
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa
File: c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa (raw, json)
Hash identifier: uCkSCSXGPp1mbyskRA/D8PRR6hAR24nrFaHPRxPbJn8=
Subject key identifier: 1A:FD:B9:10:0B:90:32:BF:2A:45:53:B9:38:BB:B9:CD:11:FB:69:C5
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EA7884EE6B82BEEA7782FFC00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 3360
IP address blocks: 20.137.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:4e:e6:b8:2b:ee:a7:78:2f:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=995792e8-61f6-4f3a-8206-3efa5a121a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:cb:dc:67:af:06:e9:49:79:ea:c3:ed:ee:
d0:31:28:b0:f3:f6:56:e6:46:1b:e1:df:bb:c0:f2:
97:99:95:f7:d3:d2:f1:d8:32:95:d9:e5:11:51:1b:
6a:50:54:fe:09:d9:e8:43:92:96:63:3d:cc:a9:9f:
22:25:92:16:5c:45:9a:9f:a8:1e:bd:86:ce:c9:b3:
9f:1b:d9:c0:57:83:ba:a5:7e:06:f4:38:b7:95:b5:
24:1a:b7:26:d5:b0:fa:3f:3d:da:35:ef:7a:bb:6f:
ea:5d:5a:b6:1c:87:e0:85:d8:78:03:ee:48:4c:be:
5d:0c:21:88:9d:1d:1c:3c:ad:81:c6:8b:a1:3d:b2:
e8:02:56:1e:51:3d:6d:4a:84:d1:b1:85:ad:c6:53:
a2:9d:c3:7e:d6:23:a6:f6:18:ef:d5:dc:87:ec:96:
29:ff:3e:08:36:61:72:36:34:70:3d:8f:07:2e:4c:
c2:37:3d:9c:53:30:40:c9:de:1a:9e:03:fc:6f:ec:
21:c0:8b:42:8e:04:e5:52:26:86:48:0f:c1:52:c8:
d2:1b:bd:fc:8b:67:a6:a2:8e:7f:5e:8f:1a:56:41:
fe:26:dc:16:95:90:be:82:e6:42:fd:7f:06:4b:4e:
a4:a8:92:bb:ee:13:a1:47:b8:49:df:21:08:c6:c5:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:B9:10:0B:90:32:BF:2A:45:53:B9:38:BB:B9:CD:11:FB:69:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:fc:ad:37:86:37:27:c9:5f:03:cc:d6:d0:3f:5d:83:55:71:
b6:cd:97:fe:8c:02:64:15:4f:82:55:9c:c6:2f:c9:cc:09:16:
11:f3:a0:69:03:db:f4:e0:38:1a:4a:32:54:78:9a:40:de:2f:
56:47:7d:b5:8a:28:b8:a4:3e:01:bd:1c:b7:8e:cf:2f:fe:82:
e1:55:21:35:06:2b:f6:e8:05:ce:eb:39:cb:23:82:22:41:0b:
f1:d0:f4:7b:f0:59:3b:b0:5a:03:55:5c:fc:4c:3d:60:f4:67:
67:df:86:5d:7b:31:9e:b0:9d:be:bb:81:ba:b4:7d:e2:a5:51:
d9:5d:10:da:03:59:9b:00:f8:0e:63:78:0a:f4:8b:fa:a1:bf:
b2:14:18:46:ee:48:15:fe:e8:a7:99:14:b1:a4:61:b3:f2:d0:
17:e0:51:70:76:19:a9:65:33:b3:2d:fc:13:c8:28:be:47:32:
f8:d1:bb:a7:e3:06:e9:06:b9:98:5a:95:50:70:81:7a:02:43:
b7:9a:ee:89:01:3d:96:72:46:2b:4c:bc:ef:dc:7a:a5:91:06:
af:da:79:cd:ac:36:6a:e1:97:74:0b:84:00:b5:90:39:41:ea:
8b:d4:eb:33:f4:b2:8c:1d:d5:8a:cc:e4:c0:e6:fc:26:7b:58:
59:fc:ad:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE7muCvup3gv/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTk1NzkyZTgtNjFmNi00ZjNhLTgyMDYtM2VmYTVhMTIxYTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuPL3GevBulJeerD7e7QMSiw8/ZW5kYb4d+7
wPKXmZX309Lx2DKV2eURURtqUFT+CdnoQ5KWYz3MqZ8iJZIWXEWan6gevYbOybOf
G9nAV4O6pX4G9Di3lbUkGrcm1bD6Pz3aNe96u2/qXVq2HIfghdh4A+5ITL5dDCGI
nR0cPK2BxouhPbLoAlYeUT1tSoTRsYWtxlOincN+1iOm9hjv1dyH7JYp/z4INmFy
NjRwPY8HLkzCNz2cUzBAyd4angP8b+whwItCjgTlUiaGSA/BUsjSG738i2emoo5/
Xo8aVkH+JtwWlZC+guZC/X8GS06kqJK77hOhR7hJ3yEIxsUjlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBr9uRALkDK/KkVTuTi7uc0R+2nFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYzNjNjcyNWYtZTRlMy0z
MWFjLTkzYTYtZDAyZGRiZjdjNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIm4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/8rTeGNyfJXwPM1tA/XYNVcbbNl/6MAmQVT4JVnMYvycwJFhHzoGkD
2/TgOBpKMlR4mkDeL1ZHfbWKKLikPgG9HLeOzy/+guFVITUGK/boBc7rOcsjgiJB
C/HQ9HvwWTuwWgNVXPxMPWD0Z2ffhl17MZ6wnb67gbq0feKlUdldENoDWZsA+A5j
eAr0i/qhv7IUGEbuSBX+6KeZFLGkYbPy0BfgUXB2GallM7Mt/BPIKL5HMvjRu6fj
BukGuZhalVBwgXoCQ7ea7okBPZZyRitMvO/ceqWRBq/aec2sNmrhl3QLhAC1kDlB
6ovU6zP0sowd1YrM5MDm/CZ7WFn8rf4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:22 2026 by rpki-client