
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa
File: 82635c9f-468b-3813-b9e9-4893232f7cc6.roa (raw, json)
Hash identifier: 19B+WsrMeIsKlYAcgE8favLuwDrXoDnSahzjF2MkziU=
Subject key identifier: 0B:B8:D9:54:47:CD:39:6A:06:80:18:D4:47:80:14:D4:E9:5E:E4:A2
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584E6F3A3EA64B3BF98BEC3F5D48
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 202
IP address blocks: 20.148.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3a:3e:a6:4b:3b:f9:8b:ec:3f:5d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=d804119d-3a52-4205-83aa-5a2281b31179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:86:37:83:02:ed:51:1c:a0:82:38:26:d4:
30:e2:2c:5b:9b:5a:08:e5:98:84:2e:9d:73:dc:cc:
a3:c2:0a:99:00:be:e8:79:76:27:4a:ba:68:4f:61:
0a:f1:1d:e3:bf:7e:d7:e5:33:9f:10:e9:1b:11:57:
a6:83:64:0b:a2:52:fd:78:bb:22:2c:b5:51:5c:f2:
19:96:48:13:ae:a7:92:b8:14:a0:8c:3a:a5:5c:d1:
34:f8:2d:2c:c8:e7:96:ac:0f:39:4a:b4:29:67:e6:
e5:c4:7b:15:09:72:9f:54:2c:c2:ca:30:91:ce:0d:
92:f4:3b:87:0b:35:24:45:b5:2e:9c:19:1e:4d:d1:
41:bf:67:f0:f7:18:77:c3:64:78:99:2f:8f:8a:3b:
dc:b0:3c:6e:1e:95:1b:9a:fd:c2:8d:55:d9:ba:31:
36:1b:71:46:6e:82:2b:4a:19:a6:b1:11:bb:76:e8:
7e:75:a8:8d:b6:7d:d5:23:93:73:f5:79:19:f5:da:
e3:07:25:bb:b2:65:87:8b:80:d7:d8:2e:f1:bd:9d:
7e:e7:3e:53:a7:63:01:15:ce:26:f6:c5:0d:4a:74:
dc:d9:6e:60:73:a2:fc:4b:4b:2e:10:b7:ba:63:ec:
13:ab:32:b9:d2:9f:44:66:4c:86:31:bc:ed:82:a4:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B8:D9:54:47:CD:39:6A:06:80:18:D4:47:80:14:D4:E9:5E:E4:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/82635c9f-468b-3813-b9e9-4893232f7cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:4d:67:96:5b:fd:9c:f8:9c:4e:ea:77:6d:e9:b5:0e:03:09:
70:be:4d:69:e6:39:16:00:d5:78:59:9e:a6:f4:26:96:18:7e:
c8:e1:42:7b:79:1a:2c:57:21:89:01:e4:c0:8a:94:d2:17:c6:
41:41:54:2e:73:29:33:c0:2f:85:ab:48:b3:4c:79:98:8e:b9:
37:06:c1:f6:8b:d5:26:df:7f:10:3e:57:9b:fd:72:4a:eb:ed:
b2:65:2f:c9:a4:2a:3c:dc:2c:f8:eb:eb:c8:a1:0e:bd:0e:89:
fc:f8:74:4f:58:87:eb:e0:0c:cf:de:13:f1:3e:e2:8a:67:27:
19:30:c1:74:b0:e6:94:95:c9:e9:e5:2c:4a:e6:38:69:ae:df:
dd:b0:0f:82:a2:1d:e0:a6:44:b6:3d:84:f5:eb:22:69:76:a9:
82:3d:c9:db:2a:d5:28:a4:26:05:1e:85:fd:bd:5f:8e:0e:00:
d6:83:26:88:86:cc:b1:bb:0b:fa:22:71:b6:04:a0:d6:d9:33:
29:aa:b2:a1:e5:a1:ea:3c:a3:b3:6c:9a:2a:af:ca:7c:b2:43:
83:66:c4:1d:22:f8:d1:27:1a:ab:71:7c:54:d1:98:7d:54:d3:
64:c0:fa:f1:c5:41:02:3c:54:c3:bd:68:ec:f7:f1:f0:38:cb:
3d:6d:30:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOj6mSzv5i+w/XUgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
ZDgwNDExOWQtM2E1Mi00MjA1LTgzYWEtNWEyMjgxYjMxMTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuOGN4MC7VEcoII4JtQw4ixbm1oI5ZiELp1z
3MyjwgqZAL7oeXYnSrpoT2EK8R3jv37X5TOfEOkbEVemg2QLolL9eLsiLLVRXPIZ
lkgTrqeSuBSgjDqlXNE0+C0syOeWrA85SrQpZ+blxHsVCXKfVCzCyjCRzg2S9DuH
CzUkRbUunBkeTdFBv2fw9xh3w2R4mS+PijvcsDxuHpUbmv3CjVXZujE2G3FGboIr
ShmmsRG7duh+daiNtn3VI5Nz9XkZ9drjByW7smWHi4DX2C7xvZ1+5z5Tp2MBFc4m
9sUNSnTc2W5gc6L8S0suELe6Y+wTqzK50p9EZkyGMbztgqRFFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAu42VRHzTlqBoAY1EeAFNTpXuSiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODI2MzVjOWYtNDY4Yi0z
ODEzLWI5ZTktNDg5MzIzMmY3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxNZ5Zb/Zz4nE7qd23ptQ4DCXC+TWnmORYA1XhZnqb0JpYYfsjhQnt5
GixXIYkB5MCKlNIXxkFBVC5zKTPAL4WrSLNMeZiOuTcGwfaL1SbffxA+V5v9ckrr
7bJlL8mkKjzcLPjr68ihDr0Oifz4dE9Yh+vgDM/eE/E+4opnJxkwwXSw5pSVyenl
LErmOGmu392wD4KiHeCmRLY9hPXrIml2qYI9ydsq1SikJgUehf29X44OANaDJoiG
zLG7C/oicbYEoNbZMymqsqHloeo8o7NsmiqvynyyQ4NmxB0i+NEnGqtxfFTRmH1U
02TA+vHFQQI8VMO9aOz38fA4yz1tMJk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:48:37 2026 by rpki-client