
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa
File: 2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa (raw, json)
Hash identifier: 5ouX0b6Jsp95DaiDPMJcPPRnKCI57ULiVkdtiypALTA=
Subject key identifier: 5A:2B:61:3A:18:31:6A:A3:D3:23:9E:0A:39:5D:47:77:59:86:9A:B2
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584D55BA49CBACA3E3D3832F2E00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 3360
IP address blocks: 20.154.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:49:cb:ac:a3:e3:d3:83:2f:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=6c7b40da-7412-4a09-9373-2182a5e15f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:5b:52:14:c2:f2:af:7a:e3:ab:0c:1f:ba:
bb:fc:18:f8:6c:18:65:44:41:b4:f3:24:5e:60:28:
a2:a9:24:50:f3:fb:c3:5f:d6:26:be:87:cf:dc:2a:
63:a2:ee:b4:8b:d8:80:cf:21:d8:ef:b0:a8:17:7b:
ee:c7:b9:8b:da:2e:67:b9:b9:2f:fa:6a:f3:ce:df:
45:7f:f9:e1:fb:15:07:c0:8f:6a:9a:92:75:42:96:
c9:c1:03:fc:11:01:4c:d2:55:5f:0d:fa:09:29:83:
cc:1c:6d:b8:c8:fd:56:7b:c5:ef:50:6e:44:b0:b9:
42:79:f3:8c:62:fc:55:8d:73:28:11:28:ac:76:e2:
06:d8:f2:21:89:15:bc:3f:89:c6:ed:57:01:a2:5d:
38:a4:85:14:07:bb:ce:c8:33:d8:bc:95:97:4c:f9:
af:e5:cd:3e:f7:5a:af:10:36:b5:70:9e:e4:6f:27:
53:69:c3:c6:21:d9:53:7e:d3:fc:69:0f:08:8e:79:
d5:a8:e2:a3:66:19:63:ae:95:f3:24:c9:64:45:56:
b2:9b:8a:27:75:68:96:f1:79:8f:a7:8c:1e:e9:1d:
33:db:a2:79:8a:b7:41:94:27:f1:4c:b6:28:60:68:
20:33:85:c5:f5:56:d4:ed:c4:e3:fa:fa:55:90:cb:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:61:3A:18:31:6A:A3:D3:23:9E:0A:39:5D:47:77:59:86:9A:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2ea97d27-b35f-39dd-a8a1-ae9540986a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.154.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:94:59:25:43:e9:69:9f:11:a0:0b:04:1f:35:68:09:14:bb:
69:ff:a6:88:0b:15:0b:dc:04:1e:f9:b3:bd:8b:f5:7f:c1:57:
cf:45:53:3f:35:54:49:7b:b0:d8:86:8e:b6:ef:03:f0:12:13:
dc:ce:e1:8c:41:82:ed:7e:f0:9c:01:ed:51:bf:85:2d:ed:e8:
a6:99:cb:58:1a:06:51:d5:4f:f0:94:62:86:ce:c5:88:10:56:
e0:e1:5d:cf:d7:4a:39:45:a7:74:7d:30:54:08:85:4d:7d:9c:
ed:75:13:26:35:20:8b:9c:13:17:6b:9d:35:20:7f:cd:6c:ae:
e1:36:dc:80:f6:d9:bf:0a:3c:04:bf:9f:21:3f:36:3d:1d:59:
91:a9:02:0e:6f:07:f5:6d:9b:7e:2f:20:6d:ff:c5:f5:86:f4:
e5:3c:16:48:58:44:15:c3:07:a4:2a:03:84:3f:90:f1:4e:8a:
75:d6:5d:90:eb:7e:f7:34:44:47:b9:cb:e8:bd:85:9d:da:bd:
c4:e0:69:ed:d4:1e:7a:c9:33:88:7b:5d:e7:16:b6:4a:ac:a9:
14:df:9b:d8:ea:16:1f:5b:c8:60:39:18:de:7c:3d:61:0d:e7:
79:9e:66:35:20:bf:1a:fd:02:f4:28:f0:17:c9:95:89:a6:5b:
6f:e2:05:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:10 2026 by rpki-client