
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa
File: 69ed5808-c077-3138-b24c-f87000a5e1f6.roa (raw, json)
Hash identifier: iGQ04DIARlZInXRdsEK+OaY3POyoRSICdKmUyQQjrUg=
Subject key identifier: 3B:93:25:23:4F:A9:7D:D5:8B:01:E9:AF:F4:71:4C:26:34:D8:94:31
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DF4DB605DBC047FA10B593300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 3356
IP address blocks: 20.138.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 10 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:60:5d:bc:04:7f:a1:0b:59:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=84c38f81-6c57-4c74-a29f-d4912389e805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:a4:7b:7e:ac:36:44:ff:19:8b:ce:7e:e8:
66:95:8a:20:b9:4e:71:26:d5:26:cb:19:e6:2a:0a:
7b:58:e1:9a:b5:70:01:cc:0b:24:14:58:bb:a4:eb:
b1:15:b5:67:05:2c:b7:d2:c1:44:a7:64:4b:69:f2:
60:28:a0:9c:27:fc:c2:27:4b:5e:e0:3b:87:05:76:
9e:6d:26:c3:a8:63:f1:5e:ff:48:26:d6:18:be:f4:
d4:58:ca:d7:cd:dc:1d:e5:87:8e:39:b8:e1:8f:bb:
9e:4d:9c:55:d9:44:e7:1e:2e:56:24:bf:b3:93:17:
89:49:ae:77:a3:62:b5:8c:23:f2:f8:76:b6:b0:2e:
ff:79:85:4d:f1:76:6e:da:34:48:e1:c3:d8:90:80:
4d:ba:34:41:a1:6b:5c:d9:b5:6f:5e:27:59:8e:df:
81:41:b1:b2:17:a4:e6:e7:1a:94:a7:54:53:90:58:
ec:75:63:ed:08:e2:be:11:0b:7a:48:cb:52:a4:ef:
79:6a:f5:6e:ee:a5:a8:c3:81:9f:59:d0:00:9c:d4:
43:a0:f1:2b:eb:9b:28:20:34:a7:8f:ae:5a:2b:8e:
7b:3e:59:e8:cc:85:1e:bf:43:9a:d1:f8:55:b3:5a:
91:ee:9f:55:94:54:f0:4b:38:ec:11:34:45:33:1b:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:25:23:4F:A9:7D:D5:8B:01:E9:AF:F4:71:4C:26:34:D8:94:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/69ed5808-c077-3138-b24c-f87000a5e1f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:c2:6e:01:43:8e:21:cd:3f:79:09:08:e5:d0:8c:d7:6c:74:
9b:28:38:2f:8b:55:a0:20:e3:05:11:8a:6d:1d:7a:e4:0f:0a:
6b:58:98:9f:ab:31:b8:ab:de:ef:6b:38:98:c6:f6:ae:a3:ba:
f3:a8:55:64:95:25:f8:62:20:aa:a7:16:89:0e:67:fd:e1:c3:
bb:02:61:b6:77:d4:c5:18:e2:4a:aa:93:d9:88:1f:b3:f9:7d:
8a:0c:6d:c9:45:ef:21:2d:ad:6b:9d:8b:6d:41:73:54:31:c7:
d9:48:ae:90:2c:b4:ef:e9:e7:c8:6f:a3:af:35:2e:7d:97:4e:
53:da:44:dd:f1:b5:06:7a:10:d3:00:81:de:57:2d:6a:f6:46:
19:89:b4:6d:1b:d1:cb:2c:3e:88:36:4d:63:14:dd:b9:a4:cb:
d5:e9:18:c3:73:2d:2b:ef:db:b4:32:d2:c3:9f:5b:83:22:56:
1a:58:0c:3d:a7:ae:8d:87:6d:41:e2:ad:bf:8c:6f:ee:68:b3:
e4:81:84:f5:a3:e8:25:27:ab:e3:dd:95:6b:c9:72:7f:ac:f9:
b2:d6:ce:5a:dc:a9:99:fa:2e:fe:db:13:98:f0:06:3d:af:ac:
1c:2a:8c:d1:c1:7d:d4:ca:53:1e:81:e3:93:3c:34:d3:bd:31:
6d:6c:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 20:12:04 2026 by rpki-client