
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
File: b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa (raw, json)
Hash identifier: Bto+5jw8T74H98OAXtfIAnDWIoWKBzB5wfi5rSYsYAI=
Subject key identifier: FD:3A:D0:E5:6C:57:56:31:39:78:EF:32:8A:FE:E0:51:E5:CC:DE:A1
Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial: 010D0C9F4328584F497358107A0C621501CD2280
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 400653
IP address blocks: 165.123.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:58:10:7a:0c:62:15:01:cd:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=224c5545-7016-4783-9de9-2b31a1ed2734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:dc:59:4d:c0:fc:e6:42:9c:a1:7c:6f:b7:
0c:e9:c2:82:d4:3d:10:38:2d:b8:1b:a9:1f:53:1c:
7a:ca:cc:05:a6:5d:3a:1b:62:11:8b:85:07:b2:c7:
8b:6c:8f:29:c4:48:be:78:69:11:d1:0d:34:52:78:
1c:5a:64:c6:91:41:50:b8:88:84:d2:6a:94:38:22:
89:75:2d:c9:a6:3d:23:8f:8d:1c:48:17:99:9c:12:
b3:d2:ee:ed:2a:19:08:b5:cd:3e:4c:4e:6c:99:89:
1a:3c:a1:6a:5f:0d:9e:ce:81:9a:a1:02:e1:d0:9f:
86:29:25:31:3d:bb:53:f1:91:5a:4d:40:a8:2e:01:
03:af:6d:9b:55:d2:d3:8f:f8:d2:aa:b5:35:38:cd:
63:29:9d:1f:e7:b4:49:00:e0:5c:9b:a8:f2:a6:ce:
a4:34:46:a6:8e:e7:55:ca:82:52:0f:36:62:64:9b:
73:22:f5:dc:91:12:72:07:69:80:3a:7d:18:54:59:
55:17:89:15:a4:25:5a:05:b3:01:3c:f6:ef:9b:8a:
5e:7d:d5:92:4e:3e:35:b8:58:a8:f0:cb:3d:85:5a:
c5:40:15:cc:05:10:75:de:94:c9:2b:de:05:56:44:
54:91:b5:7a:bb:c1:aa:e6:36:c2:61:1f:4c:6e:04:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:D0:E5:6C:57:56:31:39:78:EF:32:8A:FE:E0:51:E5:CC:DE:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
X509v3 Authority Key Identifier:
keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
sbgp-ipAddrBlock: critical
IPv4:
165.123.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:a9:ae:13:a3:a6:07:54:4c:a7:d6:73:7a:fd:88:b9:07:6f:
c5:7a:80:e2:3f:9e:6d:15:df:d3:22:b4:31:12:52:f5:7d:37:
05:fc:9f:63:5b:af:41:ed:5b:3b:6e:ad:26:cc:26:ee:5c:e4:
8a:73:76:d8:15:09:38:d4:3d:28:34:66:08:0f:2d:47:96:d0:
f3:48:73:6f:c0:9c:66:be:fc:1f:b0:0f:26:90:fd:8c:97:c6:
a0:df:64:b4:1c:05:e4:55:f0:65:8c:b6:94:8a:bd:f4:8b:19:
c9:23:6b:f4:2a:30:42:b2:e9:66:f3:a3:58:b4:b0:51:1f:9f:
ef:92:82:01:e2:9a:38:41:ab:0f:90:ed:34:62:e6:1c:cb:db:
64:1b:aa:60:4b:24:07:ad:31:b6:d3:c9:8e:34:e3:88:d1:1e:
a9:28:da:a6:18:4c:ec:01:29:5f:85:ae:0a:b4:3d:b9:c7:79:
03:16:11:84:9f:31:4c:4b:62:cc:f9:cd:16:14:36:3e:42:11:
51:dd:ed:8d:a4:b8:b7:15:b2:c5:2f:ab:68:45:59:e7:f4:9a:
29:09:16:bf:34:0d:f5:d8:5d:5f:5a:7d:af:21:1a:56:74:4b:
31:5a:6a:fe:58:95:cf:f0:9a:ff:9b:9b:73:71:68:8c:d7:0c:
03:6a:ec:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1gQegxiFQHNIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2
N2Q0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjI0YzU1NDUtNzAxNi00NzgzLTlkZTktMmIzMWExZWQyNzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MvcWU3A/OZCnKF8b7cM6cKC1D0QOC24G6kf
Uxx6yswFpl06G2IRi4UHsseLbI8pxEi+eGkR0Q00UngcWmTGkUFQuIiE0mqUOCKJ
dS3Jpj0jj40cSBeZnBKz0u7tKhkItc0+TE5smYkaPKFqXw2ezoGaoQLh0J+GKSUx
PbtT8ZFaTUCoLgEDr22bVdLTj/jSqrU1OM1jKZ0f57RJAOBcm6jyps6kNEamjudV
yoJSDzZiZJtzIvXckRJyB2mAOn0YVFlVF4kVpCVaBbMBPPbvm4pefdWSTj41uFio
8Ms9hVrFQBXMBRB13pTJK94FVkRUkbV6u8Gq5jbCYR9MbgR6lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP060OVsV1YxOXjvMor+4FHlzN6hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz
NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvYjhlMzk2Y2ItYTA5Ny0z
ZWIwLWI3NDgtMzExNmY0Y2U3YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi
MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1
NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy
Mjc0NTY3ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpXvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmprhOjpgdUTKfWc3r9iLkHb8V6gOI/nm0V39MitDESUvV9NwX8n2Nb
r0HtWzturSbMJu5c5IpzdtgVCTjUPSg0ZggPLUeW0PNIc2/AnGa+/B+wDyaQ/YyX
xqDfZLQcBeRV8GWMtpSKvfSLGckja/QqMEKy6Wbzo1i0sFEfn++SggHimjhBqw+Q
7TRi5hzL22QbqmBLJAetMbbTyY4044jRHqko2qYYTOwBKV+Frgq0PbnHeQMWEYSf
MUxLYsz5zRYUNj5CEVHd7Y2kuLcVssUvq2hFWef0mikJFr80DfXYXV9afa8hGlZ0
SzFaav5Ylc/wmv+bm3NxaIzXDANq7AI=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:47 2026 by rpki-client