
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
File: 74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json)
Hash identifier: JK30aTMLITx7g1ycPSZZXweLxtJoSj94jgTe9rX4Gc4=
Subject key identifier: 38:1C:D9:2C:9D:5D:4A:68:30:66:FD:C3:80:D9:49:18:5F:EF:96:B3
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EDC92031684408F28E828B980
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 203
IP address blocks: 20.139.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:03:16:84:40:8f:28:e8:28:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=5399b37f-73ff-4793-b4cf-7efcce1e3071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:d6:48:6c:55:44:fa:ba:48:7f:0c:a8:52:
3b:49:fa:02:c3:3a:a7:f3:11:2a:f1:a1:1a:0c:b4:
6b:11:6f:86:80:82:9e:77:c9:a1:86:2a:99:1a:18:
b6:b3:59:0b:fe:b8:1e:3f:ec:a0:dd:2c:0f:7e:70:
b8:92:cc:04:b4:dd:bb:b4:1d:7b:af:d5:c0:80:d9:
1b:99:46:4b:5c:12:02:9b:9a:2b:cb:09:95:40:e8:
c3:01:6c:91:34:8d:2e:02:9a:fe:40:36:28:93:4c:
70:53:27:7e:d9:c6:46:a6:a2:b9:ed:ef:dc:85:7e:
5f:b0:bd:31:ef:88:03:98:50:0c:cd:30:f1:96:8d:
12:e8:fa:4c:16:48:df:24:ec:36:9e:cb:85:86:f3:
a1:c2:d3:3a:a2:53:c1:3e:7b:14:9b:95:93:da:65:
76:8f:e5:7a:04:74:1b:f2:e1:62:95:e1:90:70:0c:
9a:5d:e2:33:a1:b4:9d:7b:6b:b0:9c:f4:22:47:5d:
69:41:e1:5e:53:fe:4c:f4:43:61:01:72:a0:a6:eb:
f3:80:8e:b7:14:d5:b4:3b:27:98:e9:bf:12:30:6d:
82:c2:cd:da:8d:aa:b4:5e:c2:45:bd:97:2c:12:f6:
8e:43:ee:0e:c0:13:af:8d:93:c3:89:3d:0a:98:02:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1C:D9:2C:9D:5D:4A:68:30:66:FD:C3:80:D9:49:18:5F:EF:96:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:92:4f:6c:a6:2a:f9:22:56:8b:12:0b:96:5e:f6:0c:55:d4:
28:35:b8:6d:0a:fa:7c:ca:c0:9f:1c:76:e4:00:2c:81:ec:c2:
d3:de:a4:9c:a1:e4:5e:a3:de:c5:00:9d:73:8e:e7:41:99:0a:
ca:6d:50:49:2e:b8:76:55:77:3d:d2:60:da:0c:b8:ca:3e:8c:
bd:c5:e9:21:93:c6:5b:ee:81:ce:a5:0f:fa:ba:9c:30:13:54:
08:aa:69:cc:38:ce:92:4a:dd:8e:24:50:23:3b:ed:a2:38:c2:
fd:bb:09:c4:6e:ea:5e:46:6a:ab:17:06:03:4e:1f:81:f5:e2:
8d:26:24:da:0c:23:83:72:58:9d:05:9e:03:23:a5:20:c6:c2:
5f:9d:ff:57:8e:4e:ab:19:07:ec:68:d2:c1:c7:3c:88:af:d0:
4f:e8:9c:b6:b8:e2:25:2b:f8:0b:09:15:d1:f6:04:02:6c:d4:
7a:09:a2:c4:5e:ca:92:33:8f:fc:b7:e9:5a:c3:41:98:cf:77:
ad:33:e0:dc:42:ca:45:c6:b7:3e:c7:0c:f0:c7:cc:4f:c5:a9:
9f:9d:3a:4c:c7:ae:00:b8:1f:1e:3c:aa:05:90:8b:11:57:24:
76:9f:c6:e6:45:6f:47:53:01:e0:d4:bb:c6:5c:61:f6:82:45:
87:3b:b7:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgMWhECPKOgouYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NTM5OWIzN2YtNzNmZi00NzkzLWI0Y2YtN2VmY2NlMWUzMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8vWSGxVRPq6SH8MqFI7SfoCwzqn8xEq8aEa
DLRrEW+GgIKed8mhhiqZGhi2s1kL/rgeP+yg3SwPfnC4kswEtN27tB17r9XAgNkb
mUZLXBICm5orywmVQOjDAWyRNI0uApr+QDYok0xwUyd+2cZGpqK57e/chX5fsL0x
74gDmFAMzTDxlo0S6PpMFkjfJOw2nsuFhvOhwtM6olPBPnsUm5WT2mV2j+V6BHQb
8uFileGQcAyaXeIzobSde2uwnPQiR11pQeFeU/5M9ENhAXKgpuvzgI63FNW0OyeY
6b8SMG2Cws3ajaq0XsJFvZcsEvaOQ+4OwBOvjZPDiT0KmAIw4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgc2SydXUpoMGb9w4DZSRhf75azMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z
NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuST2ymKvkiVosSC5Ze9gxV1Cg1uG0K+nzKwJ8cduQALIHswtPepJyh
5F6j3sUAnXOO50GZCsptUEkuuHZVdz3SYNoMuMo+jL3F6SGTxlvugc6lD/q6nDAT
VAiqacw4zpJK3Y4kUCM77aI4wv27CcRu6l5GaqsXBgNOH4H14o0mJNoMI4NyWJ0F
ngMjpSDGwl+d/1eOTqsZB+xo0sHHPIiv0E/onLa44iUr+AsJFdH2BAJs1HoJosRe
ypIzj/y36VrDQZjPd60z4NxCykXGtz7HDPDHzE/FqZ+dOkzHrgC4Hx48qgWQixFX
JHafxuZFb0dTAeDUu8ZcYfaCRYc7t5A=
-----END CERTIFICATE-----
Generated at Wed Sep 9 00:52:50 2026 by rpki-client