
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa
File: 6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa (raw, json)
Hash identifier: kQ3KXE5iflaUdoZmRwi/3P/oipPX6C2W6EbBXCVNfhA=
Subject key identifier: 5C:B1:DF:61:58:32:27:35:A8:04:7F:7A:51:EF:85:6B:7A:A4:39:36
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EDC920346372E6037D9743000
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 202
IP address blocks: 20.154.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:03:46:37:2e:60:37:d9:74:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=1fa18e04-f843-4bbc-af90-68debebd1f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:8d:d2:38:bb:e9:55:a4:71:79:e6:2f:81:
ea:85:bc:cf:30:17:58:f1:99:e4:df:95:98:31:57:
08:01:3d:2c:20:6a:eb:8f:73:da:14:5a:43:6f:e3:
e6:38:51:73:9d:dd:11:9c:5b:67:cc:fb:33:d8:d0:
96:c5:29:ee:87:d8:30:cc:ab:00:e1:75:69:90:58:
d2:7f:8d:89:29:cf:82:c5:bf:ba:74:3b:ac:24:46:
b9:89:1f:34:62:dd:39:0f:6e:9e:a3:a5:48:5a:47:
03:f5:b3:78:f0:6b:17:35:f4:c5:67:2a:f1:a6:c7:
5b:ee:49:a3:e1:6a:a4:6e:5c:d0:3a:0d:b7:31:9a:
0d:87:07:61:c1:df:f2:dc:16:fb:ab:6b:24:2c:e7:
d9:b8:63:9a:64:8a:ec:fa:f0:02:54:9a:7e:b4:58:
57:fb:ad:75:bc:9b:a2:07:51:5f:82:5e:97:45:71:
0d:3e:47:43:eb:86:4e:c5:ec:b3:c9:37:0a:76:02:
18:8f:4d:6f:18:67:cf:8b:41:a6:79:f5:88:36:bd:
75:c5:cf:4a:e4:87:29:27:ce:52:f3:bf:bd:47:2d:
a1:61:96:a9:0b:bd:29:a1:3d:e1:d7:e8:07:e5:49:
cd:80:b1:90:b9:8d:af:2b:cb:c9:20:32:d3:62:01:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B1:DF:61:58:32:27:35:A8:04:7F:7A:51:EF:85:6B:7A:A4:39:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/6306d7cb-3452-38c3-afb2-78b3c671f3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.154.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:93:d7:a6:7c:a4:66:d7:ba:df:c9:9a:7e:9e:22:c7:98:85:
14:13:09:b9:53:a5:8c:fc:cf:51:f3:81:42:a8:b7:3d:19:7f:
e1:ad:3d:6d:73:4f:a6:ae:5f:03:a5:62:bc:b2:21:f6:eb:de:
b8:b3:ad:db:90:18:45:a3:92:29:c1:dd:ea:00:d5:8b:a4:90:
72:1d:52:2e:17:cd:89:c3:b4:01:4f:91:36:65:52:95:8a:ad:
4a:45:b5:34:30:92:17:8c:cf:13:85:26:ff:74:d1:44:9d:b0:
4e:94:3e:e9:6b:c8:99:25:38:d7:b0:79:36:71:ce:63:90:a4:
7a:d4:98:d2:7e:14:cf:80:1a:6b:a5:fe:2e:e6:e7:24:e6:51:
52:9e:ee:0d:13:cf:01:73:d0:8d:8a:12:41:83:34:1b:8c:3b:
0c:94:3b:77:69:95:a0:f0:15:b9:2c:bc:04:b1:52:b3:fd:d5:
2d:c1:32:4d:f4:43:ce:95:23:cb:a4:f8:b5:34:a3:1d:36:25:
d4:a1:80:d2:e6:82:d2:2e:6d:a2:e3:6b:19:60:f8:dd:55:af:
ff:00:09:c6:1d:2e:7a:60:75:27:05:d3:88:ab:4f:15:c7:81:
71:93:f5:d0:e8:e0:d8:3b:06:54:f6:1d:18:91:72:dd:02:06:
50:29:d6:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgNGNy5gN9l0MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MWZhMThlMDQtZjg0My00YmJjLWFmOTAtNjhkZWJlYmQxZjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLiN0ji76VWkcXnmL4HqhbzPMBdY8Znk35WY
MVcIAT0sIGrrj3PaFFpDb+PmOFFznd0RnFtnzPsz2NCWxSnuh9gwzKsA4XVpkFjS
f42JKc+Cxb+6dDusJEa5iR80Yt05D26eo6VIWkcD9bN48GsXNfTFZyrxpsdb7kmj
4WqkblzQOg23MZoNhwdhwd/y3Bb7q2skLOfZuGOaZIrs+vACVJp+tFhX+611vJui
B1Ffgl6XRXENPkdD64ZOxeyzyTcKdgIYj01vGGfPi0GmefWINr11xc9K5IcpJ85S
87+9Ry2hYZapC70poT3h1+gH5UnNgLGQuY2vK8vJIDLTYgHvDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyx32FYMic1qAR/elHvhWt6pDk2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNjMwNmQ3Y2ItMzQ1Mi0z
OGMzLWFmYjItNzhiM2M2NzFmM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJpaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWT16Z8pGbXut/Jmn6eIseYhRQTCblTpYz8z1HzgUKotz0Zf+GtPW1z
T6auXwOlYryyIfbr3rizrduQGEWjkinB3eoA1YukkHIdUi4XzYnDtAFPkTZlUpWK
rUpFtTQwkheMzxOFJv900USdsE6UPulryJklONeweTZxzmOQpHrUmNJ+FM+AGmul
/i7m5yTmUVKe7g0TzwFz0I2KEkGDNBuMOwyUO3dplaDwFbksvASxUrP91S3BMk30
Q86VI8uk+LU0ox02JdShgNLmgtIubaLjaxlg+N1Vr/8ACcYdLnpgdScF04irTxXH
gXGT9dDo4Ng7BlT2HRiRct0CBlAp1lc=
-----END CERTIFICATE-----
Generated at Wed Sep 9 03:43:19 2026 by rpki-client