
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa
File: 48d31edc-bef9-3b8a-8019-51240e7e896a.roa (raw, json)
Hash identifier: 61MmlxFS2nAiOiHDjqGDxrAwuMIFKUFujfjCz0OlDkI=
Subject key identifier: E0:3F:09:53:D6:EF:A6:78:43:C3:27:AF:F4:5A:91:6F:3F:67:A8:30
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584B987242C2BFB1CEF1C4736DA0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 203
IP address blocks: 20.154.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:42:c2:bf:b1:ce:f1:c4:73:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=66061079-5e64-4099-8fca-079549d21a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:3a:a1:c7:b5:c4:10:89:3d:47:21:79:67:
19:50:8d:12:76:26:33:c8:6d:da:23:bd:66:7f:5e:
0b:26:22:d6:6e:da:59:d0:63:98:64:53:2a:45:54:
83:86:e1:e9:42:53:cf:8b:5b:61:4f:81:6e:da:7f:
c1:63:0b:6a:cd:f3:30:9a:f2:36:b6:0a:ce:4f:6d:
42:80:c7:78:e7:f5:fb:a5:71:cf:7a:6d:7c:e9:21:
d4:cb:5d:23:57:aa:13:14:fc:e1:5f:dd:a7:a6:a5:
76:ee:44:02:5f:28:d5:35:4f:7d:18:f2:36:0f:ed:
b5:50:03:9e:e7:c8:90:c2:df:82:68:a1:ec:9c:db:
0b:62:0d:1c:4c:f1:0b:6a:9b:df:ca:3b:e2:0f:b9:
ef:3e:43:f1:b9:70:1b:f1:67:ad:7d:31:06:89:04:
19:bd:31:e2:06:96:76:89:f7:0c:84:1c:bd:d8:4a:
5f:16:3b:5a:f2:1a:8f:a7:3b:99:5e:5f:2f:72:7d:
b1:8a:aa:18:cf:28:e7:ac:27:7c:a0:98:17:34:ea:
61:a0:1b:f0:6a:69:6e:eb:17:5d:12:10:0a:42:4c:
a8:54:82:0c:69:9d:53:a4:57:b5:d6:b7:b2:af:0e:
3b:79:98:79:21:4b:ee:17:8c:ac:84:f5:16:c7:ae:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:09:53:D6:EF:A6:78:43:C3:27:AF:F4:5A:91:6F:3F:67:A8:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/48d31edc-bef9-3b8a-8019-51240e7e896a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.154.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:69:f4:ce:b5:8f:38:47:59:dd:55:63:b4:a8:15:ee:08:d9:
f8:b4:e4:89:8e:bf:6d:e5:a5:a0:6c:9a:09:bd:60:58:89:02:
a8:e3:31:dc:c4:e9:41:aa:8e:79:07:f1:a7:e3:06:72:06:ed:
87:5e:10:03:9d:9e:2b:6e:3d:5a:0b:03:51:7b:51:d8:71:66:
f4:7c:fb:f8:72:b7:20:45:33:c9:c5:d2:67:69:73:42:e7:0c:
5b:94:af:9e:dd:e1:1f:77:9d:23:ea:6a:00:74:ba:ca:43:3f:
d2:60:27:ea:f7:6e:c2:0e:b3:b0:86:ec:3d:37:73:ee:75:43:
65:c5:cc:d2:7d:01:a1:7d:35:2c:b8:43:68:e2:a5:24:91:fd:
c7:34:a8:76:77:d0:c9:54:58:10:5a:57:ea:a5:50:09:59:45:
e1:47:4c:6d:c0:65:bc:da:5e:1f:e7:f1:73:94:9a:f2:b4:e0:
4d:15:14:27:05:81:6f:d3:d3:bf:e9:62:ef:5a:53:80:c0:0b:
b2:d5:f7:ae:e8:24:5f:78:29:44:32:c9:ec:31:73:00:ae:f3:
6f:c3:05:84:3c:19:59:7b:e8:89:62:b3:12:8e:1e:68:0e:cd:
01:13:c3:e7:de:4d:9a:26:ec:0c:07:0d:46:f9:1e:86:15:a7:
aa:21:e0:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckLCv7HO8cRzbaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk
NjYwNjEwNzktNWU2NC00MDk5LThmY2EtMDc5NTQ5ZDIxYTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGg6oce1xBCJPUcheWcZUI0SdiYzyG3aI71m
f14LJiLWbtpZ0GOYZFMqRVSDhuHpQlPPi1thT4Fu2n/BYwtqzfMwmvI2tgrOT21C
gMd45/X7pXHPem186SHUy10jV6oTFPzhX92npqV27kQCXyjVNU99GPI2D+21UAOe
58iQwt+CaKHsnNsLYg0cTPELapvfyjviD7nvPkPxuXAb8WetfTEGiQQZvTHiBpZ2
ifcMhBy92EpfFjta8hqPpzuZXl8vcn2xiqoYzyjnrCd8oJgXNOphoBvwamlu6xdd
EhAKQkyoVIIMaZ1TpFe11reyrw47eZh5IUvuF4yshPUWx67iWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOA/CVPW76Z4Q8Mnr/RakW8/Z6gwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDhkMzFlZGMtYmVmOS0z
YjhhLTgwMTktNTEyNDBlN2U4OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtp9M61jzhHWd1VY7SoFe4I2fi05ImOv23lpaBsmgm9YFiJAqjjMdzE
6UGqjnkH8afjBnIG7YdeEAOdnituPVoLA1F7UdhxZvR8+/hytyBFM8nF0mdpc0Ln
DFuUr57d4R93nSPqagB0uspDP9JgJ+r3bsIOs7CG7D03c+51Q2XFzNJ9AaF9NSy4
Q2jipSSR/cc0qHZ30MlUWBBaV+qlUAlZReFHTG3AZbzaXh/n8XOUmvK04E0VFCcF
gW/T07/pYu9aU4DAC7LV967oJF94KUQyyewxcwCu82/DBYQ8GVl76IlisxKOHmgO
zQETw+feTZom7AwHDUb5HoYVp6oh4Ok=
-----END CERTIFICATE-----
Generated at Wed Oct 22 13:02:57 2025 by rpki-client