
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa
File: 9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa (raw, json)
Hash identifier: r7iwe2hfqii37Bihb4yNoT4EW5WfTRUcvHCHSN40R4E=
Subject key identifier: 11:59:12:E9:73:97:FF:85:07:AB:CE:21:CC:E6:F4:0F:98:02:D4:C5
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DF4DB60174032EB2925DBE680
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 203
IP address blocks: 20.133.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 10 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:60:17:40:32:eb:29:25:db:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=1c58b266-bdd4-47b2-88e1-44c75684d20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:c2:93:40:81:86:1d:35:1b:63:7c:f0:2b:
f3:e3:52:59:4f:c6:4a:9f:bf:d6:57:93:1c:d0:ab:
bb:ed:58:1e:a1:cf:1a:fb:ef:a8:85:82:83:45:6f:
25:8d:c3:64:c3:08:82:65:40:00:15:62:6e:67:a1:
ce:5c:c8:4e:e1:30:02:7a:c4:c6:1f:1d:3c:46:eb:
f9:a3:17:23:29:65:b4:08:b5:77:ad:ab:10:7a:e7:
cf:31:8c:f9:87:bc:c7:cd:f4:a5:ef:65:08:bf:23:
99:4e:68:e0:2a:d5:99:25:8f:51:9b:65:55:22:68:
3e:06:cd:26:62:b3:ee:eb:dc:bd:41:c7:1a:4b:c9:
05:1e:dc:fd:9e:68:69:f4:7e:62:c0:83:66:f9:89:
32:45:d0:d4:0e:9a:3d:ed:58:a3:f7:96:96:46:91:
9c:f6:67:96:7d:00:ad:0e:a4:55:b8:d5:a9:aa:e2:
84:a1:f9:51:2e:4e:1c:17:8b:23:c9:3a:d2:4a:04:
c0:59:43:0f:f5:17:c0:d3:72:55:59:f0:39:3b:5e:
bb:4e:92:de:bf:65:2f:d4:0c:a3:75:d1:a5:08:05:
22:79:f6:e6:33:2b:80:5c:25:86:01:15:5b:ae:0b:
be:db:35:78:6e:79:c2:4f:54:c7:5a:b5:19:e7:68:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:12:E9:73:97:FF:85:07:AB:CE:21:CC:E6:F4:0F:98:02:D4:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9a67b0be-9b85-381f-8f8b-80f3a4b93bc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:07:f7:85:0a:4c:4d:62:bc:a8:50:d7:d8:54:9f:32:d0:e7:
fd:6e:ae:d8:64:c8:79:ca:1b:69:78:64:d8:df:4e:eb:2e:86:
ba:d6:fc:8d:e2:6f:9c:a0:1b:fb:fb:33:bd:a4:6f:a3:f1:a2:
c4:76:1f:a4:d3:84:b6:f7:2e:2a:1b:e0:90:cc:16:8a:ba:2b:
e9:65:b9:63:72:0b:e5:74:a7:cf:dc:06:c0:f9:12:e0:d5:9f:
9e:4a:d5:53:c5:34:c9:e3:42:94:e0:03:e0:95:2d:b4:49:12:
8e:04:db:8a:0e:c1:2a:a0:e6:f8:de:86:d4:33:8e:11:3d:85:
6a:57:22:99:97:7f:49:d1:b4:57:2d:be:5e:f2:8f:4e:9d:8c:
bb:87:4f:25:b9:77:17:51:1f:8a:de:83:1b:b0:ff:e5:20:58:
5c:c3:c7:17:ef:bd:2e:ac:70:07:51:13:dc:2e:0f:c7:dd:0b:
9e:68:52:8b:7d:5b:de:fa:96:29:d2:06:c8:90:33:9a:f5:77:
9e:5e:33:ec:f4:98:87:85:9f:d4:be:f0:16:0a:71:ee:0c:64:
1b:2a:f1:41:da:32:46:99:8e:3c:46:cb:80:0a:bb:0f:df:bc:
a1:a7:73:0b:50:89:76:82:61:52:94:79:f0:66:3c:df:e5:3d:
f0:b5:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:55:43 2026 by rpki-client