
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa
File: 25cf0945-d5e8-3596-b1e6-0f7575079833.roa (raw, json)
Hash identifier: CIraue18PvcYEMch14DxGCMHMocVgxKWGYyfXfbIzDE=
Subject key identifier: 45:E9:CE:FD:C6:C0:68:87:9D:C8:4F:19:3E:66:36:ED:1D:BD:CB:EB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E0865FB03622EC1332AC0E980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 35.243.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:65:fb:03:62:2e:c1:33:2a:c0:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=50d02152-baf6-4e89-907f-eec3774b4e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:32:f4:ec:74:06:11:b6:93:f8:a9:55:54:
49:5b:8a:59:4e:e3:4c:a0:bd:21:18:83:77:a9:b7:
e7:07:53:50:be:0b:f5:e4:72:0e:98:cc:0f:77:36:
c7:32:d7:13:4e:d2:fb:7e:0b:59:f4:e6:79:de:94:
79:0e:c8:c0:65:e8:90:00:e8:78:85:00:07:ac:af:
a1:e3:e3:66:52:8d:fd:e6:5e:d4:80:76:09:82:74:
b2:ed:c9:b1:6f:3f:e1:88:d3:41:47:69:ff:e1:6f:
27:61:e9:9f:85:57:33:0e:52:31:8b:8f:2b:cd:f7:
64:7c:87:97:8b:37:e0:0f:f2:db:8d:ea:0e:f0:43:
31:cf:74:7f:c8:04:17:59:d9:ed:a9:fa:7a:8a:68:
40:a1:d9:70:d1:9d:94:f0:c6:75:dd:41:19:af:85:
67:67:d9:cd:a0:c1:73:4c:91:fb:c2:ea:75:2c:f4:
76:e9:96:ba:17:dd:b5:26:e8:81:92:a7:88:8e:d0:
34:89:1c:de:03:66:21:79:f3:2d:ad:d5:25:d5:35:
3e:3c:43:b7:9e:61:22:c4:4a:f7:88:fb:0e:7e:4b:
23:80:fb:59:be:f6:b7:04:28:c1:fc:94:89:52:7a:
5d:d5:a8:52:48:73:ef:cd:60:e1:91:bb:13:e6:c5:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:CE:FD:C6:C0:68:87:9D:C8:4F:19:3E:66:36:ED:1D:BD:CB:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:2a:1a:3d:71:75:5e:b7:9e:fe:87:8e:72:cb:ac:b9:ad:db:
be:1a:0f:8a:33:9c:40:4d:1c:63:40:40:99:d5:db:e4:22:10:
3a:66:c1:2c:4c:a3:03:45:36:15:ac:6b:9c:41:c5:96:1f:fe:
86:98:33:bd:a5:8d:5a:c7:84:3e:a6:18:be:d0:69:ba:7b:8e:
ca:4a:69:ea:b8:86:de:b4:89:d0:93:b4:a6:d8:3e:e0:58:b3:
95:9b:05:ec:ff:0a:c5:23:e0:66:e8:fa:0c:b5:fb:dc:7b:92:
55:72:96:59:1c:13:b1:14:ee:65:61:58:2d:fe:95:a5:fe:7c:
d4:ea:bf:29:4d:cf:96:b7:98:23:20:4b:34:7a:2d:57:34:90:
6f:63:71:04:21:8b:d0:05:53:dd:77:11:33:93:5f:c3:59:eb:
b5:1b:81:c1:0b:d9:66:52:77:66:52:ca:04:7f:39:e1:3f:bb:
f3:e1:6d:3b:aa:c6:3f:6b:07:0d:68:cd:36:1d:1c:ad:a2:77:
cb:b9:44:5b:1b:25:2a:33:ce:d5:31:da:1d:ff:fc:cf:dc:06:
85:77:c6:fe:22:0b:83:98:98:27:e8:1f:ca:b6:bf:95:b1:be:
64:83:4a:70:51:e1:dd:6c:f5:fe:28:eb:03:6f:8e:dc:f2:90:
14:60:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:55:05 2026 by rpki-client