
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa
File: 47be25e4-1c7a-336c-88b9-469b9f959666.roa (raw, json)
Hash identifier: YAToJqbLkwa2k02l1fBKmc/CXZkM3J3u5AfMGUu99QA=
Subject key identifier: 75:7D:74:EC:75:65:27:76:23:42:5E:F6:5B:D7:3A:C2:ED:76:42:FA
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584F2957BF23A2B069125A819A00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa
Signing time: Sun 13 Sep 2026 13:00:11 +0000
ROA not before: Sun 13 Sep 2026 13:00:11 +0000
ROA not after: Sat 12 Dec 2026 14:00:11 +0000
asID: 203
IP address blocks: 20.134.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:29:57:bf:23:a2:b0:69:12:5a:81:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Sep 13 13:00:11 2026 GMT
Not After : Dec 12 14:00:11 2026 GMT
Subject: CN=74e5fc11-38aa-448c-9f1f-65c94330ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:e3:70:8c:65:11:57:29:f0:c4:9d:c1:04:
99:f2:71:66:af:8a:04:ca:87:e8:6d:80:d7:a4:18:
f3:91:25:8e:57:33:72:0d:e5:e3:e4:a0:3f:55:e0:
9f:e7:dc:e9:4a:62:da:8a:a1:4c:92:54:ec:6d:d1:
77:87:18:62:e9:f3:88:fd:c3:2d:4e:ba:43:b9:87:
39:81:89:23:5e:e9:98:a1:a3:6a:e8:d4:08:a0:04:
38:e2:96:a0:9b:40:50:42:e6:33:2f:de:92:8e:60:
2f:34:ba:e2:f3:53:06:34:29:b8:2c:af:34:0a:15:
8b:5e:9c:a3:f1:d7:f4:2c:3b:d2:0b:db:0e:8a:a4:
60:d2:45:9d:96:90:fc:03:a0:f5:97:77:e3:02:1a:
2e:b0:d5:01:58:b1:cb:81:04:5c:ca:f1:35:14:1d:
9c:8c:8f:91:7c:97:3a:b6:ec:a0:49:f7:ee:a9:41:
8a:1d:d7:be:05:1d:40:63:63:ce:68:98:72:76:73:
d7:3b:a9:8a:a4:b4:ea:d0:b8:a7:5b:65:42:4c:f3:
ba:11:a0:0b:dc:b4:22:21:91:d0:2a:fb:76:0a:a6:
93:17:20:b2:e6:42:48:b3:25:37:91:9e:20:d3:87:
9b:a2:d6:98:a3:9f:7c:3e:06:7d:0b:93:f9:0d:ce:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7D:74:EC:75:65:27:76:23:42:5E:F6:5B:D7:3A:C2:ED:76:42:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/47be25e4-1c7a-336c-88b9-469b9f959666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:bb:3c:4a:70:72:97:1c:0b:5c:59:b3:95:5d:36:d6:3c:ca:
8b:53:d0:41:9d:58:d4:28:a7:73:33:a9:a7:d3:bf:67:01:b1:
65:d4:4b:5e:46:eb:71:be:9d:3d:64:1e:64:a1:94:43:82:ef:
21:35:89:8a:bd:d6:38:d6:7e:9d:ff:a9:bd:2f:ba:2d:1e:41:
18:c6:7c:f8:9b:32:07:10:32:16:1a:87:eb:73:78:de:74:e5:
5b:35:6c:00:83:0d:a5:ae:60:00:dc:4f:36:ed:5f:ce:7b:48:
03:91:4e:2c:77:ce:51:fe:f5:64:0f:19:4c:ea:42:56:f8:e5:
81:c3:a6:9a:6e:ca:4c:0c:20:00:af:b3:e2:56:b5:23:c8:42:
0a:a2:9e:db:d0:b8:e6:49:0b:f0:a4:86:9d:76:34:0d:35:04:
3e:45:ea:be:68:0a:61:5d:ca:09:69:f7:34:90:03:b3:a3:7f:
5f:66:74:07:5a:e8:c9:ac:f1:cd:39:46:f5:4c:fb:62:18:fc:
83:be:cd:f9:68:fb:0c:ba:6f:32:7a:10:f6:a1:31:40:15:ac:
24:1e:3e:d1:87:52:30:ff:33:44:fb:f7:55:31:a2:54:9c:6a:
42:c3:78:e3:2c:d1:e4:51:e1:d6:11:b9:41:e1:d2:7d:bc:a8:
70:4b:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:18:20 2026 by rpki-client