
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbbdc836-ea85-33d2-9e03-0983f4ca8a04.roa
File: fbbdc836-ea85-33d2-9e03-0983f4ca8a04.roa (raw, json)
Hash identifier: nrTrSkrAFPQP+h8uZSO1EbbCtbShB8fUjsV+b/2vDaY=
Subject key identifier: C3:AD:FE:03:18:91:1F:C2:60:A6:3A:A1:4E:7F:1B:0A:32:39:49:4A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584F497D0198654EDA202E90F7E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbbdc836-ea85-33d2-9e03-0983f4ca8a04.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 396982
IP address blocks: 199.223.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7d:01:98:65:4e:da:20:2e:90:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5ed34dc2-bfaf-44e5-82d1-2588eeb71371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:ef:3a:c0:3f:69:33:d0:8e:ec:f7:80:29:
e6:bf:00:87:16:4f:c7:37:8b:28:4e:4f:50:50:3f:
18:ce:b3:bb:26:79:8f:65:9b:de:c7:5c:f6:58:b9:
a4:e4:11:6f:b5:35:dc:4e:7c:21:cd:86:bc:b6:82:
6c:88:92:59:a6:f1:ea:60:b1:fe:6f:ee:b9:1d:7a:
a2:69:24:7c:75:e8:92:a0:62:2d:d1:03:95:9e:e9:
b0:fb:10:15:03:bb:8d:a1:d0:97:dd:7c:9a:46:bf:
f0:6b:fd:18:50:41:0d:fe:71:4e:58:60:c2:55:d8:
9c:50:5a:c8:26:a4:07:f9:d4:98:4e:d2:1f:76:f4:
d0:42:95:25:5b:c7:b4:08:12:05:64:32:e4:3d:65:
ea:0b:f5:80:4b:d4:62:84:26:3d:b3:af:ed:09:24:
8e:b2:c0:fa:9d:2a:6f:ad:2c:0d:51:35:ef:56:2d:
b1:1e:48:c6:b6:05:7e:d1:57:b5:59:ca:9e:5e:d1:
21:e2:cf:85:03:de:43:54:5e:0b:7c:a7:97:2d:99:
29:17:fd:b9:9f:12:a4:b4:ec:27:a4:c6:4e:92:0c:
4e:f4:a8:f1:72:a7:62:02:29:3f:15:ee:15:0a:aa:
b4:64:4e:4f:8f:29:87:55:6e:19:21:ce:4f:a7:c4:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AD:FE:03:18:91:1F:C2:60:A6:3A:A1:4E:7F:1B:0A:32:39:49:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbbdc836-ea85-33d2-9e03-0983f4ca8a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b1:60:8c:7c:28:40:2d:31:8a:45:b9:a8:4d:e4:35:66:6e:
25:c1:73:00:9b:ae:09:a9:ea:49:04:28:95:cb:9a:66:55:1a:
f6:49:c0:82:4b:76:c5:24:67:35:3a:0d:be:89:42:c1:5b:de:
a3:75:34:82:fb:70:05:a4:e8:8f:38:0d:6f:c7:f0:d4:5c:28:
8b:07:bc:83:bb:78:a9:c2:02:0b:97:76:8d:45:c0:dd:b5:4e:
ca:de:aa:b6:b2:c1:78:5d:85:4f:52:32:4e:a6:ef:a3:04:8e:
98:8d:a4:39:d7:4b:65:78:a7:42:3f:d9:8f:5c:9e:a4:a9:d4:
d0:39:ba:56:e3:70:bc:86:ae:21:da:01:42:3a:2a:86:01:36:
83:f1:95:26:1e:1b:fe:e5:59:fb:4b:66:d2:a8:db:9f:25:be:
48:b4:29:a2:14:da:6c:2f:9e:ef:07:ad:c4:f6:d2:83:ba:50:
20:ae:f1:c7:37:ca:b9:7d:70:af:b4:f6:ef:5d:fc:11:28:b9:
c3:fa:97:32:69:5d:ee:0a:9b:9c:b3:5b:dc:37:6a:6e:af:60:
d2:24:fd:dd:05:73:8d:58:b6:a8:eb:81:3a:d9:77:76:a5:45:
7a:c7:4b:36:80:f8:37:b1:14:94:a9:c0:7b:ee:d1:a3:4f:53:
15:eb:c2:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQGYZU7aIC6Q9+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWVkMzRkYzItYmZhZi00NGU1LTgyZDEtMjU4OGVlYjcxMzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxizvOsA/aTPQjuz3gCnmvwCHFk/HN4soTk9Q
UD8YzrO7JnmPZZvex1z2WLmk5BFvtTXcTnwhzYa8toJsiJJZpvHqYLH+b+65HXqi
aSR8deiSoGIt0QOVnumw+xAVA7uNodCX3XyaRr/wa/0YUEEN/nFOWGDCVdicUFrI
JqQH+dSYTtIfdvTQQpUlW8e0CBIFZDLkPWXqC/WAS9RihCY9s6/tCSSOssD6nSpv
rSwNUTXvVi2xHkjGtgV+0Ve1WcqeXtEh4s+FA95DVF4LfKeXLZkpF/25nxKktOwn
pMZOkgxO9KjxcqdiAik/Fe4VCqq0ZE5PjymHVW4ZIc5Pp8Tq4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOt/gMYkR/CYKY6oU5/GwoyOUlKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmJiZGM4MzYtZWE4NS0z
M2QyLTllMDMtMDk4M2Y0Y2E4YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGxYIx8KEAtMYpFuahN5DVmbiXBcwCbrgmp6kkEKJXLmmZVGvZJwIJL
dsUkZzU6Db6JQsFb3qN1NIL7cAWk6I84DW/H8NRcKIsHvIO7eKnCAguXdo1FwN21
TsreqraywXhdhU9SMk6m76MEjpiNpDnXS2V4p0I/2Y9cnqSp1NA5ulbjcLyGriHa
AUI6KoYBNoPxlSYeG/7lWftLZtKo258lvki0KaIU2mwvnu8HrcT20oO6UCCu8cc3
yrl9cK+09u9d/BEoucP6lzJpXe4Km5yzW9w3am6vYNIk/d0Fc41YtqjrgTrZd3al
RXrHSzaA+DexFJSpwHvu0aNPUxXrwtw=
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:52:09 2026 by rpki-client