
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa
File: 53fb2e37-5e98-3242-85b4-dc0598c808e7.roa (raw, json)
Hash identifier: MOnT56NfPAvK2tZtxHTTwbhM9L3qhXPxaTi4c4i9hb0=
Subject key identifier: 8F:C1:32:00:F4:BF:A5:06:28:E1:27:95:78:99:B9:90:E6:1F:31:62
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EBB11A6F6E7AEDA0E00BB1A00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 3356
IP address blocks: 20.149.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:a6:f6:e7:ae:da:0e:00:bb:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=dba2153a-4dbe-4dba-bf5d-4f16804253ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:d6:9a:c3:66:4e:a9:d9:d3:11:48:3c:1a:
84:e0:09:bc:d6:02:5f:1d:62:21:33:19:5d:57:74:
fd:a3:09:91:67:3c:5b:03:58:2b:d5:b0:79:8d:5d:
e8:a1:ea:a4:f9:52:d4:0c:a0:bf:3d:3b:9b:9a:65:
77:4d:04:67:4d:a0:5b:c9:49:ad:d3:36:45:15:7e:
6f:fb:83:aa:d3:2b:0c:32:20:26:73:b5:a8:8d:ae:
94:33:05:a9:d1:13:f7:8b:32:b8:7a:93:af:ff:ef:
85:63:26:10:7d:28:73:25:28:83:f1:19:38:7b:d2:
4a:8e:58:66:cb:83:b9:67:86:b6:74:cd:51:88:10:
12:48:eb:85:ee:97:b2:11:cf:0d:27:dc:8d:15:e9:
ba:d0:7e:8b:6f:8f:36:49:2a:a9:69:4d:0a:0f:32:
12:ec:9c:75:31:8e:f0:a5:ff:1d:4f:81:30:0e:63:
b0:03:6d:33:30:ed:bb:e6:40:29:76:6d:c8:02:96:
ed:26:56:c4:9c:34:58:92:fe:49:e7:3f:19:9a:b8:
47:75:b8:9a:a3:b6:b7:22:cc:9a:5e:99:78:c9:f7:
7f:f4:9e:52:df:c4:9e:93:a5:72:27:e4:6b:99:e0:
7e:25:fe:c1:da:d1:96:68:81:02:76:43:33:0c:36:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C1:32:00:F4:BF:A5:06:28:E1:27:95:78:99:B9:90:E6:1F:31:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/53fb2e37-5e98-3242-85b4-dc0598c808e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.149.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:3c:56:2d:c3:18:d8:66:1f:5d:cb:a0:15:8e:f7:42:b8:f6:
c3:af:ad:11:2b:5f:6c:77:1e:c0:03:82:86:63:46:c1:72:17:
b9:d8:1d:17:1d:0c:df:58:0d:73:bf:2a:19:70:da:e4:53:bf:
a0:c6:55:c1:a1:a5:cd:37:3a:f1:3d:45:cb:b4:c8:1a:71:20:
88:6f:48:38:f5:65:6a:b2:36:3a:bc:19:4a:44:42:2e:50:fd:
15:c5:91:fd:36:b2:31:d1:be:64:f6:a5:0b:1e:af:41:0d:67:
94:d1:28:63:2e:92:0c:07:c0:01:8c:e8:93:19:e5:c4:0e:2a:
48:0a:05:08:de:7e:43:51:90:c6:74:c0:69:8c:4c:0c:83:2b:
41:f3:73:12:7d:87:0d:f3:7c:89:24:03:a2:5e:c2:b9:5c:12:
5e:b6:15:1e:05:ac:15:b6:ed:29:83:74:74:fb:45:6e:25:65:
70:25:67:7b:71:00:57:7e:7e:e0:e1:6d:1a:af:ae:30:4f:df:
60:63:22:d4:36:6c:fe:f9:0a:b4:5d:01:1d:90:a7:5a:bb:97:
2b:91:63:2f:89:7d:22:b2:58:12:c5:24:a0:78:56:b5:c8:ca:
cb:8a:e3:ec:10:cf:4c:20:0c:61:7f:ef:12:4f:88:4b:75:ed:
25:f2:d9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:41 2026 by rpki-client