
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa
File: 95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa (raw, json)
Hash identifier: 0s6yitMx87FofoeOMF6vqByC/D2YdefYkJXv5jLknWU=
Subject key identifier: EE:4F:54:7F:F9:3F:8F:3F:62:B8:3E:B3:74:A3:1A:AE:5C:40:03:6C
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584F093CF09425F048DCC8514C00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 3356
IP address blocks: 20.148.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:f0:94:25:f0:48:dc:c8:51:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=edd4ecaa-c375-42ca-ae04-c71c46d7474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:6b:30:02:e5:4b:64:f6:47:5c:7e:26:05:
0b:a5:66:d7:d7:b4:0c:57:69:fb:b9:0f:af:52:a8:
3e:f0:89:1d:1c:c9:f6:30:2a:c3:a5:0c:fc:a9:3d:
da:ee:41:ba:e1:92:66:f7:4d:17:3a:4e:f1:30:59:
09:2d:93:96:22:31:d3:c7:6b:42:6c:73:00:7d:f3:
43:84:9c:18:1e:52:04:36:1e:d4:3a:01:d1:7a:a1:
35:b7:ef:03:25:00:62:68:3d:16:a3:ac:3a:b9:03:
12:c9:2b:ce:b2:f5:ce:83:cf:68:1e:0f:8f:99:cd:
7a:f4:a0:2a:5f:f4:fc:3c:1f:d3:82:30:12:8b:56:
58:28:ce:6d:04:b1:46:88:e8:6a:61:57:27:1c:fe:
81:43:02:87:9f:8e:b6:ab:17:bf:f5:e3:9d:e3:3c:
69:87:d4:a2:6e:98:4f:da:1a:a6:ab:db:17:32:8d:
6e:05:09:1b:c6:0a:de:15:20:1a:ac:d1:90:be:58:
02:a2:11:15:2f:de:78:58:00:f0:ec:33:53:ee:c2:
32:21:b0:94:ce:98:34:d8:62:d2:de:7b:eb:0a:44:
c7:ba:2b:aa:6d:7f:49:43:ef:85:d3:f6:dd:e5:44:
29:33:5f:a5:92:eb:f4:7d:1c:30:a8:e6:6e:95:60:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:54:7F:F9:3F:8F:3F:62:B8:3E:B3:74:A3:1A:AE:5C:40:03:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:52:77:d9:f8:3f:1d:e2:84:b8:c8:6f:37:a5:65:20:fc:72:
59:c1:a9:97:72:13:15:9e:17:ce:da:86:18:7d:5f:41:8c:9a:
67:2b:08:62:b4:5d:db:d4:bc:a2:95:b4:76:4f:76:81:be:0a:
62:d6:99:fb:09:84:b4:d8:2c:9f:78:32:99:32:71:ca:81:16:
6c:e1:ea:fa:55:70:4a:74:7c:45:05:da:07:eb:c9:66:47:27:
bb:fe:b7:5c:8d:f4:bc:b5:62:7c:63:f6:f2:47:2a:23:40:7a:
35:9c:e7:5d:c8:3d:4e:c1:80:75:ab:ea:79:62:cc:ff:cb:a5:
d1:d7:f2:51:c9:cc:a8:e8:e1:23:32:8b:0d:60:4b:c3:fc:9e:
62:0e:49:58:aa:0a:17:c6:e9:68:69:b7:66:37:42:b6:70:bf:
a1:00:cd:7a:36:4f:6b:1c:1b:3e:c1:29:ea:ca:71:96:93:b5:
a3:f2:c2:fb:80:1d:07:b4:d3:2b:c3:d3:c6:d2:0d:64:e2:70:
85:aa:fd:8f:5c:1b:d9:09:97:ee:f3:b6:64:19:96:9e:49:66:
2b:8a:48:4e:fa:bc:d3:fa:29:17:eb:cf:a6:be:50:d4:e0:7a:
99:7e:88:36:6b:bc:9b:fc:8f:77:ab:2a:02:15:94:7a:56:08:
2b:5f:95:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPCUJfBI3MhRTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZWRkNGVjYWEtYzM3NS00MmNhLWFlMDQtYzcxYzQ2ZDc0NzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwVrMALlS2T2R1x+JgULpWbX17QMV2n7uQ+v
Uqg+8IkdHMn2MCrDpQz8qT3a7kG64ZJm900XOk7xMFkJLZOWIjHTx2tCbHMAffND
hJwYHlIENh7UOgHReqE1t+8DJQBiaD0Wo6w6uQMSySvOsvXOg89oHg+Pmc169KAq
X/T8PB/TgjASi1ZYKM5tBLFGiOhqYVcnHP6BQwKHn462qxe/9eOd4zxph9SibphP
2hqmq9sXMo1uBQkbxgreFSAarNGQvlgCohEVL954WADw7DNT7sIyIbCUzpg02GLS
3nvrCkTHuiuqbX9JQ++F0/bd5UQpM1+lkuv0fRwwqOZulWCaQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5PVH/5P48/Yrg+s3SjGq5cQANsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOTVjZmMzZDEtOGM5Ni0z
NzBlLWIwYjQtNTRiMTZkZDlhYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtSd9n4Px3ihLjIbzelZSD8clnBqZdyExWeF87ahhh9X0GMmmcrCGK0
XdvUvKKVtHZPdoG+CmLWmfsJhLTYLJ94MpkyccqBFmzh6vpVcEp0fEUF2gfryWZH
J7v+t1yN9Ly1Ynxj9vJHKiNAejWc513IPU7BgHWr6nlizP/LpdHX8lHJzKjo4SMy
iw1gS8P8nmIOSViqChfG6Whpt2Y3QrZwv6EAzXo2T2scGz7BKerKcZaTtaPywvuA
HQe00yvD08bSDWTicIWq/Y9cG9kJl+7ztmQZlp5JZiuKSE76vNP6KRfrz6a+UNTg
epl+iDZrvJv8j3erKgIVlHpWCCtfla8=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:17:21 2026 by rpki-client