
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
File: d3a5dd72-8e2a-305c-8745-ad834707c297.roa (raw, json)
Hash identifier: UBYN0HO3mSqTd5w4Ar9GV7BETZryOPBTxMRDLlTONJQ=
Subject key identifier: 70:74:45:AB:54:E0:E4:05:5C:01:CB:7D:77:B3:22:9C:03:8C:31:25
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F4328584F82ADB3E18F3681E72562FAC0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
Signing time: Thu 15 Oct 2026 13:00:13 +0000
ROA not before: Thu 15 Oct 2026 13:00:13 +0000
ROA not after: Wed 13 Jan 2027 14:00:13 +0000
asID: 211440
IP address blocks: 199.48.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:82:ad:b3:e1:8f:36:81:e7:25:62:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Oct 15 13:00:13 2026 GMT
Not After : Jan 13 14:00:13 2027 GMT
Subject: CN=998ff372-6546-4e60-92be-56095bd291db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:00:96:48:07:01:60:3a:e9:e6:af:fa:00:
f6:87:8c:83:32:c0:ed:7d:1a:37:49:e2:00:f3:75:
8d:da:3b:45:64:9f:13:0e:06:e9:c8:33:72:b7:19:
3e:9c:94:10:65:4e:21:84:24:6f:fc:74:a9:5d:1a:
32:a1:cb:53:90:5f:6c:d6:11:38:67:f2:96:f8:60:
d2:ff:6f:3a:17:38:29:3d:06:dc:96:bf:e3:a5:71:
69:fb:e2:55:64:36:fa:08:0c:aa:b0:96:c2:23:0a:
80:e5:8b:80:2a:4b:02:98:fe:3d:45:23:73:a6:5f:
e9:c1:65:0c:a1:a6:47:4d:e1:e9:e4:87:c3:b4:fc:
7f:23:f8:d2:08:ce:12:6b:09:7b:d5:ca:12:8a:76:
4e:98:6f:fd:57:a9:9a:79:9b:85:1b:a5:44:cf:ef:
f3:8b:34:08:5c:92:d3:dd:74:d8:9a:83:ae:d4:a1:
a5:b5:40:cf:16:8a:02:19:d7:2a:58:91:7a:a7:c3:
3f:78:ee:62:e7:45:e2:a5:4e:dd:aa:1c:67:ae:b0:
04:fd:54:9d:e7:39:03:5c:69:92:b6:ae:dd:d5:17:
ea:16:0c:0f:6b:3f:b2:d3:f3:6d:63:08:83:e0:f3:
71:7d:71:e8:03:ad:17:a4:40:00:79:fe:fb:37:3c:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:45:AB:54:E0:E4:05:5C:01:CB:7D:77:B3:22:9C:03:8C:31:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:da:2b:79:ee:53:74:29:ca:4d:02:26:f7:24:5c:4a:4a:04:
67:a9:09:a5:f5:23:04:81:dd:4c:a9:cb:1c:49:45:bc:62:16:
b6:1b:ac:28:ac:c6:dc:8e:09:3b:00:27:5e:92:63:4a:0e:32:
f2:13:9e:04:f4:f4:0e:fc:31:30:a7:cb:05:34:9d:ff:ec:a4:
4e:bf:81:78:26:91:08:ce:af:20:c2:bd:b4:14:06:3d:f3:5d:
33:1e:a0:71:73:9a:e9:5f:32:a2:13:83:f2:bf:cc:f9:2d:81:
3e:50:f1:dc:70:27:41:c0:b8:52:64:b4:a1:3f:08:66:71:b9:
b7:51:d8:be:23:90:2c:3d:43:c2:71:ad:79:e3:13:11:76:96:
53:9d:06:61:b3:6a:81:cc:93:aa:27:0b:61:59:fc:0f:fc:f9:
bc:57:18:b7:fc:e3:57:a1:b3:5a:49:a8:ab:24:38:a7:ec:c3:
b3:ad:b1:61:d2:23:96:50:70:6e:31:a0:07:ed:d0:3a:a9:88:
da:57:3b:83:1b:d3:9b:f8:69:17:39:90:d1:a5:52:1d:1d:9b:
99:a3:0f:50:93:62:d5:36:79:22:82:6d:8f:c7:53:f4:b0:a0:
56:43:76:36:b3:00:2c:c1:d4:a1:66:21:4b:b4:b3:44:36:3b:
61:ce:9c:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrbPhjzaB5yVi+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0
NDk0MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
OTk4ZmYzNzItNjU0Ni00ZTYwLTkyYmUtNTYwOTViZDI5MWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFUAlkgHAWA66eav+gD2h4yDMsDtfRo3SeIA
83WN2jtFZJ8TDgbpyDNytxk+nJQQZU4hhCRv/HSpXRoyoctTkF9s1hE4Z/KW+GDS
/286FzgpPQbclr/jpXFp++JVZDb6CAyqsJbCIwqA5YuAKksCmP49RSNzpl/pwWUM
oaZHTeHp5IfDtPx/I/jSCM4Sawl71coSinZOmG/9V6maeZuFG6VEz+/zizQIXJLT
3XTYmoOu1KGltUDPFooCGdcqWJF6p8M/eO5i50XipU7dqhxnrrAE/VSd5zkDXGmS
tq7d1RfqFgwPaz+y0/NtYwiD4PNxfXHoA60XpEAAef77NzyLAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHB0RatU4OQFXAHLfXezIpwDjDElMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1
NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDNhNWRkNzItOGUyYS0z
MDVjLTg3NDUtYWQ4MzQ3MDdjMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx
YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk
NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk
ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3aK3nuU3Qpyk0CJvckXEpKBGepCaX1IwSB3UypyxxJRbxiFrYbrCis
xtyOCTsAJ16SY0oOMvITngT09A78MTCnywU0nf/spE6/gXgmkQjOryDCvbQUBj3z
XTMeoHFzmulfMqITg/K/zPktgT5Q8dxwJ0HAuFJktKE/CGZxubdR2L4jkCw9Q8Jx
rXnjExF2llOdBmGzaoHMk6onC2FZ/A/8+bxXGLf841ehs1pJqKskOKfsw7OtsWHS
I5ZQcG4xoAft0DqpiNpXO4Mb05v4aRc5kNGlUh0dm5mjD1CTYtU2eSKCbY/HU/Sw
oFZDdjazACzB1KFmIUu0s0Q2O2HOnCk=
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:55:04 2026 by rpki-client