
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
File: 3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json)
Hash identifier: utpGehYM6gpGADE2eQlDhsSq/2fKyysAUgyjR+CV3mE=
Subject key identifier: 7D:44:E2:5B:AE:5A:FD:5D:15:5C:67:46:BC:72:70:9B:E5:28:9F:86
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584D59EA69F64451BE4E53723700
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 202
IP address blocks: 20.134.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:69:f6:44:51:be:4e:53:72:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=43ef9709-5d9d-4b6d-921a-8d32da291be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:f3:0f:de:4a:41:ab:cd:a4:b3:b4:8c:e1:
11:4c:57:f0:65:9d:0e:8d:e4:67:31:61:2c:50:68:
63:71:14:36:7b:34:d8:81:1d:71:5d:1e:20:51:f8:
61:fd:8e:c8:49:1b:d9:64:59:b7:62:11:a3:37:60:
9a:c3:80:1c:51:f3:6f:0a:7b:21:08:20:05:f1:73:
f5:01:e1:7a:e5:07:c2:63:31:41:a9:12:c3:49:77:
85:27:a3:79:91:2e:db:49:78:71:c4:96:2d:93:59:
d5:e1:29:3c:16:48:cd:c3:1b:47:13:cd:d7:d8:49:
63:b0:82:b0:78:23:6c:8d:a1:1f:40:d0:a7:a5:6a:
19:30:f9:61:b4:cc:d5:f2:b5:84:bf:3e:0d:70:8a:
a3:60:5f:ff:ca:40:44:24:66:51:c9:1e:b2:5f:91:
97:a6:28:8b:01:b0:9f:50:75:d0:b8:31:af:47:ec:
2d:1a:f6:1b:63:d1:4b:76:9a:2d:17:23:06:df:8b:
c0:ca:cd:dd:34:ff:23:6e:18:2d:09:72:7b:fe:68:
3e:90:73:18:21:a4:f4:d6:e6:4f:2c:88:c7:d9:98:
e7:9e:cb:df:6d:ba:e4:bc:6f:45:17:1d:c7:1b:91:
f2:33:b1:08:58:67:8b:54:4b:32:88:5c:e1:b7:15:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:E2:5B:AE:5A:FD:5D:15:5C:67:46:BC:72:70:9B:E5:28:9F:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ba:40:bd:39:d3:ac:01:ea:1f:56:e3:05:ca:a5:11:9b:ab:
04:3d:85:a8:67:c9:f3:dd:61:3e:53:80:24:06:de:4e:b5:3c:
eb:d0:24:ce:07:ae:14:e6:e4:fb:63:6a:68:dd:d9:26:e9:7c:
6b:cb:a9:65:11:f0:43:f8:41:c9:23:cf:de:1b:3a:4e:4b:39:
9c:4d:a5:fb:b6:a1:09:a8:11:e8:c9:b9:b0:96:8d:3c:df:9a:
54:32:b0:31:a7:c4:00:a4:82:ac:c8:69:ad:cc:f9:f6:77:5a:
77:d0:d5:48:98:ae:90:6d:4c:c5:dd:67:e7:a6:dd:3f:77:85:
43:f8:5e:88:f7:bc:9c:31:ea:82:16:ec:d9:64:d9:9c:78:f3:
1d:05:ca:83:f0:49:48:d5:79:2c:d3:69:b9:3b:42:3d:04:f0:
56:90:01:30:4d:a5:b3:8b:82:df:85:b1:1a:ce:d7:1a:96:45:
02:77:e9:79:a6:7e:da:31:99:b2:ef:fe:fe:03:1a:eb:3d:26:
d9:09:48:43:60:a2:c6:2b:c3:51:00:91:d5:7f:ae:a6:76:8c:
d9:8a:41:6e:66:6b:4a:2c:2e:7f:a5:4e:f4:4e:cb:21:72:30:
5b:a8:44:50:e3:10:cc:66:ca:cf:37:ab:ba:24:5e:bd:ea:53:
28:d6:67:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mn2RFG+TlNyNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
NDNlZjk3MDktNWQ5ZC00YjZkLTkyMWEtOGQzMmRhMjkxYmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuzzD95KQavNpLO0jOERTFfwZZ0OjeRnMWEs
UGhjcRQ2ezTYgR1xXR4gUfhh/Y7ISRvZZFm3YhGjN2Caw4AcUfNvCnshCCAF8XP1
AeF65QfCYzFBqRLDSXeFJ6N5kS7bSXhxxJYtk1nV4Sk8FkjNwxtHE83X2EljsIKw
eCNsjaEfQNCnpWoZMPlhtMzV8rWEvz4NcIqjYF//ykBEJGZRyR6yX5GXpiiLAbCf
UHXQuDGvR+wtGvYbY9FLdpotFyMG34vAys3dNP8jbhgtCXJ7/mg+kHMYIaT01uZP
LIjH2ZjnnsvfbbrkvG9FFx3HG5HyM7EIWGeLVEsyiFzhtxUwWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1E4luuWv1dFVxnRrxycJvlKJ+GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2NiMzA4MTQtMTc0My0z
ZjRjLTlmMmItNDNlNzY0MzMzNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAO6QL0506wB6h9W4wXKpRGbqwQ9hahnyfPdYT5TgCQG3k61POvQJM4H
rhTm5Ptjamjd2SbpfGvLqWUR8EP4Qckjz94bOk5LOZxNpfu2oQmoEejJubCWjTzf
mlQysDGnxACkgqzIaa3M+fZ3WnfQ1UiYrpBtTMXdZ+em3T93hUP4Xoj3vJwx6oIW
7Nlk2Zx48x0FyoPwSUjVeSzTabk7Qj0E8FaQATBNpbOLgt+FsRrO1xqWRQJ36Xmm
ftoxmbLv/v4DGus9JtkJSENgosYrw1EAkdV/rqZ2jNmKQW5ma0osLn+lTvROyyFy
MFuoRFDjEMxmys83q7okXr3qUyjWZ1g=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:40 2026 by rpki-client