
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa
File: f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa (raw, json)
Hash identifier: 7PG2LWdzqaUCLKIFcwee5E/Nfxai2bhhnpN+ffbMIMA=
Subject key identifier: E1:30:76:2E:25:7E:6C:8E:BE:CB:DC:86:CD:23:6C:98:4F:87:51:EE
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EBB11AF1549A34E948374F300
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 3360
IP address blocks: 20.149.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:af:15:49:a3:4e:94:83:74:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=89e41116-1b46-47e8-b320-b8d8f4de5829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:d7:d4:bf:35:4e:45:e1:f8:3d:b7:08:f9:
0c:fb:02:94:a2:64:7b:ee:6c:57:19:d7:c6:6c:b6:
80:ad:91:9b:1c:78:9c:c9:a6:1d:b6:36:2c:c9:a5:
d4:4e:4c:df:07:ce:23:4e:b7:36:e2:59:27:db:12:
d4:38:f3:b3:c2:35:ee:e2:64:51:75:92:18:fa:18:
6f:e1:b1:f8:0f:09:55:c1:62:49:5f:31:8c:4c:cb:
fd:2c:6a:67:0c:f3:16:f5:5e:dd:37:00:31:05:f6:
17:84:0c:3d:14:84:c7:56:a3:1e:7f:45:b8:81:fd:
25:b6:b2:2e:8b:64:e1:ce:a1:d9:0b:9f:91:8d:b9:
03:7e:e7:51:a6:72:72:57:75:92:38:32:b2:ef:51:
f4:27:24:d6:51:fb:d5:97:55:a1:c5:3c:c0:22:09:
a6:80:8e:28:1f:6e:79:04:73:86:14:9e:1d:bf:c1:
1d:8a:9a:8f:b3:e4:ea:77:19:05:92:4a:c9:15:47:
9e:cd:a7:95:df:62:c6:c4:bd:0f:18:09:34:17:f2:
c1:85:f5:ff:cf:85:dd:05:cc:aa:df:9b:43:68:fd:
0f:e1:2d:eb:9f:bd:62:2f:ff:b5:ea:a1:8c:1a:f0:
fe:e4:21:91:0f:dc:55:f1:4a:c6:de:4d:2c:c8:6a:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:76:2E:25:7E:6C:8E:BE:CB:DC:86:CD:23:6C:98:4F:87:51:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8fdd8a8-03ee-3363-826a-3c00eb9f5f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.149.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:55:24:10:05:f6:54:5b:fe:bc:91:8c:88:ea:b2:56:d6:d1:
6b:3f:14:12:ad:56:ea:50:fd:e6:0b:02:c2:1e:e9:d7:20:0d:
ed:d3:f3:0c:48:32:a0:52:e2:11:c7:9e:0c:f4:10:2b:e7:7e:
e4:d6:df:fd:d9:7c:64:20:cb:33:be:06:36:a8:36:ab:d9:d5:
03:9c:46:8b:55:9b:a3:b3:1b:17:a9:25:c9:84:93:25:c8:08:
60:47:75:13:2a:f4:8b:d0:56:42:5e:26:fc:8e:12:77:5a:e5:
8d:4d:f0:c5:7f:38:57:48:ac:ed:f0:4f:54:e1:f1:ee:57:48:
34:fe:45:84:0e:bf:97:6b:29:4b:78:34:11:81:fc:89:88:57:
4a:b0:4d:98:53:85:40:41:b3:60:6b:23:19:79:de:6e:e9:e2:
2e:a1:b4:c7:09:7d:48:12:06:ef:4f:99:1b:14:80:36:96:ea:
7c:ec:c4:7e:21:0a:ba:a0:6f:a4:10:5f:29:3c:3f:68:fb:14:
c3:8a:1c:3b:a6:fe:c2:68:3b:79:3f:c7:93:d3:c0:68:87:f8:
30:7e:ad:96:dc:b8:50:43:48:fc:5a:d2:da:02:1b:ab:68:96:
50:68:96:40:75:ab:24:96:c4:3b:e7:f8:20:d8:74:c9:e9:2a:
ea:98:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:14:10 2026 by rpki-client