1e:e0:83:66:53:
67:6d:68:8f:39:f1:2a:16:e3:65:10:23:51:8c:99:
a9:05:2f:99:12:a5:6e:17:1e:63:20:22:9f:d1:87:
01:41:4d:64:65:f2:b2:5e:bc:0d:c4:af:47:ea:3a:
bb:23:6e:af:e9:64:48:f3:21:e4:be:bf:ef:0b:a2:
9b:44:e1:56:74:66:d6:aa:9a:fc:68:6f:8c:48:45:
5c:37:38:4b:72:40:21:4e:8f:74:51:8e:8c:34:0d:
0d:fb:b4:63:29:6c:f3:f8:ad:37:36:b9:0f:3b:4b:
aa:da:e1:2d:12:39:78:8a:ba:6e:a7:50:15:26:50:
bd:dc:e8:93:8f:da:d0:44:33:9a:9a:9a:fa:cb:1b:
02:be:51:f4:a4:29:49:89:86:5f:f0:ca:86:76:21:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:A4:6C:01:6F:90:55:2B:93:DF:00:CE:46:2B:1F:B4:BD:D9:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17cfe2dc-b644-33bb-bded-1f0961feddfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:00:46:e8:47:d8:c1:29:73:01:f6:ff:8d:61:2f:79:34:33:
83:55:52:53:5d:fa:29:87:b3:24:30:f6:bd:57:6f:ec:8e:f0:
62:61:60:a5:0c:ca:7d:d6:6a:59:8a:8d:0c:ff:e8:78:c3:61:
ee:c8:d6:8b:47:63:c8:24:96:28:0f:e7:0e:9f:3c:5c:58:4a:
e0:29:30:ca:34:87:c5:f5:79:04:f7:b7:aa:72:74:43:c4:cd:
22:fe:67:ec:d0:f3:20:44:80:6b:77:cf:9d:4f:93:e4:f2:1d:
17:10:5e:1b:f2:6d:32:56:f8:75:96:fd:c3:fd:be:44:e6:61:
8e:0e:aa:d7:37:57:78:9d:b2:72:a2:12:a8:49:c6:b9:bd:c9:
c7:05:7b:1e:3c:7c:fe:61:0f:06:6c:80:76:97:16:87:6c:2a:
fe:e3:ca:36:bd:2b:70:2b:1a:70:f9:91:4a:2e:a1:6c:ec:83:
1f:38:30:ad:50:84:11:4e:0f:6e:4b:0b:5d:6b:a0:26:7a:32:
25:32:33:3a:4d:54:2b:52:85:eb:40:94:ad:15:84:c8:df:1d:
d9:7c:37:6a:33:91:10:46:e4:48:d6:c2:cc:b1:78:c4:c0:cf:
63:48:72:27:da:1a:9e:f7:b3:53:ff:51:47:d4:5f:30:90:80:
41:ac:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:36 2026 by rpki-client