
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa
File: b012200c-09b0-31d7-a7d9-1df154b56fae.roa (raw, json)
Hash identifier: IGISA7LwgXzk4mNf2Dl64l6ChLY6cmGzujpbbh23rRs=
Subject key identifier: 60:14:39:33:22:D7:9C:AD:82:87:61:FC:4E:AC:46:2F:F8:E8:78:07
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EDC9202923D1D57AA43BF7C00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 202
IP address blocks: 20.134.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 10 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:02:92:3d:1d:57:aa:43:bf:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=9aa2e1af-fe25-4805-950d-c901eb601931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:e2:18:a1:fd:24:10:54:ac:10:51:5a:95:
58:92:30:22:79:2f:1e:42:e6:56:d7:e8:56:7b:00:
a5:3b:cc:25:d9:ae:19:36:f8:f6:fd:cf:11:76:a5:
84:69:c6:ce:10:b1:70:83:fe:db:88:4c:e6:28:02:
0d:0b:0d:53:04:3b:ec:07:76:f0:bc:38:0b:8d:c8:
42:0e:2f:f8:04:dc:d4:76:a3:9b:7b:29:a7:28:bf:
92:78:af:27:66:83:76:a9:47:3d:65:1c:6e:52:74:
b2:fd:da:8a:d6:c9:b8:f4:76:c0:31:d5:7c:4c:3b:
9f:52:cd:31:8c:85:1d:8b:0a:a2:78:c6:96:18:04:
5b:71:23:bf:93:18:ea:d3:2b:8f:e2:e8:1d:d8:3f:
2e:ce:52:bd:22:a5:08:0b:7e:eb:77:a6:c1:11:62:
0e:f8:4d:e9:60:63:35:e1:9c:84:64:54:6f:c9:a1:
a9:39:91:41:b0:67:0d:08:00:8c:ff:95:9a:f4:e7:
75:e7:f9:11:84:fb:f8:10:6e:ba:d4:f3:e1:e4:75:
76:d9:04:63:d4:b5:73:7e:ac:14:32:1c:6e:e9:e0:
82:2f:e6:5c:21:43:9e:08:6b:c8:da:65:85:bf:fd:
5f:0c:3d:3f:2a:f1:b8:2b:d0:48:b9:a7:6c:01:c1:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:39:33:22:D7:9C:AD:82:87:61:FC:4E:AC:46:2F:F8:E8:78:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b012200c-09b0-31d7-a7d9-1df154b56fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f5:af:67:e3:d4:96:63:56:75:1f:7a:fd:2c:2d:89:79:c2:
d8:a5:0f:32:9c:3c:3d:8a:96:8e:2d:1d:6d:98:f0:0d:13:41:
44:2d:62:34:0a:5b:82:6b:70:58:c4:f4:26:f0:2a:be:cc:d0:
04:b2:60:40:c2:ad:9b:db:74:a5:08:a6:30:1d:6f:cb:e7:01:
4a:d0:1b:ee:50:0a:47:d4:bc:ec:bb:91:09:05:b0:9a:aa:f5:
2e:7e:b3:b5:13:e2:08:ec:f7:d3:05:b2:ae:0e:3b:d7:4a:69:
53:65:6b:d5:32:aa:d0:90:a9:67:4e:72:a5:55:e4:b0:2b:c5:
3e:33:70:71:ea:92:22:fb:41:7a:91:e0:a8:4b:ba:eb:e7:74:
39:09:62:d9:37:c8:67:54:a2:e0:49:6e:ae:50:50:47:1c:eb:
36:42:78:e0:cc:b1:07:70:5c:7b:15:42:6b:ef:ed:e5:0f:a3:
66:bd:9a:88:c6:c2:ed:25:59:a9:6b:40:f8:d0:87:62:26:f8:
e9:49:cb:31:17:93:1d:46:0a:96:6e:df:aa:02:2f:e9:6b:9a:
cc:b7:d0:ac:14:53:90:12:6f:63:72:10:fe:f5:c6:f0:70:c6:
ad:5b:6b:39:04:1a:77:bd:b1:e7:0d:50:e2:aa:d3:fb:e7:ed:
df:e3:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:43:22 2026 by rpki-client