
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa
File: da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa (raw, json)
Hash identifier: u5Ptf9qhFZj/wEMZL+mhVmTXvKESEu84zLjJ7V7k0Jc=
Subject key identifier: BB:1D:BA:32:F0:3E:74:97:0B:A4:37:EE:2B:AD:19:CB:CB:82:74:98
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EA44516E16923762573813580
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa
Signing time: Mon 27 Jul 2026 21:00:11 +0000
ROA not before: Mon 27 Jul 2026 21:00:11 +0000
ROA not after: Sun 25 Oct 2026 21:00:11 +0000
asID: 3360
IP address blocks: 20.137.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:45:16:e1:69:23:76:25:73:81:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 27 21:00:11 2026 GMT
Not After : Oct 25 21:00:11 2026 GMT
Subject: CN=771cd989-9a90-41eb-b2b6-ccafc40bc54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:a4:7c:49:5c:62:70:cd:03:c9:b0:1d:d5:
a8:62:c0:1c:1e:22:fd:12:cd:76:de:14:2b:71:92:
49:67:4a:6a:3a:27:bf:d9:65:00:12:f3:4a:5e:50:
fd:c3:0c:c9:5e:20:23:90:74:71:17:16:74:01:c2:
4a:19:4d:d2:e7:ff:12:ef:f6:7c:ca:9e:e3:21:a8:
39:35:c3:ad:aa:d2:f0:57:16:f3:59:6e:34:d2:98:
65:cd:aa:40:c5:71:cb:38:c5:93:0c:bd:d2:b9:23:
94:75:51:42:c3:f4:f8:5e:55:84:18:01:77:5c:50:
46:26:c4:56:9f:ae:1d:67:ca:16:26:56:13:01:a7:
aa:98:c8:be:d1:d6:b9:5c:16:aa:c0:1b:e8:3b:8b:
5f:1f:ce:3c:ba:dc:be:dd:2e:ae:c2:5f:c3:1a:66:
f5:72:08:4b:43:97:31:0a:38:de:c4:b7:53:de:f8:
aa:9b:5a:31:7f:3b:97:05:eb:d4:85:dc:8c:7c:97:
15:78:7a:8d:e1:89:46:56:8d:df:4f:84:6f:d0:d6:
b9:81:4a:b1:12:fe:67:a3:12:0c:17:a5:3b:34:fd:
44:fb:1e:0f:f8:0b:03:a5:f4:13:8f:5b:95:6b:3b:
8c:a9:44:39:b8:81:45:c3:cc:77:89:4e:e1:68:74:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:BA:32:F0:3E:74:97:0B:A4:37:EE:2B:AD:19:CB:CB:82:74:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/da39c797-9af4-3d71-bfa2-5c4fc0b475b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:91:40:de:ce:23:62:c8:e3:d4:ee:11:71:d9:e7:3c:ae:a5:
ff:3f:68:bf:e2:1e:a9:0b:b7:9f:38:df:9a:86:84:61:fc:0f:
ca:b3:cc:c2:50:fe:63:dd:77:7d:27:8e:67:87:d4:49:d8:46:
54:53:14:69:f7:d7:2c:99:b9:c4:f6:8e:df:9b:1f:5e:04:71:
5b:36:7d:9c:ed:51:7c:b1:3a:e5:cf:d9:12:b6:27:21:f5:af:
eb:06:7f:db:a5:1f:fb:0b:4e:f9:ea:7a:5b:b6:f0:70:50:5e:
94:59:79:b4:54:c2:48:dc:04:db:9e:83:bf:a9:cc:87:8f:07:
ab:38:2e:85:8d:03:cc:f3:ac:bf:d8:47:1f:f8:b0:4d:8c:95:
fc:bb:ca:4b:90:9d:af:29:34:14:85:f6:40:63:38:ca:df:52:
91:bd:ae:b8:37:54:42:a2:96:57:fc:49:73:90:9d:e4:83:3b:
72:26:79:7b:79:d0:87:0f:c7:4d:41:01:8d:ac:05:6b:42:4c:
44:45:f1:a0:32:2e:37:40:49:c5:ac:7e:08:08:8e:1a:42:9f:
c8:87:ee:a1:34:91:ba:8f:fe:b3:2d:60:88:ee:9e:7f:a0:ef:
53:81:31:6f:da:17:50:f5:0d:34:e4:9f:be:57:20:9b:0a:99:
81:f1:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:16 2026 by rpki-client