
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa
File: 039255e4-c9fb-35a5-8184-772546666ac4.roa (raw, json)
Hash identifier: swEkKX/iQzzSPLRSvCVusnGs7xN/5a5kfnTmMTOL8/I=
Subject key identifier: F8:D0:8E:D6:B8:2D:F2:C4:8B:1D:44:02:8E:70:AC:C9:A4:9A:8D:9C
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584D55BA498413C909C41A9928C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 3360
IP address blocks: 20.134.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:49:84:13:c9:09:c4:1a:99:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=38551508-e310-49f6-be6e-d3bed2d932af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:91:4c:78:f9:f5:b2:f2:e3:25:75:dd:ed:
3c:03:db:32:92:0e:91:aa:20:36:41:a9:67:48:cf:
58:8e:e1:36:a6:3b:c8:6f:a9:81:e5:81:b6:c9:68:
61:25:80:69:bc:8e:30:54:f4:9f:50:f6:84:86:83:
6c:3c:7a:84:a1:18:84:28:05:f4:fa:da:76:de:c5:
ad:23:a5:21:e4:92:de:b0:f5:2d:c6:4f:a9:5b:eb:
6b:c6:28:b2:03:f9:86:82:0f:7a:6c:f9:3b:1b:c0:
6b:96:e6:3a:3f:52:5a:dd:6e:11:1f:cc:cd:33:b5:
16:24:f9:d7:82:9d:35:c5:69:5b:00:27:23:ab:b2:
e3:b2:6e:66:bf:a2:0f:96:79:13:9d:44:1a:56:6e:
80:b1:7e:7e:20:0f:bb:0a:09:1b:65:f3:53:f2:77:
41:99:98:da:3e:e2:46:2b:bd:1f:46:bf:9d:8f:ba:
82:b5:40:8e:6b:ba:47:5d:37:6d:e7:42:99:0c:c7:
78:65:49:f6:75:77:15:e4:5a:2c:65:ad:9f:2c:ec:
18:20:9d:3c:25:38:84:2f:4a:05:37:17:7b:07:2c:
b2:13:be:48:38:33:a8:37:dc:dc:62:af:5c:be:30:
41:50:00:5f:57:22:e4:b2:02:ed:6f:bd:e5:26:c0:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:8E:D6:B8:2D:F2:C4:8B:1D:44:02:8E:70:AC:C9:A4:9A:8D:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/039255e4-c9fb-35a5-8184-772546666ac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:5c:88:e7:e6:5e:4a:82:d2:9a:2d:a3:b3:6a:52:69:ab:df:
1f:f7:7e:c4:69:5f:de:44:3b:fb:c4:f5:06:c4:4a:a3:7b:66:
04:de:2b:0a:06:66:50:e4:5d:64:ed:a8:6d:44:d1:12:99:14:
d7:69:a4:5e:ac:0f:69:be:d6:cc:ca:85:2d:47:da:fa:dc:36:
d3:87:3a:4a:cf:8b:71:e2:ab:f7:77:97:be:ab:69:a7:5e:a9:
18:e2:51:37:3c:dc:b2:ce:d8:d3:50:8f:87:46:c6:c1:80:61:
5e:7c:40:cd:01:4e:12:28:56:d8:5f:41:2a:81:72:ec:41:e0:
27:17:d7:d6:04:e1:6e:83:5a:b5:9b:f5:fd:10:b9:36:a1:36:
af:89:4d:24:8b:df:c2:e8:23:04:10:08:f7:43:fb:fd:7e:70:
06:89:2b:b9:b0:a8:5f:95:df:ee:55:84:17:03:01:45:2d:da:
a0:5d:6c:cb:88:cd:06:38:7f:58:ed:1e:2d:dd:8c:b2:09:67:
69:3c:33:74:64:65:8c:80:bb:1b:1a:6a:80:48:5a:45:9a:25:
83:66:d9:8d:ff:c5:fc:4c:b9:c6:7e:9c:4e:d8:81:27:65:62:
1f:e6:6b:51:74:f4:c6:8e:40:2c:e9:e8:05:d6:09:08:9f:b5:
6e:f1:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:33 2026 by rpki-client