
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa
File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json)
Hash identifier: s3pN+pbz345wDMiBHcr1fdHp7uw/Wp3GQwa/E1nrnbI=
Subject key identifier: A9:10:EB:B2:47:EC:7E:87:1C:AB:87:C3:E9:65:54:D4:B0:BA:CE:44
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EBB11ABB7E40BED1BC522F340
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 3356
IP address blocks: 20.138.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:ab:b7:e4:0b:ed:1b:c5:22:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=ff72f18b-ac33-4d7b-827c-389f4f6a4182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:f1:f9:d5:b7:87:26:c0:07:17:34:94:e5:
ca:22:89:c6:16:ef:28:dc:f2:06:dd:61:b3:e0:c6:
ba:11:00:e8:53:b5:c3:f6:8a:20:ee:76:b8:7c:ba:
b5:2d:1a:e4:56:41:8f:84:32:2d:ad:d1:2b:a7:50:
f0:0e:c8:fb:24:f0:73:ee:25:48:34:2b:2c:97:34:
84:7d:71:5e:92:40:e6:c2:39:e9:8e:0d:07:f0:5b:
2c:fb:3b:59:01:50:a7:86:6d:eb:65:d1:32:25:cf:
44:64:dd:99:31:96:26:ce:85:5a:8c:c1:87:79:ab:
ba:5b:d7:a3:04:08:40:40:31:53:79:cd:e2:8d:78:
70:a6:93:1b:23:1f:84:58:71:3b:e0:34:ac:ae:7d:
7a:2f:08:27:69:72:ca:99:b6:66:9a:fe:6e:f5:86:
54:13:b6:04:00:30:d9:57:4e:fe:b3:a8:98:c8:a5:
03:b4:8b:6b:88:31:00:57:ab:76:67:36:92:f7:67:
fd:0a:f9:b1:63:75:52:9e:5f:72:b9:87:4c:e1:39:
2c:be:a2:48:6c:61:c8:08:28:6f:d5:87:22:83:f5:
c4:2b:b8:df:23:36:6c:69:fe:e7:7a:78:98:52:5f:
ed:e4:88:b0:1b:d8:21:bd:2b:fe:4b:7a:84:0f:23:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:10:EB:B2:47:EC:7E:87:1C:AB:87:C3:E9:65:54:D4:B0:BA:CE:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:81:a3:7e:45:83:7f:3c:db:d6:cc:a9:d9:c4:d7:ca:ec:37:
25:f3:3b:e8:66:b7:fa:31:7b:fd:9f:36:ae:59:48:d5:6c:d3:
4a:e0:92:e3:ba:00:2f:81:d6:9e:ff:24:86:2c:74:54:89:e0:
4b:53:94:ad:ab:db:cd:01:25:58:e3:a5:cd:08:ca:94:bc:5d:
04:d2:be:d1:39:7d:61:e7:6a:6f:25:8b:15:65:0e:5e:85:93:
b2:d9:5f:89:4f:f3:fa:07:eb:d1:2b:f6:fd:b3:f4:25:eb:e3:
dc:c3:e0:01:b7:b3:3f:39:98:81:de:10:30:b1:4a:e1:2a:54:
d4:ef:c9:72:3d:7a:c9:8b:40:a8:c4:45:59:0c:e9:56:00:98:
dc:94:5e:b9:9b:66:f4:0e:89:a7:8a:82:82:df:ee:1f:83:0a:
43:b9:8f:16:f7:f4:a3:ce:4a:8d:24:58:17:b4:b1:85:bd:9a:
49:a6:3c:1b:c5:a7:a5:84:00:ee:da:c4:99:47:53:a5:44:3e:
e1:b4:6b:2f:c8:5a:95:fa:fb:e9:d3:91:1c:e4:34:b6:bd:c7:
c5:60:06:29:f4:ac:4a:c7:61:59:19:7a:31:d2:c7:e7:7b:04:
98:0f:49:18:79:35:da:42:83:ab:fc:83:4c:b1:3f:1b:6e:6b:
1f:20:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:41 2026 by rpki-client