
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa
File: b2678a67-8ef4-3062-adc8-762daaa2d576.roa (raw, json)
Hash identifier: DtQgOOsHkT9GTnr9eMm7GSrfnq7B89w9qSaaanMUMDo=
Subject key identifier: C2:D4:39:96:A3:C0:94:B1:37:83:FF:31:CD:2C:99:6F:5C:E1:14:79
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584E086631E35DAE267D7AF4E5C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 396982
IP address blocks: 35.203.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:31:e3:5d:ae:26:7d:7a:f4:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=d76a5c0d-347c-4ed8-abce-be7836c3e58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:56:30:ba:e5:f0:e0:f9:85:0d:5a:04:87:
e8:c3:ae:f9:27:c0:78:77:5f:0a:01:a0:40:e3:a5:
c9:01:4a:57:eb:c8:59:f9:b6:c3:79:1f:31:bd:ba:
0f:11:c7:8f:e2:9d:62:2d:b7:a5:13:b1:85:90:12:
5a:e6:de:80:97:3e:c4:ff:2f:a1:5e:72:27:40:ab:
5d:d8:40:82:8c:61:00:fa:cb:af:ec:de:a9:ba:f7:
2c:3e:0d:83:d6:e2:2f:95:50:32:bc:30:5e:32:18:
55:09:f1:4b:ef:f9:bb:56:96:ed:71:b9:3b:f2:c3:
46:9e:60:62:22:64:9f:77:5d:c8:56:b9:8a:97:08:
fc:8d:c0:9e:bf:39:fc:9c:b1:57:43:e5:3f:76:36:
06:71:68:d5:3a:7b:f5:99:5a:16:67:4c:6b:09:22:
8d:a9:56:39:26:70:35:c8:84:8b:b0:96:32:0f:41:
8d:24:4f:8b:e0:c4:90:f7:c8:17:94:06:e8:45:d6:
54:c1:61:80:02:6b:b9:49:f5:36:f6:2b:dc:db:47:
cc:ee:1d:ad:b1:0f:8e:34:5a:a1:a2:76:58:59:00:
29:86:6e:34:5e:47:52:25:bd:1c:78:26:a7:f6:cf:
7a:90:de:bb:4a:71:f5:45:40:d3:c4:61:82:1b:48:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:39:96:A3:C0:94:B1:37:83:FF:31:CD:2C:99:6F:5C:E1:14:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:92:04:04:69:38:b8:4d:1e:67:ec:78:8f:5e:29:e6:b5:43:
7a:68:6b:0d:99:6e:15:a6:2b:4f:65:70:6b:a3:ca:1b:66:df:
f4:37:6e:21:1d:30:f9:66:56:46:83:d1:cb:c4:44:85:ea:cf:
e0:98:d8:35:a7:29:92:c3:15:fc:d5:be:3e:63:56:0b:fa:f7:
b6:21:88:46:2c:f9:a3:66:fd:8f:f5:d4:49:35:0e:3e:a0:d1:
b8:40:73:69:a9:e7:9f:75:de:0a:d5:3e:19:82:15:94:74:90:
04:bf:1c:5f:0c:a1:fc:a3:dd:6b:6c:e2:43:9f:bd:d6:4b:4e:
2e:8e:73:46:6a:45:96:b0:17:4d:49:d9:97:f3:0f:84:49:60:
4e:36:df:16:79:bc:60:c3:4a:f1:5c:c0:fd:02:bd:be:c1:09:
61:66:39:75:ca:48:27:06:88:93:8a:27:05:c7:94:49:a0:57:
60:6c:43:25:3a:c7:91:ef:10:8a:f0:a4:03:dc:eb:48:c1:84:
6e:c2:de:43:54:33:bf:f8:e7:aa:48:48:bd:3d:96:5a:24:e9:
44:9d:29:67:38:48:b8:35:5c:3c:85:f3:ce:22:82:a1:07:a5:
0a:29:c1:a6:18:82:df:17:2e:45:82:e5:3d:b3:2a:26:b5:2c:
69:bd:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:46 2026 by rpki-client