
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa
File: e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa (raw, json)
Hash identifier: Nrsr/ll0pubtE2nvwWQgNnfo0lbdlNeMoYM7nVbwlYQ=
Subject key identifier: E7:4C:CC:B0:23:F5:74:49:DE:87:93:69:C7:19:28:60:06:B3:6E:BB
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584B95A79E7002810004643C9A00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 3360
IP address blocks: 20.134.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Oct 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:9e:70:02:81:00:04:64:3c:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=1fdb1cd2-ca3f-447c-acae-480cf1b1f511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:69:d7:9a:1b:8c:dc:d5:87:3c:01:f9:2e:
fb:57:66:b3:3f:a1:3b:44:a8:23:e1:51:76:a2:ca:
fa:e0:36:a3:83:9d:e7:3e:41:9a:17:dc:6b:d5:05:
0a:b4:69:da:bc:ed:2f:be:5e:04:4f:a5:63:4f:0a:
1b:40:09:4a:4a:5b:9d:98:0b:c8:36:5c:ee:5d:76:
30:77:c6:2c:c8:3d:44:fe:d3:dc:80:d5:ca:29:90:
76:65:b6:3d:92:78:3d:5a:95:94:67:0a:b3:55:c6:
a5:bf:11:ab:f8:09:4c:ec:8e:eb:e3:c4:9c:5a:34:
3a:7c:1c:f6:b9:f1:84:cf:1d:83:37:ae:d5:57:6c:
98:dc:7a:76:49:70:74:e1:65:7c:30:c7:db:f7:31:
62:02:cf:d2:e8:e4:0a:92:68:bc:23:14:ba:ca:fa:
c4:64:e9:20:f0:4d:8e:83:c0:07:9a:e4:bb:ff:a1:
39:b5:75:0a:c8:b7:47:b3:f4:78:5e:63:48:72:73:
da:d8:6a:e9:f4:ed:a5:5a:36:1e:22:7a:c1:6c:f7:
d6:1b:f3:d2:c2:12:23:da:03:18:02:6f:74:61:bf:
a8:c2:61:91:37:d3:10:f9:c3:6d:21:be:34:1c:10:
b7:0b:33:c9:c7:13:12:2c:28:a6:95:78:4c:d6:cb:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4C:CC:B0:23:F5:74:49:DE:87:93:69:C7:19:28:60:06:B3:6E:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e4ddcd8f-6399-36d3-8ec6-4238b7737ef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:0b:a0:24:97:9a:8a:ed:54:a0:3a:da:8e:8a:cc:17:07:6b:
8f:21:07:bf:ce:6a:64:5e:c1:3f:a7:48:65:c9:e8:38:ae:ff:
b4:c8:95:34:4d:57:a6:51:65:c7:d0:5b:05:47:15:7e:91:87:
ab:9b:40:e9:a7:ee:1e:45:34:24:7e:9a:75:4b:82:69:70:a4:
a2:19:a2:e8:6f:fe:d0:36:31:96:c6:ff:49:22:fd:28:59:1f:
71:a6:a3:0a:f4:89:84:a5:b3:9f:78:10:3d:ba:49:d6:91:65:
5f:32:4c:3a:77:ba:5e:6d:89:06:73:42:45:34:97:15:eb:c0:
46:12:f2:c6:b0:8c:1c:0c:fb:89:ec:c1:2c:6e:5a:91:63:ef:
cc:7f:f4:e0:9b:3f:28:05:9b:e1:39:54:f9:b5:d5:46:91:c1:
73:bc:fc:9f:ce:f5:75:b1:90:43:57:c5:09:29:a8:88:39:be:
68:1e:e5:f4:0f:dc:cd:85:c5:a5:02:54:ed:7d:35:94:c3:b5:
d9:de:c4:22:6d:9e:22:34:0a:0b:64:d2:f9:15:7c:5a:d4:d2:
35:fa:ae:73:ce:e0:e4:07:c0:16:60:6c:e7:b3:5e:a8:91:b4:
26:35:f2:2f:01:ba:dc:9e:7a:e7:0d:38:c3:76:59:26:52:57:
fc:52:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:52:05 2025 by rpki-client