
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
File: eb471c00-32d7-3573-995f-88d34ebe19a9.roa (raw, json)
Hash identifier: WZ2YeOQ69shSGYMtGOuw197myXS4br5zWnAhepSnx2c=
Subject key identifier: A1:0A:32:3F:1D:17:11:BD:81:C6:B1:11:D1:1C:EF:FC:36:78:A6:BA
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DD625B901346E7D2102CCD100
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
Signing time: Fri 15 May 2026 01:00:24 +0000
ROA not before: Fri 15 May 2026 01:00:24 +0000
ROA not after: Thu 13 Aug 2026 01:00:24 +0000
asID: 203
IP address blocks: 20.137.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 10 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d6:25:b9:01:34:6e:7d:21:02:cc:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 15 01:00:24 2026 GMT
Not After : Aug 13 01:00:24 2026 GMT
Subject: CN=3cba0af8-3c0b-4a53-817f-4f62a1a49a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:16:ae:a3:23:56:a0:3f:62:b0:b6:13:c0:
1d:20:7e:95:4f:1f:0f:da:a8:99:c5:25:e9:42:a1:
a0:35:cb:d8:53:d3:c4:61:94:61:9f:7c:df:b4:fd:
bf:a0:42:b2:fa:3f:89:99:81:1c:d2:01:d3:69:ec:
63:83:a7:bb:d9:86:be:04:48:f6:fe:a3:ca:fd:8b:
2b:76:22:69:7b:6a:ff:e7:ed:9d:de:94:e2:5a:09:
e8:27:49:9a:02:a6:49:1d:75:d2:a9:14:b9:f6:6d:
19:cf:79:4c:51:62:72:0f:57:d7:47:65:8e:0c:6d:
24:af:83:b1:b8:07:4b:80:c8:51:51:5d:ac:c6:d9:
67:18:d0:ef:62:f6:29:2c:5d:35:25:2e:f8:92:a8:
c9:29:a1:23:06:e9:60:79:39:d5:02:d9:8f:2b:f9:
a3:52:cb:20:1f:3b:63:fc:40:62:3d:66:13:94:99:
3c:b2:5e:3e:2a:9c:7a:0e:fe:82:fc:c9:97:b4:a0:
83:f6:6f:f1:f3:ae:06:27:dd:9d:db:42:a8:0d:ba:
f7:4e:36:93:b6:e4:63:f4:e1:7b:d1:cf:d2:48:8f:
50:f4:65:da:99:00:f7:2a:9c:ba:81:ff:2d:37:a5:
d9:83:42:aa:7f:ab:6f:ef:51:5d:a3:9a:f2:7d:95:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:32:3F:1D:17:11:BD:81:C6:B1:11:D1:1C:EF:FC:36:78:A6:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:6b:6d:01:5f:ce:92:69:cf:df:97:90:f1:89:1a:80:23:95:
9a:e7:54:a1:80:fe:44:b0:30:42:bc:84:25:30:56:1f:3b:04:
a3:de:86:a2:23:b0:6d:04:ab:87:6e:1b:93:61:05:80:05:d0:
bb:40:29:3d:9e:b2:ae:72:26:6a:be:af:6a:92:5b:b7:65:70:
ef:aa:df:5b:37:bf:73:48:f1:b6:f6:ca:85:da:fc:77:ed:2a:
81:be:c0:63:97:1e:cc:28:fb:3f:42:10:71:12:b1:44:21:d9:
2f:75:53:dc:49:61:69:06:5d:ff:6e:5d:e3:eb:2d:62:46:e6:
b2:fc:46:ab:a2:47:8c:9f:2a:4c:69:41:99:51:bb:36:c3:4d:
d0:8a:6a:69:6b:4b:06:b5:3f:d4:85:a2:53:38:2c:b5:98:b1:
d7:04:c1:09:62:5e:d5:ce:c5:1e:9b:ee:34:cc:cb:9e:56:4d:
57:c8:96:53:86:56:9e:2f:25:27:4e:7c:b7:98:6e:fa:80:bb:
e4:35:35:cf:ca:52:5b:1c:db:ed:73:85:12:e0:cc:7a:15:4c:
0b:4b:81:6c:51:b2:a5:0b:21:96:60:ec:d1:de:05:d6:98:ec:
38:35:43:44:65:1c:8f:de:5c:f4:82:0d:53:e9:3e:9d:dc:fb:
50:df:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:57:03 2026 by rpki-client