
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa
File: 7ec506b0-9799-3a53-982d-39afbe885b36.roa (raw, json)
Hash identifier: bIJIYyQ0KiZQXx2djQiV8qhHyMG0OWvX19hsaxetXH8=
Subject key identifier: D7:A5:DC:7D:88:1D:E3:A7:5E:71:EC:58:FA:25:48:77:83:E0:9A:8A
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584B98724195603F5B9B8AA06100
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 203
IP address blocks: 20.134.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:41:95:60:3f:5b:9b:8a:a0:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=c02d5f58-a548-4ba7-b372-21b768dbd270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:18:15:2e:f9:27:5e:df:2e:fe:ee:03:a1:ce:
ab:71:10:d9:e6:25:d4:fa:7d:72:0d:58:9a:a3:69:
e0:98:7b:e3:70:89:81:93:29:2e:ef:ad:3e:48:91:
4c:46:0c:94:a7:59:ec:4b:9f:92:c3:79:bc:34:5e:
64:4a:9f:16:f4:c2:9f:9a:a1:d7:bd:42:f6:35:f5:
aa:ae:e9:a9:da:00:9a:94:0b:72:b3:1c:a5:e3:95:
f5:1e:b7:4d:8c:b2:71:15:63:89:ce:ef:28:9c:0c:
22:58:97:6a:91:e3:12:64:00:2e:5a:0e:90:a0:9b:
3d:2e:ec:29:31:f8:1a:a4:c6:32:18:cc:f4:53:48:
80:1f:e1:98:dc:54:a8:98:40:eb:17:a7:16:3e:09:
74:a1:dd:4f:a3:c3:07:87:2b:00:1f:7e:cf:67:fc:
48:5d:3b:4b:b0:1f:4f:aa:ae:ac:f4:15:e9:9f:c6:
2c:d1:dd:53:06:e4:6d:18:9d:4d:3d:1f:59:b3:2f:
34:23:b9:1f:be:95:5e:f9:45:6b:3f:eb:73:17:02:
95:be:f5:5c:47:66:b9:18:95:6e:f2:f6:11:d3:3e:
81:c0:e7:01:5a:07:50:1d:55:4e:c0:aa:25:49:e6:
da:bd:ac:58:de:da:09:b1:cc:0e:db:ff:40:0c:58:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:DC:7D:88:1D:E3:A7:5E:71:EC:58:FA:25:48:77:83:E0:9A:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7ec506b0-9799-3a53-982d-39afbe885b36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:83:9d:4c:5f:43:c7:01:bd:a4:19:bb:69:49:b1:9c:ca:9e:
88:a1:7b:7f:dc:4d:89:b0:0d:30:27:9a:27:e6:f1:56:bb:4e:
11:2e:21:b0:26:8f:1d:7f:d7:2e:ee:1e:a6:9e:51:89:a5:d4:
27:3b:ef:97:fb:e4:cc:29:5a:57:e6:db:0a:0d:af:1e:fc:48:
2f:49:e3:a2:a7:cf:f4:4f:9b:3c:28:3b:11:0f:c1:d3:06:44:
b6:ac:dc:fc:3d:a4:03:39:bf:29:80:cf:e2:49:5d:4d:f0:e8:
94:4a:0d:9d:10:52:94:20:20:fa:25:d7:f2:24:e5:8a:a6:57:
96:3a:37:74:c1:fe:ec:eb:c9:46:50:a8:d3:eb:af:e9:98:fc:
42:be:0b:e4:75:4f:d1:b2:ba:f4:18:a8:af:1c:f7:e9:4b:78:
c7:6f:4d:49:2e:ab:0a:94:93:bb:88:6c:92:62:83:75:18:ac:
a8:5d:38:23:36:95:2f:29:40:db:0e:df:27:88:3b:2d:71:ad:
98:a2:3b:74:c0:f7:f3:02:73:b6:d2:cf:5f:25:1b:77:25:8f:
05:1b:c3:25:76:b0:c1:05:cf:b8:f8:3d:bc:02:0d:64:bc:bb:
d7:3b:be:9e:a9:7d:24:ef:ce:a9:38:3b:da:3b:b2:09:67:87:
cf:31:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 13:04:31 2025 by rpki-client