
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
File: 233688fe-a33c-3a81-9597-da16bac00035.roa (raw, json)
Hash identifier: rbvyWuDsAxlhhcFMN0eYsqsFvA0MOyRvfFobgBVvWic=
Subject key identifier: 67:F1:29:45:39:A9:6C:99:81:B5:DA:47:77:3B:C4:29:7A:D3:E2:85
Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a
Certificate serial: 010D0C9F4328584EC0A72D8DEF7109AD52E9D040
Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 16509
IP address blocks: 192.41.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:2d:8d:ef:71:09:ad:52:e9:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=500cf903-ad2f-49d1-b572-c7ff2ab199dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:6c:11:98:89:1e:19:c3:dc:a7:42:45:dd:
8f:aa:97:78:30:91:2b:98:07:1a:28:27:41:ac:ba:
ea:31:c1:51:a4:e1:f9:46:82:b5:21:03:3f:6a:99:
51:49:0d:95:97:d5:27:e6:9d:72:a9:42:eb:46:b8:
e1:6e:40:0f:11:61:30:88:e3:5f:5b:7c:39:87:05:
43:7d:95:bc:eb:93:c2:91:4e:fb:1b:49:b3:14:f7:
41:95:5a:93:b9:52:d8:ad:aa:8a:ba:6b:f4:c0:bd:
c3:4c:d2:c2:a5:8d:cf:cb:d6:24:7d:43:21:15:38:
bf:d7:bc:b9:10:b6:da:66:0b:50:ac:a8:e3:e2:48:
20:0f:1e:d6:6a:45:bf:d7:da:5d:fa:4c:7d:5e:81:
3c:13:40:e7:23:d8:57:7b:07:2e:f0:b1:97:11:66:
53:26:6c:b7:eb:31:13:54:0e:2e:db:22:7b:b2:c0:
8a:1c:df:15:79:5b:37:16:88:76:ed:9d:cd:d9:8f:
98:fe:8b:5f:5a:b2:b4:fe:46:4c:9c:1a:49:7a:26:
b2:32:a5:19:29:71:8e:93:ea:0a:83:96:9e:e1:7b:
23:2b:9a:28:8d:b9:46:e5:62:21:49:a6:c8:a4:b5:
c9:47:58:18:4d:18:d5:14:c1:f9:71:fa:a6:65:eb:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F1:29:45:39:A9:6C:99:81:B5:DA:47:77:3B:C4:29:7A:D3:E2:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl
X509v3 Authority Key Identifier:
keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.41.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:73:48:e8:3e:26:e3:c4:2e:13:8a:92:59:1c:eb:f6:85:de:
2a:09:90:68:e3:49:67:84:29:a1:f7:b6:97:a0:f3:ec:61:8f:
bd:3f:bb:94:5b:ff:52:f5:50:a9:b9:06:5b:1d:0f:ce:c3:2d:
c7:c7:29:90:79:3a:04:34:00:00:9c:99:22:6f:7b:8d:f1:94:
93:1b:bf:a0:2f:35:89:e5:d3:20:95:dd:99:f5:c7:a5:c8:da:
af:cf:14:fc:eb:95:13:dc:7d:81:85:2c:2d:04:a2:04:17:ba:
a8:27:50:3e:61:86:8d:7b:06:4d:19:c4:39:65:1f:d9:9b:ff:
17:21:fa:01:35:87:39:cf:6f:72:08:33:5b:d8:ed:4b:51:c1:
40:1c:4a:5f:29:c8:ff:8c:b8:d4:39:82:be:64:ed:6a:ba:a0:
ff:00:22:e1:7e:3e:27:84:70:42:a3:e9:c4:cb:61:14:68:1b:
5e:c7:19:55:bf:02:c2:c0:fe:a5:9e:8e:9d:44:1b:22:92:81:
40:13:f4:d6:a9:87:37:d0:1a:51:aa:7e:d6:4f:d1:3e:cb:5a:
a2:06:16:34:7f:0d:9d:03:3b:73:82:53:64:0c:cd:7e:50:24:
c8:c6:ff:d7:00:e4:15:c2:ec:7d:6b:8f:66:13:2a:db:60:34:
b6:a8:f8:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apy2N73EJrVLp0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0
MjJhMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
NTAwY2Y5MDMtYWQyZi00OWQxLWI1NzItYzdmZjJhYjE5OWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKJsEZiJHhnD3KdCRd2Pqpd4MJErmAcaKCdB
rLrqMcFRpOH5RoK1IQM/aplRSQ2Vl9Un5p1yqULrRrjhbkAPEWEwiONfW3w5hwVD
fZW865PCkU77G0mzFPdBlVqTuVLYraqKumv0wL3DTNLCpY3Py9YkfUMhFTi/17y5
ELbaZgtQrKjj4kggDx7WakW/19pd+kx9XoE8E0DnI9hXewcu8LGXEWZTJmy36zET
VA4u2yJ7ssCKHN8VeVs3Foh27Z3N2Y+Y/otfWrK0/kZMnBpJeiayMqUZKXGOk+oK
g5ae4XsjK5oojblG5WIhSabIpLXJR1gYTRjVFMH5cfqmZetUIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfxKUU5qWyZgbXaR3c7xCl60+KFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh
NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvMjMzNjg4ZmUtYTMzYy0z
YTgxLTk1OTctZGExNmJhYzAwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3
ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0
NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0
MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlzSOg+JuPELhOKklkc6/aF3ioJkGjjSWeEKaH3tpeg8+xhj70/u5Rb
/1L1UKm5BlsdD87DLcfHKZB5OgQ0AACcmSJve43xlJMbv6AvNYnl0yCV3Zn1x6XI
2q/PFPzrlRPcfYGFLC0EogQXuqgnUD5hho17Bk0ZxDllH9mb/xch+gE1hznPb3II
M1vY7UtRwUAcSl8pyP+MuNQ5gr5k7Wq6oP8AIuF+PieEcEKj6cTLYRRoG17HGVW/
AsLA/qWejp1EGyKSgUAT9NaphzfQGlGqftZP0T7LWqIGFjR/DZ0DO3OCU2QMzX5Q
JMjG/9cA5BXC7H1rj2YTKttgNLao+Lo=
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:51 2026 by rpki-client