
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa
File: 2358e127-b9cd-321b-a2ed-09882df26c20.roa (raw, json)
Hash identifier: fIcs7Sh+HJz7K/oJx/mZVL8/eBZbBVizaG0kNOAsBeU=
Subject key identifier: 60:72:32:9C:05:64:FB:39:7E:17:62:0B:10:08:95:54:75:B4:32:6A
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584CF5879CC88F9C35AA8CE09700
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 202
IP address blocks: 20.137.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:9c:c8:8f:9c:35:aa:8c:e0:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=c24eba08-a7e3-470a-8d9a-cb55430a58ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:50:68:ae:2b:dd:ee:ef:d3:4a:26:48:ad:
e6:7e:01:19:61:a1:41:fd:a2:fc:41:c2:7c:86:41:
e4:39:ac:0d:ce:fe:89:69:da:54:1e:cf:54:ba:7b:
56:66:ad:b0:8d:b7:ba:b4:2e:94:60:c4:a6:d8:ac:
3f:ae:35:c7:87:6d:d7:be:3d:bc:f3:cf:b8:03:65:
cb:a1:68:34:b3:05:de:3f:95:1e:41:81:c1:7d:ec:
3e:52:ac:e5:7c:8f:17:11:17:1e:0c:93:89:ad:0e:
e7:8c:f3:63:7f:af:41:12:45:2e:b0:7f:0c:fd:e2:
32:c2:b4:98:b6:a2:d6:18:af:e5:34:b8:78:4b:7f:
55:91:01:51:37:d6:75:c0:39:2a:8e:43:d6:79:9b:
30:49:38:9f:29:43:58:e7:1a:ae:f8:45:09:48:9f:
bf:d5:92:82:6f:fd:7f:af:90:c7:34:46:43:e2:26:
e2:87:bc:b9:b2:49:57:e5:56:f8:c7:3b:a6:f1:1e:
02:c8:57:38:7b:31:1a:76:32:c1:3f:07:00:55:85:
aa:d8:79:40:06:28:b7:77:8e:47:be:a9:76:b5:18:
cf:bf:5e:c1:f2:6f:6d:6a:24:31:3e:64:ab:42:1b:
6d:f2:8f:f1:2c:17:87:e7:a3:e1:f3:6d:54:ee:c1:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:72:32:9C:05:64:FB:39:7E:17:62:0B:10:08:95:54:75:B4:32:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:09:42:27:5a:62:2f:66:c1:3c:8e:c2:58:09:83:3f:ea:93:
3d:0b:21:31:be:77:42:71:3f:b9:6f:90:13:cf:82:fd:63:e0:
9a:b6:7e:92:9a:62:9a:af:5d:13:4e:a6:f3:31:98:d3:88:a0:
cd:c7:f7:65:67:2d:bf:50:58:9c:e5:34:55:fa:6f:f4:3d:3a:
86:93:54:70:ca:68:c1:84:20:88:3e:ec:e3:99:8d:31:78:22:
54:8d:9d:f3:cd:f6:0d:bb:b1:a2:56:a4:34:6c:3f:44:e8:46:
88:6b:22:32:39:01:d5:b6:75:7b:8c:6e:58:34:96:99:b2:df:
2e:fd:1e:92:b8:ef:b4:b0:d4:c9:c7:b6:ef:a0:64:3e:eb:3a:
2e:c3:76:8c:8a:b4:22:fe:16:91:78:9e:a3:fd:47:b3:9c:46:
c0:d0:74:7e:70:6e:d2:08:d0:b7:96:76:8e:f5:d2:86:ea:90:
72:67:10:ff:31:30:a9:61:0d:87:80:2b:e9:e3:be:1c:4e:42:
56:9f:a4:23:a2:bc:08:d3:9e:72:d3:aa:dc:af:e0:a3:3f:5a:
c5:3b:9e:cb:cf:9a:45:7b:30:f8:ff:46:7a:c3:db:3e:37:c3:
11:d2:ff:7e:1a:f8:5b:4d:38:97:2f:a7:b7:3f:e0:5b:df:09:
93:91:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:09 2026 by rpki-client