
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa
File: 32163c6d-537a-3a41-8227-c09c400f5f50.roa (raw, json)
Hash identifier: V8O7u+FYguj8lZztUXTrwkTjc0hPkahUkEsncUe4dac=
Subject key identifier: 02:63:77:D9:78:F3:61:60:BE:1C:88:BD:7B:53:D8:B3:2B:2E:86:36
Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial: 010D0C9F4328584EA788BC0B2B283C60C378B940
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11377
IP address blocks: 216.20.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:bc:0b:2b:28:3c:60:c3:78:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c2052c64-865c-4f20-a9db-5c1d2918855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:a9:6a:8f:94:90:e2:dd:5c:74:e4:ab:19:
63:b1:43:e7:11:ea:b8:6c:21:c3:e2:b3:71:18:19:
e2:09:ac:5c:1f:a0:9a:e6:db:1d:ae:20:85:29:24:
f3:29:35:b8:0c:79:f6:b0:c4:c4:fe:28:65:cf:37:
29:3d:bf:45:b5:96:8f:20:ed:42:45:d3:af:62:71:
dc:dd:50:c0:63:a0:4d:c7:75:20:41:d7:30:16:41:
fc:37:db:f5:75:16:d0:e7:e3:f5:f2:dc:19:cd:92:
52:d1:57:d6:79:52:f5:37:69:87:95:b2:3f:e8:00:
29:7c:1e:58:35:69:ce:4d:00:8b:51:13:2a:a6:2f:
8c:26:86:26:5b:a6:f2:ab:ed:fb:33:de:2e:1d:13:
cb:0e:81:a1:30:6d:5d:81:ae:6a:74:90:ca:48:ea:
ff:c4:e0:45:c0:b6:3a:3c:3a:8e:95:80:aa:6d:05:
33:41:78:b4:ca:a3:1a:4e:91:e5:0c:6b:5f:d4:7d:
45:96:29:a9:aa:c6:8d:3d:81:cb:1a:e9:8d:77:03:
a7:71:71:9c:55:b1:e8:ed:85:71:61:e1:c0:62:9f:
a1:58:ce:e3:30:f9:61:3b:45:54:09:d9:92:dd:5e:
62:b6:43:58:94:4d:a5:37:fc:6e:c1:4d:92:48:c5:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:77:D9:78:F3:61:60:BE:1C:88:BD:7B:53:D8:B3:2B:2E:86:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/32163c6d-537a-3a41-8227-c09c400f5f50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
X509v3 Authority Key Identifier:
keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.20.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:8b:e5:e3:72:0a:da:d4:5b:64:ea:60:20:e2:05:df:a4:c5:
c4:9a:23:2a:92:35:0c:42:51:b5:93:21:9f:72:1f:82:e7:80:
c0:81:12:84:7c:eb:46:a6:0d:c5:b1:f2:3c:82:ec:df:3a:45:
68:bf:fb:e2:45:be:b1:17:db:fc:3d:52:d2:73:31:e0:65:26:
72:95:22:f8:64:78:6f:a1:a1:51:32:bd:c3:19:b9:6b:e4:ff:
ee:db:f3:a0:9b:f7:4d:70:ca:3c:5d:f7:83:90:be:ab:cc:29:
3e:3f:53:55:59:8d:a4:d5:a7:3e:ed:20:68:ed:13:35:f8:f6:
70:4e:95:fd:7c:d5:80:0c:96:23:16:b8:07:8c:32:cd:0d:4b:
39:ce:31:2e:1b:4b:1e:49:e2:3c:41:d4:d2:d5:71:0a:bd:05:
ef:cb:68:38:49:d8:92:04:fe:f1:f5:b6:de:11:78:18:be:51:
de:77:9a:fc:3c:7e:d7:3b:7f:9d:09:4c:ea:c8:a1:4d:57:be:
f1:39:0e:dc:a9:d6:2f:65:fd:ec:e5:21:f5:b1:b4:b0:c4:78:
80:08:95:68:7d:d3:46:67:36:97:46:b6:4a:cc:55:f1:d4:ab:
48:73:22:b6:c0:3b:db:00:f9:c0:1d:73:fd:89:8f:6a:c7:14:
93:d4:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:14 2026 by rpki-client