
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa
File: 9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa (raw, json)
Hash identifier: 6MnIxusgVDfTT9TMOXxgDg1mieY+S9DAUx1RM3QTB2g=
Subject key identifier: 03:2D:C9:A3:88:04:05:CB:28:76:B9:91:F2:70:96:C0:0D:09:DA:B6
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584CAE572FC8D9D860C611F55A80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 3356
IP address blocks: 20.137.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:2f:c8:d9:d8:60:c6:11:f5:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=00db5f3d-a678-4516-9a36-38cb1bf9902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:05:ee:a3:ae:42:e9:75:7d:4e:e4:79:e6:
c0:d7:40:73:07:f6:82:8a:f1:6f:87:24:79:36:0e:
f4:a2:98:11:34:eb:6b:bf:cb:3a:ea:c0:26:d9:ba:
ed:3c:de:b0:8c:29:81:1a:a8:92:0a:fd:56:90:7b:
7b:8d:c1:fd:9e:cd:a2:e8:23:9e:38:fb:51:af:54:
41:28:9c:98:96:32:5f:83:f4:3b:88:b1:27:dc:e6:
fa:54:ea:ea:94:c7:14:2e:6f:e1:4d:23:0f:ad:80:
78:48:73:db:66:3a:50:97:ce:bb:78:39:fa:7a:ad:
40:98:fc:ae:ed:b1:e9:97:eb:05:d8:5c:52:f0:ba:
9b:2e:18:b3:8b:2b:a2:77:54:8f:95:11:24:d7:57:
21:97:06:1b:e2:cf:8a:b5:2a:8b:bf:be:d5:d5:44:
69:9a:43:e5:93:81:71:09:55:53:42:09:72:4f:16:
1a:00:7f:d3:30:e1:00:b9:3b:c7:27:c1:26:1d:76:
00:9b:50:ad:a2:79:0f:b7:2e:29:00:ac:64:cd:2e:
b6:6c:20:46:bf:c0:84:e1:72:8e:ff:b6:25:37:8b:
52:fa:17:1b:22:a4:fe:45:38:e4:e2:eb:d9:61:9a:
9d:b7:43:0e:a1:5e:e4:b5:fe:32:77:10:a4:60:64:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:C9:A3:88:04:05:CB:28:76:B9:91:F2:70:96:C0:0D:09:DA:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:fc:50:a7:a2:98:b0:11:bf:55:14:71:87:ff:de:f4:b1:a9:
26:2f:6d:6d:47:1c:dc:b1:16:3b:15:ec:d7:26:4a:a3:02:56:
d8:89:a9:4a:bf:2f:ab:8d:28:8e:75:63:ef:3a:20:6d:d4:ee:
75:06:a5:de:43:e1:90:fd:7d:2a:e8:c0:8b:b3:2f:5f:d8:e5:
6d:c7:cb:da:0f:a0:5d:f9:5c:be:ad:62:34:6f:ca:cb:29:4e:
75:66:b3:75:07:ed:73:af:07:54:6a:cd:d6:cc:5c:5e:51:d7:
f6:d6:1e:63:14:a1:93:75:f7:d7:21:b3:20:46:13:9c:7b:b1:
95:36:39:c2:e0:ce:de:e9:13:55:32:a9:55:43:84:42:82:83:
12:de:f1:e7:a5:d0:ad:6b:7b:96:8c:da:b2:1b:b2:38:aa:3e:
43:95:73:f9:37:98:84:fa:00:1f:24:3c:c5:7e:2c:cd:e9:10:
20:b1:07:fa:07:95:c0:86:6d:e8:96:60:7c:26:5a:d1:91:e1:
f3:83:2b:0b:d9:81:d0:ed:38:c2:b2:20:5e:c6:4c:af:cc:00:
2f:08:3c:36:ed:9e:db:07:14:58:4d:80:d7:a8:4d:10:38:03:
5d:4c:be:04:ff:1b:0d:f7:e6:ec:91:9f:d7:2c:f5:a1:aa:21:
25:af:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 22:58:03 2026 by rpki-client