
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json)
Hash identifier: wxfPSswmH+04g3HuVwrxW3SfNxXsIJdg7T7K+9LxBBA=
Subject key identifier: 79:F7:70:1F:C6:B4:46:C6:30:25:7C:97:C1:79:19:88:E6:EE:3D:1D
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EDC9201FDB407100C611FE400
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 202
IP address blocks: 20.134.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:01:fd:b4:07:10:0c:61:1f:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=96a7061f-a10b-4fee-be2d-ab19adbb487a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:83:8d:41:d7:ec:3c:0d:1c:68:e4:28:eb:
51:33:70:53:f8:0b:53:b5:58:97:e3:29:6b:e8:ca:
04:ea:d1:79:9a:61:91:72:e9:f2:93:b0:06:25:b5:
99:6e:28:26:b3:ac:9a:84:d6:3f:fd:06:34:55:f5:
9d:f6:12:60:84:d0:ad:21:99:ec:7b:b5:5a:b1:b1:
52:81:f0:56:6c:6d:e4:31:34:10:5f:30:d6:7d:52:
5d:db:4c:83:56:f2:81:10:4f:d3:58:ff:00:f5:5f:
9e:18:1c:8a:19:bc:e7:86:25:48:59:fe:dc:e6:4a:
59:b4:31:e6:1b:5e:61:60:a1:6c:68:37:09:58:e8:
5a:a3:bf:93:e3:3a:d8:4b:ae:78:b2:4a:83:1c:9c:
8f:1d:c7:73:50:8c:13:3a:77:3d:72:c2:13:1f:fb:
27:2e:16:1a:1f:ec:77:4f:40:44:f3:86:be:bc:95:
2b:e6:52:35:dc:a2:a0:4f:20:d6:b5:29:cb:ee:a4:
58:bf:8f:b8:f2:20:fc:05:b7:d4:7b:58:b8:94:53:
d5:c6:d7:71:03:dc:86:ae:bf:f1:7e:e6:0a:06:d0:
cd:77:83:8c:76:dd:5a:49:8c:9f:4f:0b:91:13:e6:
d8:39:22:74:ed:64:28:7b:ba:09:10:99:f2:0a:ac:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:70:1F:C6:B4:46:C6:30:25:7C:97:C1:79:19:88:E6:EE:3D:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:46:46:e3:5e:2f:da:ef:02:71:98:c7:7e:f7:b6:bf:86:24:
6e:20:49:34:1c:79:19:eb:ac:85:2b:b3:95:3a:c2:27:24:6d:
5a:1d:a3:55:51:9c:ed:a1:b9:4f:e2:b8:27:97:99:21:2a:f7:
85:56:d2:8c:c5:af:b0:34:23:54:e5:4e:53:bf:5b:d1:19:b3:
a6:c2:39:23:56:4b:64:96:1a:bd:29:05:34:f6:18:1b:c4:04:
fd:b5:09:f4:63:c3:17:6b:85:c9:54:33:cb:88:32:05:46:74:
3e:20:55:f2:04:f5:28:1e:b0:7b:f8:59:2c:dc:0e:9f:2f:37:
82:8c:4c:34:72:c9:ad:11:0a:5f:8c:60:68:b6:dd:65:d7:ff:
81:03:4f:ff:b4:0d:fd:5c:de:6c:ae:9d:b9:fc:61:bb:06:85:
5f:1b:1d:81:6b:fd:b1:82:de:8d:71:27:11:0d:65:86:80:92:
6c:eb:ef:c6:4f:d1:3a:3f:3e:84:ff:42:1b:10:f0:93:71:be:
f8:fe:44:86:e8:67:3e:53:88:6f:f7:80:b0:b9:30:9a:91:a7:
e2:dd:ec:b4:cc:7b:7f:85:7d:e6:a6:16:ce:27:9e:6e:f6:77:
92:2d:79:5b:24:bd:6e:40:85:fa:46:c1:80:56:de:b3:ec:31:
75:a8:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:43:27 2026 by rpki-client