
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
File: 59a83d47-6316-3fc5-9032-22b42a178341.roa (raw, json)
Hash identifier: a1hA9Eg+C/1aQlmJWOHRBB7ehgJR6TYC48EANMpesxw=
Subject key identifier: DF:FD:DE:EE:57:FB:6B:C5:28:83:6C:5C:17:86:05:77:2A:CE:7A:E3
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EDC9202B690A137940FA21880
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 202
IP address blocks: 20.134.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:02:b6:90:a1:37:94:0f:a2:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=3dd95515-cfcb-4930-8795-9a20148beadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:5d:36:70:21:ee:16:ca:0a:57:73:fe:bb:
bc:c3:95:1f:04:0a:35:3a:da:59:bd:f6:2a:7f:a1:
12:45:bb:6b:3e:6a:cc:82:bc:92:78:9c:55:43:5f:
fa:e2:22:68:a5:29:d6:92:65:4b:62:09:27:d2:7c:
94:e9:a4:e7:7e:d4:3b:77:2b:a4:f8:05:c9:f0:c4:
70:56:65:2b:34:c3:3a:e0:3a:aa:0f:3f:df:8a:91:
3c:98:ed:49:89:a9:9f:3d:7f:cb:3e:06:77:87:b8:
33:d4:40:77:3b:55:91:12:c1:13:e1:bd:ea:b2:e4:
62:6a:4a:46:77:8e:f9:13:1b:b7:b7:63:5e:5f:20:
9d:ce:10:4f:ad:89:d7:cb:94:70:93:ca:e6:61:8d:
36:95:93:0a:ff:9a:7c:68:61:d7:de:ab:93:e1:64:
39:ae:d8:b6:4b:49:0f:a4:d7:e6:9e:89:f7:17:cd:
f2:0c:43:4a:75:7e:71:2c:d8:36:f2:cf:b5:f7:2c:
68:b6:9f:17:83:1a:cb:29:91:22:26:15:d5:17:64:
11:98:ca:f1:a9:89:0c:93:a9:ea:53:9b:cd:c4:e6:
3e:75:77:88:c9:b5:38:07:f4:04:0f:01:ec:35:41:
28:28:35:ba:26:d0:31:21:40:04:98:e0:92:69:73:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FD:DE:EE:57:FB:6B:C5:28:83:6C:5C:17:86:05:77:2A:CE:7A:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:3f:81:52:73:7f:19:63:6d:f0:73:b7:3b:dd:13:80:15:11:
31:21:e6:64:dd:c3:d2:99:27:b1:89:c0:a7:26:ba:67:de:e3:
96:d6:a3:23:e9:6e:fb:2b:52:d2:3a:3b:2f:23:f0:6f:f8:a1:
21:88:0f:6e:dc:9e:12:ff:f0:73:2e:e3:8b:0d:5a:a1:1a:fa:
d8:03:7b:04:b0:f4:7c:e2:02:08:18:e1:1b:86:7b:27:e0:50:
45:98:b4:21:dc:59:61:59:29:a1:e0:9f:79:67:bd:6f:f4:04:
04:58:2b:36:88:75:4f:94:26:32:67:a8:6c:26:0d:86:1f:85:
8d:52:0a:5d:12:ba:24:57:d1:01:d6:ae:05:1d:ad:2e:e8:f7:
ba:f8:27:ec:cb:ef:01:ad:bd:65:4a:34:81:b7:06:b8:73:5c:
b2:0e:14:f1:fc:02:4d:1f:34:92:21:20:8e:12:60:07:32:b8:
34:df:41:55:d6:2b:44:7e:58:fc:6c:da:08:4d:9a:b7:72:e3:
36:ff:cb:6c:58:ff:ab:42:d7:2e:12:65:84:06:84:3e:9d:23:
a1:bd:dd:40:3d:00:da:29:6f:bf:d4:4d:68:7e:d6:c9:3b:e5:
8e:ea:0e:04:f1:6f:e0:76:e9:56:05:bf:a9:fa:a0:85:1c:53:
87:24:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:43:27 2026 by rpki-client