
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa
File: 0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa (raw, json)
Hash identifier: 9ZruzxIkddmgUz/zBf+xTR4Bru1dpi6+xB0ffnaRRhY=
Subject key identifier: 30:17:FD:45:24:BB:14:5B:6A:0B:1F:50:A1:26:52:1A:65:3E:07:E5
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584F119D0D93D80C835C764DC080
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 4237
IP address blocks: 20.148.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:0d:93:d8:0c:83:5c:76:4d:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=e82b871e-8013-4f7e-9377-e51bd5e3419e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:84:d8:a6:08:14:1e:8c:38:e3:39:3a:89:
a2:6b:ab:d2:4e:78:e5:ee:bf:a3:73:fe:21:42:35:
5f:df:15:ed:3c:2c:62:4c:20:72:cb:85:4d:15:d9:
34:b0:60:a9:0d:c3:de:f4:b9:1c:4a:2d:c8:67:cc:
18:5c:a9:06:bc:0d:49:bd:69:61:40:7e:77:6e:96:
9e:a8:5e:6b:ba:d5:09:b5:2b:86:de:ce:8f:78:8e:
18:0d:3f:5c:54:7e:b9:f6:d3:5a:fb:c9:a6:82:5b:
ea:cf:cf:a3:62:8a:ba:af:79:89:e5:86:a8:0f:f2:
18:da:f7:d8:53:6a:49:c0:39:ab:44:c1:f1:40:32:
8d:6f:b2:23:0f:fd:d3:04:be:cf:b2:50:63:81:f8:
68:ce:5d:3c:e2:18:be:4e:96:54:06:bc:67:25:2f:
6b:74:3b:e9:bf:62:72:11:2c:bd:71:3b:37:99:fb:
b2:29:24:9f:a8:4d:7a:de:e7:d9:3a:bc:e3:31:48:
a1:81:be:b3:bd:f3:89:2b:26:d4:4f:d9:45:19:cb:
ea:86:ff:d8:f0:8c:ab:ca:dd:96:02:5e:e1:ef:34:
2b:c7:95:11:78:a9:2c:0d:ed:08:d2:ec:b2:44:e2:
1f:b8:c9:e2:d9:00:76:d3:3d:a8:26:0d:b0:49:66:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:FD:45:24:BB:14:5B:6A:0B:1F:50:A1:26:52:1A:65:3E:07:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0ecb2277-d4e3-33e9-a338-54708e3f0c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c9:34:79:b8:3d:3c:f0:fc:7e:b7:18:48:a6:4d:eb:cc:af:
d3:63:67:44:18:6b:fb:af:b4:4d:ed:83:c2:aa:0b:8b:11:6b:
33:70:f6:91:70:1b:65:2d:53:2d:c4:f1:65:37:80:11:58:0d:
2b:04:81:44:9b:ae:11:50:3b:d1:a2:d2:b6:02:a0:24:d6:d5:
ad:0f:e3:bd:e3:d4:5a:5f:ec:ed:8c:0c:0f:e3:fc:3d:34:fb:
47:83:73:23:a6:25:22:75:48:e3:b6:36:79:a1:ab:42:9d:d6:
8d:10:ec:54:76:01:f8:f1:b4:1b:1b:1e:34:10:12:4d:71:b8:
e4:2b:a8:37:dd:df:b5:25:ff:61:d7:a4:a5:ff:6d:ae:27:93:
80:50:1f:02:97:c5:c1:d7:33:5e:5d:9f:ff:b6:ed:2f:80:1c:
86:f4:03:7f:8e:13:4d:88:f9:12:34:75:f9:de:4a:be:fe:ca:
21:0c:1e:13:c3:6e:b5:69:e7:9f:c8:4a:e7:6d:10:68:59:81:
e8:e1:4a:ff:ab:bf:10:95:18:38:69:82:d2:75:68:89:08:51:
fa:32:94:4d:b6:74:b9:af:4e:a5:21:b2:7b:a9:49:5d:f4:e0:
74:22:0b:51:7a:50:cf:99:4c:3a:a8:64:da:2f:c7:26:5a:a4:
0d:85:b8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:17:15 2026 by rpki-client