
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
File: 59c44230-ec55-3638-8a91-87a24d084422.roa (raw, json)
Hash identifier: Fzyu7iiOsQyjXo6ALZzQHrzwa9QnNOEHMA6s/VHZTTg=
Subject key identifier: 93:F0:85:84:51:F7:69:12:82:02:26:FC:C2:28:EE:80:FB:10:35:5B
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584CA5F71740F99D103C582B1EC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 3356
IP address blocks: 20.137.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:17:40:f9:9d:10:3c:58:2b:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=06eb3270-b34d-4e6a-88f1-782cd58d5c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:ce:9e:b8:ec:fe:a6:ce:f9:b2:79:49:10:
45:51:8f:c7:fb:d3:17:ad:b8:5b:96:c4:5e:e7:ca:
a7:3e:6e:5b:49:d5:b9:c9:46:49:6f:62:cd:23:78:
b0:0f:8f:93:07:cc:b6:30:ca:ff:d9:ab:02:9c:be:
26:49:7a:b0:fa:17:7a:53:f3:eb:a9:a1:52:40:26:
f7:f8:be:e0:50:8a:de:bb:de:ba:aa:77:d7:71:9a:
e1:db:06:eb:f7:ab:a8:21:36:4c:67:a5:1a:7a:72:
ba:0d:10:6f:90:7b:d2:54:16:53:fb:8c:15:ee:84:
d4:96:e9:4d:47:da:5f:9e:ab:6d:8a:60:6e:b9:74:
2c:c6:d2:df:27:18:dc:d6:1c:51:a8:bf:d1:56:a1:
c9:55:97:14:92:30:ec:38:8f:6f:75:d5:2d:cd:a3:
b7:03:5c:c6:86:ad:fc:c4:c0:43:56:45:60:d4:50:
26:46:ba:57:68:2b:47:f6:00:68:92:3c:04:73:19:
ee:ec:4a:f9:f1:86:e4:1d:29:76:c0:5e:a8:e5:1a:
df:be:08:bd:9d:46:0f:50:76:05:91:b4:bc:d7:72:
57:f4:20:e0:99:f2:7a:93:99:9e:e6:6a:9e:0e:2b:
59:64:9e:f0:ce:fa:43:85:15:19:0a:2d:22:21:96:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F0:85:84:51:F7:69:12:82:02:26:FC:C2:28:EE:80:FB:10:35:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:7a:68:63:12:92:76:fc:45:aa:01:90:24:27:d0:79:3d:a7:
ed:f2:21:73:a0:48:92:70:c2:02:db:33:0d:83:58:e6:4d:c7:
bc:0a:09:f1:cc:84:91:c0:f0:c9:9f:dd:de:e4:ee:d0:eb:2e:
01:67:6b:1e:46:50:91:4f:75:a5:94:eb:19:33:93:f0:0f:da:
93:66:93:69:d2:33:34:2e:fa:6b:7d:17:19:70:15:2d:50:58:
e3:2f:d3:95:dd:9c:c2:26:b6:b7:78:21:04:bb:96:ce:40:10:
86:4d:1f:8a:e1:c6:f8:7b:28:25:e1:52:eb:03:2b:33:dc:d3:
34:96:68:e7:4b:6a:b0:1b:ca:a8:cd:2e:7e:e6:ca:2d:d5:67:
2e:d4:17:cb:23:40:fd:2e:07:3d:90:cf:e1:7e:52:9f:ed:a9:
ef:c0:a2:46:ae:6f:a0:e3:ae:c7:e8:4c:be:c1:16:e1:34:d0:
73:92:5b:10:b3:1c:73:45:c4:f9:4e:c2:83:a3:dd:4b:bb:5b:
7e:93:4a:eb:c8:54:cc:87:bf:db:25:a2:55:c0:0f:38:dc:65:
74:45:4f:f1:92:e9:2d:bf:41:62:65:9c:de:cd:22:d4:45:89:
b3:00:88:e5:66:4e:96:14:97:d8:03:01:8d:25:59:e5:73:92:
04:1e:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 22:59:26 2026 by rpki-client