
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4a792c86-ccb0-355b-8a5d-6b5c79ca11ef.roa
File: 4a792c86-ccb0-355b-8a5d-6b5c79ca11ef.roa (raw, json)
Hash identifier: U7Lc4QKcQmMQqrO4WlvlxYZwPY8CwhjG0YxkZuPZ/g0=
Subject key identifier: CC:C3:A7:D9:4E:87:04:77:69:FD:00:F5:BB:EE:8B:E5:2C:C5:7A:2E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584D86955CC7CA75EBB88C443C00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4a792c86-ccb0-355b-8a5d-6b5c79ca11ef.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 4237
IP address blocks: 20.137.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:5c:c7:ca:75:eb:b8:8c:44:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=e7377149-9370-4e21-8cbb-f0dd0be3eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:6b:0e:a8:3d:23:0b:38:48:45:64:5d:77:
35:49:60:09:b7:08:ae:66:82:7d:54:96:a5:a1:d4:
bc:88:9a:ed:02:bf:af:ea:32:5b:23:83:7a:47:28:
58:04:d1:e1:c6:b5:08:02:99:26:5a:08:7d:bc:b0:
ac:43:d9:47:2a:42:11:a0:8b:96:4d:ef:01:e0:c5:
df:5e:33:48:78:c3:11:c5:53:c3:48:46:0a:b6:a1:
cf:fa:bd:1b:3d:8d:04:5c:e8:74:95:f0:4b:c1:5f:
98:a9:85:4f:67:f5:33:49:1c:e9:c9:63:91:6c:48:
4d:28:36:60:47:5b:3b:7e:f4:94:01:37:3b:f0:e1:
75:04:5b:0b:c6:95:ae:0e:19:2c:79:60:c2:51:95:
47:7f:f3:20:4e:67:b6:54:00:db:64:76:28:84:3a:
16:19:ee:19:63:ad:81:97:88:bf:7b:78:ac:45:e5:
7d:2f:a0:50:3a:e1:f5:ad:7a:42:08:af:28:9e:22:
63:17:cc:e9:e5:e8:38:19:83:00:96:11:8b:89:cd:
d4:bd:85:ea:56:14:eb:e8:61:cc:61:74:68:77:de:
e9:66:6e:a6:a0:2a:ee:cd:5a:ca:0b:90:3d:28:3d:
0b:70:5d:1b:fb:d1:81:6a:07:c4:51:02:bd:e1:38:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C3:A7:D9:4E:87:04:77:69:FD:00:F5:BB:EE:8B:E5:2C:C5:7A:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/4a792c86-ccb0-355b-8a5d-6b5c79ca11ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:e5:13:96:e2:a8:c7:66:a1:63:40:12:68:99:80:30:ea:6e:
44:9a:28:c6:f2:be:aa:41:81:8e:51:2c:46:5a:66:98:7b:c7:
af:c0:cd:2a:b2:b2:d1:9a:58:a1:b0:be:c3:c0:a5:8a:c0:55:
b7:f9:27:b2:16:a8:13:97:09:6b:5c:f0:d7:5b:ee:28:0e:29:
cc:92:73:09:14:1b:9b:36:22:14:5d:7c:f6:d4:0f:7c:cb:d7:
98:e6:9a:9c:c8:16:e0:b9:c2:84:67:6e:b4:60:d6:14:94:c8:
44:cd:2b:41:1b:b3:02:72:2e:1b:f8:44:82:ca:94:29:26:99:
2e:5e:58:3f:d0:42:a4:48:1d:8d:d2:cd:0f:f3:c3:7b:28:0b:
45:f1:c7:55:f7:44:9a:b9:b9:24:00:bf:b3:29:dd:8c:8d:06:
85:34:c9:f2:65:df:a2:5b:46:cd:3c:bb:71:a5:df:c8:34:2d:
74:3c:65:a7:93:8e:2c:bd:9b:2a:48:a7:48:aa:e8:91:c6:e9:
89:86:bc:7c:95:cd:bb:6f:14:5d:67:84:27:d4:44:b9:8b:1c:
fe:38:38:6a:e4:69:7f:ff:af:20:fa:6a:66:d9:ac:7e:24:65:
53:7d:5d:48:c7:6b:b7:48:37:bf:49:2c:f7:e4:08:5d:f1:67:
62:b4:54:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVzHynXruIxEPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
ZTczNzcxNDktOTM3MC00ZTIxLThjYmItZjBkZDBiZTNlYjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2lrDqg9Iws4SEVkXXc1SWAJtwiuZoJ9VJal
odS8iJrtAr+v6jJbI4N6RyhYBNHhxrUIApkmWgh9vLCsQ9lHKkIRoIuWTe8B4MXf
XjNIeMMRxVPDSEYKtqHP+r0bPY0EXOh0lfBLwV+YqYVPZ/UzSRzpyWORbEhNKDZg
R1s7fvSUATc78OF1BFsLxpWuDhkseWDCUZVHf/MgTme2VADbZHYohDoWGe4ZY62B
l4i/e3isReV9L6BQOuH1rXpCCK8oniJjF8zp5eg4GYMAlhGLic3UvYXqVhTr6GHM
YXRod97pZm6moCruzVrKC5A9KD0LcF0b+9GBagfEUQK94TismQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMzDp9lOhwR3af0A9bvui+UsxXouMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNGE3OTJjODYtY2NiMC0z
NTViLThhNWQtNmI1Yzc5Y2ExMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvlE5biqMdmoWNAEmiZgDDqbkSaKMbyvqpBgY5RLEZaZph7x6/AzSqy
stGaWKGwvsPApYrAVbf5J7IWqBOXCWtc8Ndb7igOKcyScwkUG5s2IhRdfPbUD3zL
15jmmpzIFuC5woRnbrRg1hSUyETNK0EbswJyLhv4RILKlCkmmS5eWD/QQqRIHY3S
zQ/zw3soC0Xxx1X3RJq5uSQAv7Mp3YyNBoU0yfJl36JbRs08u3Gl38g0LXQ8ZaeT
jiy9mypIp0iq6JHG6YmGvHyVzbtvFF1nhCfURLmLHP44OGrkaX//ryD6ambZrH4k
ZVN9XUjHa7dIN79JLPfkCF3xZ2K0VAI=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:06 2026 by rpki-client