
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa
File: e5598c62-5c7b-34dd-9120-6357004878bf.roa (raw, json)
Hash identifier: UyheutfH6mveC2T8bNI7pVpFDsXhoEAswQcSqulClfU=
Subject key identifier: 0E:0A:0A:57:C8:98:CB:18:BB:FD:28:AA:BD:41:E7:CE:B5:B9:3E:B6
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584BC53B0DBFB9CF1F02AD4CF480
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 3356
IP address blocks: 20.137.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:0d:bf:b9:cf:1f:02:ad:4c:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=68031252-1a6b-4d24-a3cc-95ffee11bd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:b3:dc:d6:c3:f0:8f:7f:ee:5c:ea:35:e3:
17:68:bb:f6:e3:d1:8d:c4:75:60:5f:9c:5e:94:8b:
e2:f7:6e:d2:3d:d9:3e:8e:c0:f2:fb:d8:2e:3a:3a:
74:cf:95:46:bf:f5:2e:80:f9:32:1a:bd:ac:ac:7a:
e3:a5:a2:49:20:1d:0c:90:ca:dd:7b:b4:c8:e8:8f:
d3:2a:01:ea:35:aa:f4:11:cd:63:97:b1:4e:4a:1e:
e0:07:a3:e2:cc:73:a1:93:24:97:45:15:6d:2d:2a:
ac:8f:00:a7:cf:cf:fb:90:ac:8b:80:4d:fa:b5:a1:
15:0a:0e:c5:7d:cf:d0:80:29:99:0d:13:b6:07:46:
39:b4:fb:9b:26:58:b1:d9:e8:5b:18:55:f3:8a:c9:
17:81:91:c6:31:7d:cb:01:7b:58:6a:df:7d:17:3b:
fa:09:8b:91:f6:9c:61:0b:58:55:d9:e5:42:2d:57:
13:86:99:b4:d6:8f:2a:04:ed:fa:30:23:65:e0:d0:
20:d7:d2:28:d3:4b:15:35:5f:f0:80:9b:58:3a:50:
12:6b:f7:76:31:9d:41:cc:2e:4f:c4:5e:f2:17:48:
da:04:a7:9a:f1:55:63:67:cf:09:c9:4b:3d:13:0a:
a1:f4:08:39:73:d8:f4:5c:c2:4b:1d:ac:91:5f:66:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:0A:57:C8:98:CB:18:BB:FD:28:AA:BD:41:E7:CE:B5:B9:3E:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:40:26:69:58:18:25:47:3c:66:4a:35:c3:3a:b2:fa:cb:2c:
9b:16:36:c2:1b:36:3f:6e:0e:a9:3d:87:d2:58:e6:11:2f:66:
41:eb:69:fa:fc:5c:d5:3b:5f:27:e7:27:1e:1c:0c:07:a0:cc:
e3:da:3e:a5:b0:88:04:c6:60:fe:6e:d2:50:3e:54:db:3a:02:
f2:0c:5e:6f:54:1d:11:de:b9:b5:36:99:de:ea:5b:6d:9b:05:
c9:83:a6:54:39:ff:9b:1d:72:d7:0d:cb:8a:18:b5:1c:78:04:
ca:09:31:b7:15:90:b7:8a:74:77:41:95:2e:9b:11:8f:2e:56:
09:cd:13:7a:04:d6:7e:e8:11:2a:c2:ae:8e:85:bd:50:bb:60:
53:12:6b:7e:a0:3e:39:be:8c:2a:10:be:24:89:09:8b:b6:3d:
e6:83:20:df:f1:6e:92:ff:4f:58:cf:c9:26:99:af:9b:49:d3:
49:ef:5b:12:fa:a7:f3:a2:4b:45:9c:df:ea:3a:66:cf:4a:81:
03:9e:26:dd:ee:9f:5a:ba:0b:0d:54:92:7d:5e:66:34:2d:eb:
a0:8e:c1:60:90:59:16:98:20:32:3c:a7:3d:42:c5:02:b0:7d:
6e:de:f7:c1:72:d2:71:7f:7a:04:8a:00:77:7b:04:35:68:e0:
9f:34:f5:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOw2/uc8fAq1M9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjgwMzEyNTItMWE2Yi00ZDI0LWEzY2MtOTVmZmVlMTFiZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dez3NbD8I9/7lzqNeMXaLv249GNxHVgX5xe
lIvi927SPdk+jsDy+9guOjp0z5VGv/UugPkyGr2srHrjpaJJIB0MkMrde7TI6I/T
KgHqNar0Ec1jl7FOSh7gB6PizHOhkySXRRVtLSqsjwCnz8/7kKyLgE36taEVCg7F
fc/QgCmZDRO2B0Y5tPubJlix2ehbGFXziskXgZHGMX3LAXtYat99Fzv6CYuR9pxh
C1hV2eVCLVcThpm01o8qBO36MCNl4NAg19Io00sVNV/wgJtYOlASa/d2MZ1BzC5P
xF7yF0jaBKea8VVjZ88JyUs9Ewqh9Ag5c9j0XMJLHayRX2YpQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4KClfImMsYu/0oqr1B5861uT62MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTU1OThjNjItNWM3Yi0z
NGRkLTkxMjAtNjM1NzAwNDg3OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1AJmlYGCVHPGZKNcM6svrLLJsWNsIbNj9uDqk9h9JY5hEvZkHrafr8
XNU7XyfnJx4cDAegzOPaPqWwiATGYP5u0lA+VNs6AvIMXm9UHRHeubU2md7qW22b
BcmDplQ5/5sdctcNy4oYtRx4BMoJMbcVkLeKdHdBlS6bEY8uVgnNE3oE1n7oESrC
ro6FvVC7YFMSa36gPjm+jCoQviSJCYu2PeaDIN/xbpL/T1jPySaZr5tJ00nvWxL6
p/OiS0Wc3+o6Zs9KgQOeJt3un1q6Cw1Ukn1eZjQt66COwWCQWRaYIDI8pz1CxQKw
fW7e98Fy0nF/egSKAHd7BDVo4J809UY=
-----END CERTIFICATE-----
Generated at Mon Nov 17 01:15:29 2025 by rpki-client