
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5b17fa9-4d92-328d-8ac7-5111db8f1a82.roa
File: d5b17fa9-4d92-328d-8ac7-5111db8f1a82.roa (raw, json)
Hash identifier: XTaRfjtbK1FLob4TaY5Coqk9NUgQ87RdtwCZJyorHNw=
Subject key identifier: AE:3A:00:83:DB:BC:F3:AA:EA:57:1B:52:77:95:0C:E7:8A:BC:53:D3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584EF69745F90D4F388FE18FE400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5b17fa9-4d92-328d-8ac7-5111db8f1a82.roa
Signing time: Wed 26 Aug 2026 08:42:10 +0000
ROA not before: Wed 26 Aug 2026 08:42:10 +0000
ROA not after: Tue 24 Nov 2026 09:42:10 +0000
asID: 396982
IP address blocks: 191.212.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f6:97:45:f9:0d:4f:38:8f:e1:8f:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 26 08:42:10 2026 GMT
Not After : Nov 24 09:42:10 2026 GMT
Subject: CN=42cbf2d4-5163-4ce3-b541-b6810d3bcdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:9c:de:a0:e0:1d:32:31:a7:62:69:f7:3a:
48:38:1e:b1:5f:64:bb:00:76:5b:aa:fb:f2:5b:33:
f7:a2:f5:f8:1e:ef:f3:db:84:31:8c:74:15:47:86:
5f:7f:c9:2a:62:05:bb:79:71:4f:78:0b:0b:7d:62:
74:26:17:c5:70:8c:be:34:41:25:e4:86:a4:53:33:
86:49:5e:9b:e3:f1:92:b1:7a:f6:43:4e:1c:43:98:
61:46:71:a2:bd:e1:2b:e0:29:58:14:3a:5a:74:92:
81:cc:ff:f6:50:86:f4:ca:4a:b7:28:83:30:de:6e:
2d:78:34:58:c1:f1:ce:14:c5:f1:f3:3d:10:24:bf:
f7:83:69:3f:3a:d7:8a:0c:e1:cd:d2:c9:a9:04:13:
a1:f9:f0:41:69:10:ee:50:87:09:80:82:2c:69:c1:
e1:6d:79:ee:4b:d8:cc:e4:dc:0a:b3:07:fc:c9:b6:
d2:28:cb:b4:39:39:50:d3:77:27:60:1d:62:ee:28:
3a:b4:a1:99:6a:8d:e2:7e:22:bc:84:e1:af:2c:93:
df:cf:04:de:77:28:5f:e6:7e:80:22:91:43:74:75:
be:30:29:db:d9:c2:e2:02:83:9a:41:71:ad:8a:6d:
1e:73:97:47:9e:1c:8d:85:0e:37:b4:e6:9d:6b:75:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:00:83:DB:BC:F3:AA:EA:57:1B:52:77:95:0C:E7:8A:BC:53:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5b17fa9-4d92-328d-8ac7-5111db8f1a82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
191.212.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:94:55:9e:00:9c:11:9e:e6:40:14:ab:53:4f:75:e0:52:fd:
46:45:73:fe:f3:df:19:76:f9:ef:64:82:b0:6a:b2:96:aa:9b:
53:da:ec:c8:08:a3:15:ba:d1:e0:3c:3c:6e:e5:25:53:cf:10:
ab:e5:31:cc:72:6d:08:c9:49:37:d3:10:57:25:ea:cf:67:f4:
97:ce:89:13:6c:5b:e2:a0:63:20:a7:ae:97:5e:46:9d:17:2a:
ed:06:0a:e5:05:3d:87:41:9b:28:ec:29:b4:37:52:f8:e8:4a:
da:62:c4:3d:cc:3a:74:ff:33:10:5b:7b:2c:0c:29:8e:2f:de:
8d:70:9d:0e:96:50:7b:a8:33:e9:d0:7d:00:1d:37:92:e6:31:
ea:0b:54:7e:aa:dc:ee:cd:70:f4:4c:aa:38:02:ef:20:3b:fa:
06:3f:95:5f:95:f7:b9:e8:82:6b:6d:ed:9a:13:72:02:bc:d6:
49:cd:c7:63:99:1e:3d:4c:ef:3e:03:6b:48:cc:04:95:29:d6:
25:3a:b0:eb:f2:3c:4f:42:71:c8:06:19:d5:36:0b:87:fa:f2:
01:22:14:17:b8:c7:8b:29:1a:2f:75:6f:9c:1b:9c:85:76:3b:
f6:03:f6:65:14:11:4b:c6:6a:de:bd:74:e9:72:f8:7c:81:b5:
1e:5f:e6:52
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE72l0X5DU84j+GP5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDgyNjA4NDIxMFoXDTI2MTEyNDA5NDIxMFowLzEtMCsGA1UEAxMk
NDJjYmYyZDQtNTE2My00Y2UzLWI1NDEtYjY4MTBkM2JjZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM6c3qDgHTIxp2Jp9zpIOB6xX2S7AHZbqvvy
WzP3ovX4Hu/z24QxjHQVR4Zff8kqYgW7eXFPeAsLfWJ0JhfFcIy+NEEl5IakUzOG
SV6b4/GSsXr2Q04cQ5hhRnGiveEr4ClYFDpadJKBzP/2UIb0ykq3KIMw3m4teDRY
wfHOFMXx8z0QJL/3g2k/OteKDOHN0smpBBOh+fBBaRDuUIcJgIIsacHhbXnuS9jM
5NwKswf8ybbSKMu0OTlQ03cnYB1i7ig6tKGZao3ifiK8hOGvLJPfzwTedyhf5n6A
IpFDdHW+MCnb2cLiAoOaQXGtim0ec5dHnhyNhQ43tOada3XAnwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK46AIPbvPOq6lcbUneVDOeKvFPTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDViMTdmYTktNGQ5Mi0z
MjhkLThhYzctNTExMWRiOGYxYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBv9QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYJRVngCcEZ7mQBSrU0914FL9RkVz/vPfGXb572SCsGqylqqbU9rsyAij
FbrR4Dw8buUlU88Qq+UxzHJtCMlJN9MQVyXqz2f0l86JE2xb4qBjIKeul15GnRcq
7QYK5QU9h0GbKOwptDdS+OhK2mLEPcw6dP8zEFt7LAwpji/ejXCdDpZQe6gz6dB9
AB03kuYx6gtUfqrc7s1w9EyqOALvIDv6Bj+VX5X3ueiCa23tmhNyArzWSc3HY5ke
PUzvPgNrSMwElSnWJTqw6/I8T0JxyAYZ1TYLh/ryASIUF7jHiykaL3VvnBuchXY7
9gP2ZRQRS8Zq3r106XL4fIG1Hl/mUg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:04:48 2026 by rpki-client