
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa
File: 38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa (raw, json)
Hash identifier: hQRmbKPMT6L9k8gCwYB0afMgDk9GKlijcdUTycdDSPo=
Subject key identifier: A0:53:1C:A0:CF:83:EF:1F:C3:5E:72:40:E4:F6:34:EC:39:17:8A:0D
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EA79660716995229A3BB7F8C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 3356
IP address blocks: 20.133.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:60:71:69:95:22:9a:3b:b7:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1140359b-6d28-4dac-9335-7d14c854c345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:62:22:b6:85:76:c0:3d:23:e6:37:ca:df:
7b:40:9f:c4:4f:4e:d2:48:5b:a0:f1:c1:ba:d9:26:
43:3a:9d:bf:cc:4c:78:7d:82:ff:37:08:75:c6:c0:
88:3e:86:a7:74:de:f9:77:cc:27:1b:4c:2a:fd:16:
37:bc:d2:93:4f:2b:5f:a1:18:e2:ae:fe:d2:fd:b9:
5b:74:71:80:98:24:4a:7e:fe:15:fc:e5:8f:85:b4:
42:fc:13:54:05:be:ee:eb:91:ba:86:dd:fd:39:4b:
ef:02:53:42:c9:ec:47:72:a8:90:f6:f3:ca:ba:0c:
4e:a9:9b:dc:55:bb:8f:20:90:51:92:a2:ed:3b:06:
9d:d8:41:48:c0:be:34:67:70:34:4b:55:27:76:50:
8d:24:c2:6d:2e:29:1d:e9:7c:b8:6f:56:52:e4:fe:
14:12:f7:27:b7:ef:64:bd:39:2f:6e:0f:18:56:e5:
55:50:fd:19:32:5d:86:47:23:cd:3e:40:2f:2d:51:
60:61:cb:6c:1b:6b:7c:00:1d:32:58:41:ec:95:f2:
31:65:3a:cd:9b:0f:4a:66:b1:cb:66:7b:38:32:ad:
f7:d2:8f:63:66:81:c7:42:44:91:98:a7:d1:8d:e0:
26:6c:46:d6:3d:78:64:7b:5d:6c:0e:fc:d5:21:1a:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:53:1C:A0:CF:83:EF:1F:C3:5E:72:40:E4:F6:34:EC:39:17:8A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38a498ff-f6f6-3d54-9bfa-8f7ff226fa4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:4a:71:8d:bd:c9:f2:ff:1d:52:d7:4d:87:17:c0:69:7a:63:
28:e1:a0:78:7f:b5:31:d6:c6:b5:d2:7d:69:ab:14:6a:40:e1:
df:73:70:28:d0:e2:62:72:d1:73:4d:1c:b9:1e:98:b1:fc:49:
21:80:56:65:c0:4b:a4:c3:c5:e3:06:1f:98:b2:91:7d:47:90:
04:1a:68:33:a5:32:85:bc:2b:c7:a9:73:b2:b3:b1:5b:d2:e8:
65:d7:cd:67:ea:39:ce:e4:23:8a:a8:8c:b5:b2:90:b0:bc:21:
3a:d7:57:b2:92:5e:f7:b7:fc:9d:d9:5c:03:78:f2:56:31:c0:
98:04:91:13:cf:ce:79:ee:ce:19:f7:fe:29:e4:75:0d:b3:da:
e8:1a:da:f1:21:37:6e:16:51:4a:d8:2e:9e:f4:fb:20:e7:da:
16:a4:ef:70:34:b4:af:7c:cb:16:c7:ff:c0:7c:89:da:d4:e0:
c8:74:8f:4b:5a:04:82:83:58:78:94:b1:87:45:fb:f8:f8:98:
91:6f:c4:a2:de:d6:06:91:1a:f1:91:28:de:46:1c:2c:3a:5e:
24:e1:ee:15:40:e1:2b:da:26:9f:da:17:d5:46:42:1b:5a:e4:
23:b8:14:fa:8c:6b:91:73:40:62:e9:5b:83:51:23:2d:5d:e7:
ce:41:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:08 2026 by rpki-client