
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa
File: bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa (raw, json)
Hash identifier: aPiUTFC7nM0rrXX8GYZkYG4pba7yAReV9qUBNQT5I90=
Subject key identifier: 08:7D:84:EA:87:5D:3D:CB:8E:59:B2:71:47:A4:DA:04:63:C9:A4:4D
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584E18AEDC9201496B568DC212C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 203
IP address blocks: 20.138.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 10 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:ae:dc:92:01:49:6b:56:8d:c2:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=b2077698-27b3-4939-9a71-af070e3baf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:dd:4e:e5:91:5e:e9:06:28:f3:dd:87:dc:
1e:6c:c0:e3:e3:52:22:96:f5:ab:51:e5:e6:b6:a3:
72:34:98:fa:5c:8c:a0:4a:72:dd:e1:77:4f:73:ef:
2b:bb:f5:24:26:07:6e:63:ae:2a:7d:02:c2:cb:b5:
5d:9a:25:7c:c3:20:9e:20:82:59:45:89:29:27:af:
b7:91:71:6e:13:32:d9:ba:c1:18:9f:28:f1:6b:f8:
af:a1:c6:6e:d0:ec:9a:2a:f3:d0:f1:bd:eb:8a:0b:
77:4b:a8:43:8f:06:fc:d1:01:ff:3a:61:9e:66:8e:
77:30:8f:c9:c0:c7:0c:31:58:e2:26:b8:23:65:92:
67:41:48:51:ff:e1:fc:d1:89:9c:49:af:73:30:81:
ab:e1:ac:f0:49:11:cf:c7:fe:72:43:93:c2:c1:aa:
50:fd:ed:77:23:6b:76:a2:42:51:13:f3:9e:dc:6a:
ec:66:95:2e:ed:24:cc:66:bf:7f:c5:25:61:50:44:
0d:04:f5:fb:49:1f:21:d5:30:0f:d7:1a:48:8a:90:
d3:5d:14:4f:0b:48:19:dd:89:03:9c:37:5d:9a:8d:
ed:b6:d7:1d:77:25:83:f6:4c:46:b6:b9:d7:95:b7:
8a:47:3b:c3:ee:50:9a:70:6a:6d:1b:aa:9d:7a:45:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:84:EA:87:5D:3D:CB:8E:59:B2:71:47:A4:DA:04:63:C9:A4:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bcd08f7d-8004-327b-92d3-87bc7cfb46c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:c7:f4:a0:69:0a:69:73:dc:e1:12:8a:71:14:0b:2f:e2:c8:
ad:99:94:87:a7:d4:85:a8:36:d1:c2:49:df:1e:9e:3d:09:6a:
c7:5c:93:72:45:c1:7b:ab:8d:83:35:a9:3b:37:9b:42:d1:68:
11:ff:bc:1a:b8:00:a3:eb:f1:c1:05:35:4c:8e:ed:f6:5d:ef:
d1:0f:8f:10:d0:5c:33:a7:9d:f4:17:73:98:7c:f5:a9:d9:0f:
cd:0c:3d:ca:71:aa:07:3b:74:4a:ac:d8:65:8e:c5:47:fb:2b:
08:46:da:dd:ed:d8:d9:7f:0c:67:b0:1d:b1:c9:7f:0a:ff:db:
2b:ff:17:08:11:ef:0d:b1:20:38:cd:b6:4d:33:00:c7:cf:b1:
b4:ed:37:54:b5:ca:f6:11:d9:2f:ea:de:0f:16:0d:8a:e9:7e:
e6:63:2f:35:0f:bb:3a:bd:e6:97:5f:3e:12:bb:3d:58:f3:3a:
64:d9:85:ed:61:7c:f2:a0:99:74:89:4d:68:2c:1b:c3:5d:c2:
38:8f:43:c8:b5:85:c4:47:84:17:80:7e:33:01:b6:a4:d2:ac:
fd:3d:6f:b0:be:7b:10:21:b2:b3:78:4d:36:c9:21:a8:1e:90:
20:0f:c3:d6:dc:e8:54:9d:81:70:b7:20:e6:13:1e:55:43:27:
c7:c7:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:55:57 2026 by rpki-client