
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa
File: e5598c62-5c7b-34dd-9120-6357004878bf.roa (raw, json)
Hash identifier: 1NJ2Y14RyuYbtiUZ1aT3TGY0mYJmPRrrtw8RigeINe8=
Subject key identifier: C2:A9:2C:BA:57:69:6E:47:51:43:B5:B0:3F:FB:A7:C4:60:AC:A3:51
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584AE46127B425A8A85EE0523080
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa
Signing time: Mon 18 Aug 2025 01:00:33 +0000
ROA not before: Mon 18 Aug 2025 01:00:33 +0000
ROA not after: Sun 16 Nov 2025 02:00:33 +0000
asID: 3356
IP address blocks: 20.137.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e4:61:27:b4:25:a8:a8:5e:e0:52:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 18 01:00:33 2025 GMT
Not After : Nov 16 02:00:33 2025 GMT
Subject: CN=0d4bb1fb-79f2-4d84-831a-1e31c0d7b9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:0a:9e:76:38:50:76:eb:1d:dc:6f:30:ef:
33:36:c3:aa:3f:93:78:c3:93:34:52:c2:6d:9e:da:
96:de:db:c8:71:57:ae:b7:e5:22:43:35:0a:92:5b:
3e:3e:c0:38:90:e0:d2:94:88:0c:32:7c:b2:13:fc:
51:46:8d:a1:28:4f:4a:e3:a0:42:fa:d4:4e:c7:ac:
56:0f:89:2c:3d:07:1d:b2:07:48:22:af:32:12:07:
ed:b0:ab:f1:a2:68:c7:6f:34:57:80:5c:14:6e:d9:
f9:9e:c9:0f:94:7b:90:4d:c6:fe:9b:f4:03:fe:89:
09:42:82:73:de:19:be:97:8a:9e:b2:24:cb:75:91:
d1:23:1c:38:b8:4b:dd:28:5b:16:f0:48:d8:08:ee:
b3:84:3f:5e:87:f5:a5:44:fb:b7:0f:ef:33:9d:ef:
00:3b:d7:b6:ad:f0:31:78:23:8f:b5:2b:59:73:d6:
d1:b5:a0:c4:6a:c0:21:97:e1:5a:97:64:51:a1:8c:
97:18:33:63:fd:b9:d5:9b:af:22:8e:28:e8:c8:23:
83:a1:b5:83:02:02:17:db:6d:22:f3:72:ef:a2:d5:
d0:c8:04:bc:4b:6f:0b:5f:86:42:48:04:91:91:8c:
b3:30:46:31:de:b6:47:3f:35:b3:a3:8a:5c:59:36:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:2C:BA:57:69:6E:47:51:43:B5:B0:3F:FB:A7:C4:60:AC:A3:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e5598c62-5c7b-34dd-9120-6357004878bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:71:fd:c3:04:90:00:18:c7:fb:bd:fa:d9:25:fd:c4:dc:c4:
23:74:27:3e:d0:3d:24:a9:c6:64:62:67:22:8c:59:71:ee:98:
47:f4:8e:1c:6a:cb:ba:71:b3:c9:f8:f3:c5:d1:93:f9:65:1a:
94:8b:85:51:cc:cc:cf:e4:7f:c9:8f:5a:7c:1f:ff:f3:58:7d:
d8:a0:29:9c:fd:4e:cc:b2:de:39:2e:76:d1:f7:d3:30:95:d2:
ad:e6:bc:0e:65:1a:df:2d:0a:da:0a:4a:b9:8a:31:28:99:31:
25:ab:81:f7:6e:47:cf:0d:fd:52:88:b0:73:1b:56:4d:3a:92:
fd:0d:5a:87:7d:62:0d:3f:ca:bd:af:db:7a:a6:b0:e6:87:8b:
a4:9c:09:f5:a6:ca:dc:2a:77:49:fd:a8:0e:f6:21:7e:f3:74:
de:eb:0c:66:6b:9a:9b:58:86:cc:4d:51:c1:4e:be:2c:32:65:
74:62:7c:cf:c9:32:d4:5c:7f:0c:89:8e:b2:5b:a1:59:93:9a:
50:e3:2e:0e:37:19:55:ae:8c:bd:29:75:ee:ff:21:57:98:05:
63:e4:6f:0f:f6:75:e4:20:d8:42:25:89:02:36:20:94:ff:22:
10:57:15:ff:7e:c3:52:dd:92:76:1f:b1:a8:86:e6:3e:9a:5f:
9c:f8:72:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSe0JaioXuBSMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
MGQ0YmIxZmItNzlmMi00ZDg0LTgzMWEtMWUzMWMwZDdiOWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthkKnnY4UHbrHdxvMO8zNsOqP5N4w5M0UsJt
ntqW3tvIcVeut+UiQzUKkls+PsA4kODSlIgMMnyyE/xRRo2hKE9K46BC+tROx6xW
D4ksPQcdsgdIIq8yEgftsKvxomjHbzRXgFwUbtn5nskPlHuQTcb+m/QD/okJQoJz
3hm+l4qesiTLdZHRIxw4uEvdKFsW8EjYCO6zhD9eh/WlRPu3D+8zne8AO9e2rfAx
eCOPtStZc9bRtaDEasAhl+Fal2RRoYyXGDNj/bnVm68ijijoyCODobWDAgIX220i
83LvotXQyAS8S28LX4ZCSASRkYyzMEYx3rZHPzWzo4pcWTbVJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKpLLpXaW5HUUO1sD/7p8RgrKNRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTU1OThjNjItNWM3Yi0z
NGRkLTkxMjAtNjM1NzAwNDg3OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIkMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1x/cMEkAAYx/u9+tkl/cTcxCN0Jz7QPSSpxmRiZyKMWXHumEf0jhxq
y7pxs8n488XRk/llGpSLhVHMzM/kf8mPWnwf//NYfdigKZz9Tsyy3jkudtH30zCV
0q3mvA5lGt8tCtoKSrmKMSiZMSWrgfduR88N/VKIsHMbVk06kv0NWod9Yg0/yr2v
23qmsOaHi6ScCfWmytwqd0n9qA72IX7zdN7rDGZrmptYhsxNUcFOviwyZXRifM/J
MtRcfwyJjrJboVmTmlDjLg43GVWujL0pde7/IVeYBWPkbw/2deQg2EIliQI2IJT/
IhBXFf9+w1LdknYfsaiG5j6aX5z4cpE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:42:40 2025 by rpki-client