
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa
File: 480a876e-f9de-3a86-b420-40e0c9062435.roa (raw, json)
Hash identifier: BIYxtFTQRu6c8H59yN/vtMOaQaOlUN2TWQt4L1KRgug=
Subject key identifier: 50:64:C8:A8:A4:CF:F4:F3:47:8F:BA:78:71:F6:80:99:FC:9D:D7:D0
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EDC9202558807E33F57F30500
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 203
IP address blocks: 20.134.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:02:55:88:07:e3:3f:57:f3:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=df948c90-6e0e-4439-ae13-5c19b4406f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:59:50:07:7d:f6:07:75:95:ec:4e:bf:c3:
77:1c:31:78:3b:bc:14:7a:83:2f:37:13:77:26:94:
b4:61:28:10:e3:de:8d:ac:10:40:84:2c:6d:b0:c9:
1c:83:51:83:9c:c1:5b:15:c1:bf:80:67:eb:9f:b9:
3b:c4:96:bd:bb:0b:f7:6c:bb:83:f2:fa:87:cb:85:
ee:11:16:3e:e0:4a:3b:cd:77:4d:d9:cd:80:35:97:
b5:ea:a1:d1:1c:90:4f:20:68:f2:a0:c2:a0:b0:c2:
39:f8:5d:69:f8:cb:b3:ae:fe:91:1f:e2:4c:2e:17:
a6:d9:e2:47:62:bb:c1:bf:d6:7e:10:5b:4e:06:1d:
94:93:db:20:ea:ae:36:5b:ba:6b:1f:c1:94:6b:6f:
cb:7e:57:f7:c8:42:28:0e:7b:b5:75:0b:fb:80:73:
6b:fd:38:91:09:44:c2:12:9c:69:28:6d:8c:f0:8a:
7f:40:21:d2:db:17:35:51:56:04:0b:07:44:23:21:
6e:80:1a:7d:8b:d1:84:85:5e:b6:12:d8:8b:89:90:
b1:29:41:9d:62:6e:3b:cf:0e:d9:9a:84:84:0d:bf:
e5:4b:89:d5:2f:e9:e4:0d:02:88:e8:03:96:db:da:
24:03:f3:3b:95:15:cb:9a:24:83:91:06:d7:f6:fa:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:C8:A8:A4:CF:F4:F3:47:8F:BA:78:71:F6:80:99:FC:9D:D7:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/480a876e-f9de-3a86-b420-40e0c9062435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:70:0b:f0:6a:03:cc:6f:89:50:9e:8d:37:7f:ea:78:5a:d6:
4d:9c:9c:b9:85:a6:70:86:07:09:bd:bc:cb:82:0d:c7:23:56:
b9:4d:1b:a8:3e:5b:9c:4c:2b:87:ff:06:1b:8b:f9:3f:81:c4:
63:7a:68:89:79:68:5f:ba:74:d1:3f:7b:bb:01:9b:52:c7:0a:
41:5d:1f:04:a3:9c:14:b9:a9:72:ce:d8:ab:22:f5:85:e3:ea:
2f:f7:e2:65:85:ec:e8:dc:10:29:f2:27:06:fe:e6:04:01:75:
9e:6c:ba:93:fc:4f:2e:ba:2c:69:4d:1b:98:50:53:ca:d3:3a:
02:29:00:95:42:e7:ea:86:b6:54:28:a5:96:c9:1f:66:f3:5a:
3e:7c:9b:82:02:c6:87:1d:76:6a:84:ce:2f:49:5c:e1:3f:8f:
d8:5d:b3:f0:4f:77:05:5d:a9:22:82:6e:ff:e3:b3:b8:64:5c:
4e:10:59:f5:ac:0d:e5:fd:53:9c:a5:9f:e5:54:2a:80:cf:b5:
77:ee:90:27:b4:f8:cc:51:6b:0f:df:65:42:ea:68:97:80:5d:
15:d3:46:27:5f:92:5b:4a:6f:71:d5:8f:98:b0:6f:54:f7:79:
ec:83:ba:96:9f:37:85:ac:b5:0a:5f:4c:fb:2d:56:00:14:f9:
51:aa:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:52:38 2026 by rpki-client