
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa
File: 5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa (raw, json)
Hash identifier: VV7im7XPmPnRw7CnyCETNX9bnyvPd5ehi6Dmnqg3fNo=
Subject key identifier: A0:68:69:21:1B:1F:F6:7E:16:87:77:AB:93:79:5A:33:85:28:21:D5
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EBB11AF97EB724399605AF5E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 202
IP address blocks: 20.133.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:af:97:eb:72:43:99:60:5a:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=644cfabb-ef11-4507-8d96-7258f6875489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c1:0c:fd:b5:b6:42:1c:5f:d5:7b:d2:22:ad:
37:5e:5c:81:c7:06:60:bc:27:3d:23:19:a0:4f:a4:
6c:29:ff:66:8e:99:11:b9:18:94:80:85:1a:c9:47:
38:21:97:03:f6:c5:2a:e4:ca:b2:d9:a5:f3:5a:e4:
99:f8:f5:b7:cc:aa:1e:fb:99:bb:1c:0f:e2:e6:34:
87:70:75:f0:c4:ef:34:7b:4b:b5:86:34:ce:bf:76:
7b:33:1f:66:7c:03:f3:1f:81:f6:cc:c5:33:6e:eb:
98:05:b8:a7:d5:c9:74:cd:a2:49:9b:2f:2b:f3:d9:
06:9a:03:c2:c3:1c:4d:0c:bb:de:5d:5f:00:36:5d:
61:bb:53:94:64:dd:f8:0d:c0:f4:c5:74:f7:70:79:
b7:cf:34:ba:f8:1f:3b:84:32:a0:f1:d2:78:ca:e1:
32:5a:0d:f5:e5:02:35:92:e1:b6:49:8e:81:fb:ab:
6e:55:58:06:78:51:68:83:55:78:45:22:8b:73:f4:
01:81:3a:76:49:b2:47:52:8a:46:3a:08:e9:27:24:
9e:54:f2:57:9b:89:01:d9:18:4b:6b:9b:92:4b:8e:
30:b7:e5:ed:fc:d5:6a:24:83:a4:e4:21:13:34:71:
17:cb:95:39:0d:bb:35:08:a3:54:b9:4a:46:69:5f:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:68:69:21:1B:1F:F6:7E:16:87:77:AB:93:79:5A:33:85:28:21:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:5b:a4:54:1f:3f:00:d1:53:34:ff:72:6b:23:16:0f:a8:15:
ed:7a:7f:5b:7b:42:d1:33:3f:72:bf:75:8e:25:39:73:45:3d:
ab:4c:46:0d:c1:df:ab:8b:85:11:1e:f0:3a:6c:3a:49:47:4c:
25:fc:f3:8e:46:a7:07:3e:d2:88:69:fc:5f:93:5a:db:d0:7b:
ee:19:22:14:85:c2:fa:6b:0c:12:7d:75:56:d8:b2:67:c3:a5:
b8:68:b9:4b:fc:ad:21:67:05:26:c9:99:e2:07:88:bb:1c:b2:
61:ac:62:f0:ea:91:e8:4d:84:53:6b:96:98:e9:a5:28:81:eb:
c4:aa:11:86:b6:bb:5d:08:f8:1c:81:fd:76:56:b3:76:70:a9:
77:8f:20:df:26:fb:3c:5d:54:81:d5:7a:6e:28:4e:e2:57:6d:
3f:d0:c0:ee:36:aa:71:3e:b0:d2:cb:25:23:dd:68:04:a0:c1:
9d:fd:27:b4:24:f2:48:b3:2d:6b:ed:b6:30:0c:ab:c5:85:15:
ee:58:e2:37:4d:e7:ef:23:67:76:4d:e1:82:b5:71:8a:9e:28:
15:b2:ac:7f:88:a6:90:77:52:97:b4:ee:9e:19:5d:c2:87:01:
6f:46:7c:de:1e:55:b1:35:e4:e3:03:00:02:8b:83:85:1d:bf:
15:ce:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:42:56 2026 by rpki-client