
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa
File: da015e1a-f458-3674-9325-2b4dbacc74f1.roa (raw, json)
Hash identifier: kCVcb6yCXZb8oqg6c/IzrAtTVom6iuuY5dJO/yzuWtc=
Subject key identifier: 99:81:BB:D4:89:3C:91:BF:A9:82:91:1C:FE:27:72:19:F5:6C:40:E6
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DF4DB5FBA02B1BA9740CD9380
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 3360
IP address blocks: 20.133.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:5f:ba:02:b1:ba:97:40:cd:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=ae1351b6-7db8-470c-bfc8-fa464cc1ab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:28:2b:20:e4:80:98:76:a3:71:5d:0a:bc:
fc:6b:96:d9:8c:e8:12:5a:aa:f3:27:99:18:78:f1:
ce:71:36:00:e3:98:76:0b:fd:56:75:06:16:44:82:
e6:1f:aa:88:81:1c:1c:f3:04:bd:22:92:23:e7:86:
23:0e:2d:42:e5:bc:0e:5c:a3:b8:87:45:4c:cf:91:
da:af:8a:0b:9c:36:a0:69:c5:b7:43:fe:ee:65:92:
f0:03:34:20:66:1c:84:7d:53:1e:4a:6d:c3:20:27:
77:8a:e4:9e:8a:a8:72:08:e1:5f:00:3f:e2:cc:11:
30:48:73:76:bf:e9:56:ea:5b:2c:55:df:a9:13:18:
54:73:e1:36:2b:34:4d:ea:ad:b6:4b:8e:15:8c:a6:
70:b5:cf:af:47:e4:9c:a9:5f:f1:52:50:c6:fb:ca:
66:c8:f7:95:3b:91:bf:f4:3b:bc:44:0d:ec:68:45:
f3:d3:08:b4:b1:2d:99:9b:14:ec:e9:0c:c4:d8:39:
4d:2b:4d:6b:9f:d7:cc:33:fa:7e:c4:8d:83:ed:b5:
03:fc:8a:90:f9:8f:0c:23:7e:39:25:3c:c5:92:95:
8d:08:69:9d:8d:48:24:cb:b2:a8:27:88:6f:2c:7c:
f8:67:eb:66:77:67:55:bc:1f:3c:f3:2a:cf:65:e6:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:BB:D4:89:3C:91:BF:A9:82:91:1C:FE:27:72:19:F5:6C:40:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da015e1a-f458-3674-9325-2b4dbacc74f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:13:97:da:2c:b9:17:5b:6a:91:dc:d8:57:70:c9:84:b4:c8:
bc:31:d9:1c:d7:13:aa:58:bb:0c:d1:64:35:9b:76:f0:4e:57:
8d:3e:4e:a8:9c:58:a4:fc:6b:13:d7:87:2c:92:d7:b8:b3:1d:
f9:2c:d7:40:5a:00:b9:3b:45:6f:fd:93:64:dd:ca:e5:cb:c0:
c5:65:6f:13:58:d5:5c:42:3d:eb:74:2b:27:84:c3:66:62:e8:
b4:aa:bc:89:df:ec:d6:77:69:f8:0b:22:ee:ae:6f:10:db:7f:
84:58:5e:71:80:5f:95:eb:8e:7b:de:0c:2a:84:e1:b9:8a:25:
70:cb:51:0f:96:dd:07:17:66:cb:b1:88:f2:47:44:8f:8b:ec:
3c:ce:26:25:cb:62:19:81:0d:7e:d2:a0:ca:6c:21:7f:ef:6b:
f0:99:33:5a:e3:4d:24:96:8a:77:3d:88:9f:31:a7:d4:48:34:
60:1f:c1:20:f0:c4:fe:c3:b3:39:10:49:30:0c:6a:0a:52:2d:
49:52:85:9a:a2:26:d7:9c:c8:91:23:8a:9f:70:d6:25:e8:e4:
13:10:c7:7a:7f:0f:c5:f3:83:07:15:03:e7:9b:56:85:b6:c0:
28:b1:32:c3:c6:af:df:16:7b:ec:db:18:ec:47:12:d6:81:6c:
91:10:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:12:20 2026 by rpki-client