
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
File: 9b91b125-6125-3a2f-8309-02516c7fe510.roa (raw, json)
Hash identifier: MlBr1hM+KGHI7C/wmTqSFp9BLAOEOR9m9NibUXm8SqY=
Subject key identifier: 19:72:07:08:11:00:5E:69:7C:3B:8D:6B:AC:3E:99:19:25:A3:C4:97
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584CAE5730E57003D9C616A7C180
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 203
IP address blocks: 20.148.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:30:e5:70:03:d9:c6:16:a7:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b9f14d85-8ec1-43f6-874d-27b1fb9a0ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4a:e9:b8:79:1b:70:eb:52:b5:29:51:dc:35:
ed:d9:31:fa:ad:ed:91:2f:7d:d1:d3:85:16:02:ea:
2a:59:ee:06:75:6c:25:98:bf:0f:2f:a5:dd:8a:85:
1e:2a:78:6c:4f:c5:c6:e2:4a:51:88:68:9e:fb:dc:
b8:d3:ef:cc:b6:7c:a7:a9:05:23:b4:b0:58:b5:b5:
9d:ab:03:51:e6:ca:b2:18:69:cc:c5:cb:27:84:e8:
e2:a6:ed:a9:bc:d5:72:cd:92:21:05:3e:b2:fc:d4:
6b:fc:5b:b7:33:2d:52:4b:c0:e6:9f:1d:d3:11:aa:
ef:0f:ef:3e:bb:ec:c1:8a:9d:af:03:db:3a:03:12:
93:a1:9a:3c:55:59:bf:cf:ce:a9:af:dc:06:47:c6:
b2:84:3a:40:70:d6:57:37:3f:33:5d:77:37:41:e3:
db:22:ca:2f:25:cf:09:9a:3a:de:94:6a:64:0e:84:
ef:1c:bb:ef:2d:44:92:58:5e:52:8b:77:3c:4b:96:
b0:7b:8b:81:3b:62:f3:f3:44:b8:d2:96:2a:b6:45:
96:2f:d5:9a:a4:93:8b:06:7e:8d:19:3e:3d:fa:7e:
33:f7:98:63:ff:60:46:06:5b:52:43:9a:35:cb:8f:
98:e0:75:56:02:98:20:eb:e1:7c:75:3b:d8:a3:bc:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:07:08:11:00:5E:69:7C:3B:8D:6B:AC:3E:99:19:25:A3:C4:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9b91b125-6125-3a2f-8309-02516c7fe510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:47:4c:fa:06:fe:e7:1d:2c:89:4e:f4:5e:dc:84:d5:4d:85:
97:cb:73:1f:c8:fe:15:47:d4:26:b6:f5:ec:dd:24:7c:1d:ab:
83:a9:95:ec:15:d5:1f:aa:33:09:c0:b1:41:a5:49:66:ed:ab:
5e:be:7e:ab:e6:ef:f3:2f:7a:e6:0e:31:42:8c:4a:6f:f2:a7:
da:50:80:25:04:5b:34:dd:d9:83:7e:9b:f8:56:6c:63:e9:4b:
9b:3a:9d:ab:64:8f:8a:b3:c1:1e:31:65:41:09:8c:28:bf:b9:
11:86:ac:ea:df:6b:ba:c7:ac:19:54:3a:fe:63:5e:ec:61:a7:
4e:ef:4e:f4:b8:3a:86:5c:4c:4b:b6:c3:34:50:fe:1c:4f:3b:
24:29:63:5a:7e:cf:06:c6:34:8a:59:35:e1:66:48:dd:75:15:
c4:50:c5:33:4f:70:d4:21:52:b1:4a:9e:48:46:0f:1d:bd:af:
8d:de:11:5e:b5:ae:6c:c0:4c:81:44:04:a8:4c:c5:70:9a:2b:
c9:34:89:cd:10:81:15:a2:c7:e8:b8:09:66:35:c3:0a:a6:4c:
9c:8e:c0:a3:7e:1d:e6:da:8f:92:f3:b4:9d:d3:6a:e4:d0:22:
25:8d:a4:a9:5e:bc:2f:9d:b8:26:48:c4:5d:c2:36:28:28:cf:
18:56:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:35 2026 by rpki-client