
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa
File: 20b86aff-f738-359b-bf7f-a923168ca468.roa (raw, json)
Hash identifier: qzC/1+kGqS/fSmb5oaWyymxgPLSTRURcZjVK5iwDOfo=
Subject key identifier: BB:6B:0D:9E:7D:05:45:66:6C:C6:09:51:F8:A2:3B:2C:45:F0:D8:16
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DD625B8791EDFCAFBB61D1300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa
Signing time: Fri 15 May 2026 01:00:24 +0000
ROA not before: Fri 15 May 2026 01:00:24 +0000
ROA not after: Thu 13 Aug 2026 01:00:24 +0000
asID: 3356
IP address blocks: 20.137.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 10 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d6:25:b8:79:1e:df:ca:fb:b6:1d:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 15 01:00:24 2026 GMT
Not After : Aug 13 01:00:24 2026 GMT
Subject: CN=2e455b6c-212f-430f-95f1-da910faf8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:6d:f9:62:99:9c:1f:8a:0b:5a:c7:cf:2b:
bb:fd:06:f2:dd:3a:9d:dd:84:54:32:43:ce:cb:20:
cc:dc:f9:12:16:85:b1:83:00:0c:a6:dc:e3:70:3d:
09:fa:1b:8a:ea:6b:62:1d:30:40:3f:19:4f:6b:87:
ce:d4:18:e5:b9:ee:80:35:87:3a:cd:e3:31:0b:9f:
51:26:ba:f9:cd:21:1e:53:4c:c4:20:17:cc:56:e1:
0d:b2:b7:18:95:07:34:2a:f3:a2:97:0b:47:5e:f9:
9f:51:9d:5f:3d:24:8f:a3:60:c0:0f:c6:a7:21:60:
2e:9f:53:a1:d5:9c:10:65:5a:61:e2:fd:b7:c6:32:
eb:69:fb:01:b6:d2:9f:8c:3c:0c:bd:7a:68:d6:97:
d3:da:75:bf:e4:d9:02:e7:93:2e:63:9e:8e:85:5b:
2b:0a:be:00:23:7c:26:ea:3e:51:96:5b:bd:3f:9f:
18:53:d5:01:88:52:83:b0:a8:62:43:0e:c7:9d:1c:
ea:fc:4b:59:77:94:b8:21:e4:8f:55:39:1c:7f:6b:
1f:83:56:32:cc:d3:ee:2b:91:ac:5b:ae:ab:a8:5a:
92:ea:ff:d1:46:18:f1:df:76:d2:3f:7c:05:d9:19:
17:86:ab:fe:96:99:f4:85:74:6a:89:3f:c0:cd:86:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6B:0D:9E:7D:05:45:66:6C:C6:09:51:F8:A2:3B:2C:45:F0:D8:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:6d:82:ec:67:09:c8:14:25:35:e5:21:e4:4f:ff:3f:58:24:
60:41:2c:75:87:a1:02:21:96:b4:7d:e4:f3:fc:a7:d0:3f:bb:
e4:d9:fc:a1:ea:47:fd:31:35:96:28:f5:92:b1:85:70:1c:f7:
44:de:2a:ca:91:ee:93:b4:7b:c4:30:72:6f:d7:72:39:3b:ad:
f5:b2:76:86:ed:fd:d8:8e:02:19:6b:34:a3:2b:02:9b:2e:0e:
ea:57:ce:05:91:4a:a1:5f:6e:3d:6c:5b:15:17:c5:89:b8:6f:
2d:e2:3f:b6:ef:79:5a:a8:6c:f8:e2:0a:92:6a:c0:2b:19:76:
48:48:0c:56:a0:c4:12:02:6f:ca:8a:fe:55:dd:a9:6e:15:de:
46:0b:e7:db:38:db:53:99:4f:5e:37:75:a8:67:e9:3b:3f:d8:
5f:56:7a:58:8d:50:50:06:db:53:f4:55:ac:c9:16:74:b4:3c:
a3:79:b0:23:ff:bf:ae:e1:95:f4:f5:f6:88:7c:b7:b2:ff:ac:
c5:fb:34:a3:35:b7:2b:f5:12:ab:af:ea:48:5c:8a:3c:f6:bf:
44:e5:aa:33:cc:31:1f:2b:d7:03:bf:36:ea:f3:6e:a5:fa:41:
f7:b7:93:5e:de:28:db:0b:e8:a8:18:f1:ac:ce:bd:02:4f:31:
c6:dc:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 20:12:04 2026 by rpki-client