
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa
File: a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa (raw, json)
Hash identifier: /8E2va4FiSBVzMxGCrlxHxs4dMyiGgSzv6wc/VjPTY8=
Subject key identifier: CD:82:78:25:B5:FB:78:1A:55:AF:95:12:2F:83:32:BE:B6:4E:23:EA
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584CFC822E24EBF54CFE09914D80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa
Signing time: Thu 26 Feb 2026 02:00:32 +0000
ROA not before: Thu 26 Feb 2026 02:00:32 +0000
ROA not after: Wed 27 May 2026 01:00:32 +0000
asID: 17916
IP address blocks: 20.133.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:82:2e:24:eb:f5:4c:fe:09:91:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 26 02:00:32 2026 GMT
Not After : May 27 01:00:32 2026 GMT
Subject: CN=bcc0df62-8a9d-47f1-9b2b-5652a738e9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:b0:5b:42:c9:5b:c0:75:41:c0:02:1a:04:
eb:c7:69:ed:47:58:c7:d3:c8:a6:3f:12:0f:7b:53:
d4:02:64:96:d7:a5:c5:09:4c:03:8d:b3:11:2b:be:
0d:de:8a:74:53:e4:8e:30:00:08:04:11:ec:18:42:
6a:37:d1:64:d5:4e:1a:12:a0:6b:0b:27:de:4a:1a:
1a:c3:9b:6c:bd:24:de:c5:fa:64:06:83:11:d7:4c:
f4:6e:48:08:8d:cf:a6:0f:17:a8:d9:54:47:c5:83:
73:b7:dc:8e:1c:a9:0c:2d:27:7e:da:d3:35:bc:eb:
36:1c:36:91:70:22:96:fe:ed:de:09:f0:82:5b:98:
35:75:68:fe:1a:3f:be:ce:65:35:76:85:e5:f7:1f:
fd:81:78:8d:31:bc:ee:db:03:01:a2:fd:99:26:25:
ca:e6:71:b7:86:f7:0b:52:aa:05:12:34:6d:5e:91:
d3:37:99:d4:9b:a0:d6:b3:8f:de:20:c8:b1:29:90:
84:10:e7:bf:60:67:ac:0c:8b:1e:9e:1f:3f:f0:1f:
67:55:04:8b:79:f8:2b:f2:b9:30:b9:0c:62:60:a0:
ae:2f:b1:2d:e3:7c:c4:67:60:d3:bc:62:29:1b:52:
a4:20:de:6d:24:01:cd:3f:89:08:57:6b:dd:35:63:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:82:78:25:B5:FB:78:1A:55:AF:95:12:2F:83:32:BE:B6:4E:23:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:ff:ee:04:0e:7b:8b:3d:b5:77:07:f2:1e:ce:f2:51:08:71:
25:c2:79:62:3d:a7:02:29:61:71:db:a2:59:2d:ec:b3:21:b9:
48:2c:8b:20:09:2b:70:49:f5:a7:57:21:25:74:87:4f:34:ba:
32:b1:d1:69:b8:79:2b:96:54:e2:f8:35:6c:2b:81:48:8f:be:
e4:f5:e3:1d:84:4a:12:fd:ad:bc:d1:6f:f8:01:4d:fc:38:e2:
50:5d:06:b8:58:87:11:96:1a:f2:7b:c3:92:2c:53:4b:59:2d:
67:3a:c8:cc:26:43:48:a7:54:e6:e7:38:68:3b:b0:fc:3c:97:
36:81:c1:1b:a2:c2:34:99:2d:8f:e5:f6:bb:88:1a:25:af:b7:
bc:bd:c6:62:ee:7c:21:7c:a5:0f:69:0b:81:19:17:84:a9:05:
9b:5b:6e:ac:4d:7d:f8:bf:2f:2c:10:8f:78:96:0b:5b:73:0f:
5d:42:f3:51:56:e4:47:ed:14:61:a4:5c:fb:57:45:66:78:b0:
6a:04:25:b7:a1:bb:b0:48:30:6b:01:a1:be:87:1c:d0:40:e5:
5e:e4:ae:9b:ab:c3:c4:8e:85:76:57:44:10:7e:95:14:dc:16:
b4:47:a2:e0:1c:30:a9:8e:0b:b7:d2:27:99:fe:da:be:e9:57:
b9:fb:96:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gi4k6/VM/gmRTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk
YmNjMGRmNjItOGE5ZC00N2YxLTliMmItNTY1MmE3MzhlOWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+WwW0LJW8B1QcACGgTrx2ntR1jH08imPxIP
e1PUAmSW16XFCUwDjbMRK74N3op0U+SOMAAIBBHsGEJqN9Fk1U4aEqBrCyfeShoa
w5tsvSTexfpkBoMR10z0bkgIjc+mDxeo2VRHxYNzt9yOHKkMLSd+2tM1vOs2HDaR
cCKW/u3eCfCCW5g1dWj+Gj++zmU1doXl9x/9gXiNMbzu2wMBov2ZJiXK5nG3hvcL
UqoFEjRtXpHTN5nUm6DWs4/eIMixKZCEEOe/YGesDIsenh8/8B9nVQSLefgr8rkw
uQxiYKCuL7Et43zEZ2DTvGIpG1KkIN5tJAHNP4kIV2vdNWPp3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2CeCW1+3gaVa+VEi+DMr62TiPqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTJjNDllZTUtZmJlMC0z
ZDU5LTlmZDMtOWFhNzg4OTA4YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABD/7gQOe4s9tXcH8h7O8lEIcSXCeWI9pwIpYXHbolkt7LMhuUgsiyAJ
K3BJ9adXISV0h080ujKx0Wm4eSuWVOL4NWwrgUiPvuT14x2EShL9rbzRb/gBTfw4
4lBdBrhYhxGWGvJ7w5IsU0tZLWc6yMwmQ0inVObnOGg7sPw8lzaBwRuiwjSZLY/l
9ruIGiWvt7y9xmLufCF8pQ9pC4EZF4SpBZtbbqxNffi/LywQj3iWC1tzD11C81FW
5EftFGGkXPtXRWZ4sGoEJbehu7BIMGsBob6HHNBA5V7krpurw8SOhXZXRBB+lRTc
FrRHouAcMKmOC7fSJ5n+2r7pV7n7lms=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:40 2026 by rpki-client