
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa
File: b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa (raw, json)
Hash identifier: Yuk3/OgJAbhrgwxeCiAj2qUU3uHWvhj2BOOydzmfcP8=
Subject key identifier: D3:B4:A3:3F:77:99:08:11:B5:BE:E4:DF:D3:1C:00:89:DD:F1:E5:00
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EBB11B423D30CFEFACEA2C100
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 3356
IP address blocks: 20.138.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:b4:23:d3:0c:fe:fa:ce:a2:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=5a492a7e-40ff-4542-8d38-04d90088e94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:71:37:3d:47:1d:7a:f9:c2:6b:e9:57:da:c9:
99:7b:e5:f9:d9:46:2a:29:e3:3a:a3:5c:66:23:0e:
19:84:a5:29:6e:46:8e:18:44:94:a3:44:c1:6b:99:
28:27:5c:8f:24:9d:98:32:7f:0d:ac:c5:ea:a8:00:
cf:ea:a5:3e:34:cb:f1:f9:a3:42:05:d7:fb:e8:e0:
0c:17:f7:eb:2b:40:d4:70:e2:91:9b:9c:bc:0c:d4:
73:f2:e4:ea:a5:1c:2d:52:da:90:7e:2b:aa:d4:de:
bd:38:93:26:19:32:76:0a:a0:8c:cd:61:c6:34:7c:
60:08:63:ee:77:a5:7c:69:46:6c:89:0c:e1:39:41:
14:e4:c2:00:31:f9:78:e9:12:5b:ce:6a:3b:6c:06:
93:63:63:f2:c4:06:96:93:7c:e6:78:ad:fa:65:81:
24:31:4e:e9:46:18:e0:ac:7b:2a:64:c3:07:5c:d7:
06:24:93:a0:c2:a5:64:05:6b:93:1f:e0:8b:1e:4b:
c9:03:7d:e6:7f:00:cd:a0:91:ae:4e:3a:d7:00:b3:
02:ed:ce:01:cf:12:09:47:93:e5:9e:ba:43:77:a2:
4a:50:dc:f3:cd:e0:4c:66:c3:c5:f2:97:0a:bd:aa:
84:f4:bc:5d:02:30:b6:29:d6:54:c3:cd:75:b7:97:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:A3:3F:77:99:08:11:B5:BE:E4:DF:D3:1C:00:89:DD:F1:E5:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9bfc30c-4d25-3bd0-9324-cccbbde16203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:ac:5a:f2:e2:02:9a:23:84:1f:aa:26:08:1b:bb:bd:56:e8:
63:4d:31:3d:24:f1:78:4c:2a:4e:4c:07:08:b9:aa:f3:9f:94:
a3:92:20:be:ed:8e:2b:0d:15:f1:eb:1d:7f:75:50:b7:b9:ab:
7a:65:fd:67:5c:06:38:ad:b1:de:44:15:62:7d:d4:88:00:0b:
fc:76:86:55:ab:4f:57:e7:c5:2f:e1:a0:17:b6:c1:6a:8f:15:
08:4e:c2:4c:84:0e:c2:6b:79:e7:ef:67:4a:3b:44:87:a4:a9:
c9:3e:78:86:3a:71:c0:12:e7:6b:23:eb:ef:94:e3:2d:04:ee:
de:24:1b:4c:54:f8:cb:b1:a5:a7:e2:1c:05:6b:7e:ab:17:2b:
aa:b5:85:fb:77:0d:65:5d:95:8d:6b:21:6e:f7:84:3b:42:29:
b2:6f:ef:72:d2:d8:74:14:c6:dc:5e:77:15:41:3f:f7:e8:d4:
ea:4d:45:9c:bc:26:fa:fc:69:ec:2a:3e:6f:99:ef:e8:4c:e2:
c0:48:4f:77:3c:ca:95:36:17:79:06:d3:78:b0:03:5b:fa:ba:
aa:d7:ea:6e:63:90:f2:dc:e1:4e:cc:07:8c:38:30:62:68:6e:
82:f9:a3:54:98:c7:3f:4f:81:a6:00:53:a2:11:b9:cf:d5:76:
41:40:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:31 2026 by rpki-client