
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6c0c944-d7b9-3e98-8022-042a749262e1.roa
File: e6c0c944-d7b9-3e98-8022-042a749262e1.roa (raw, json)
Hash identifier: LnnQt49cWFszVIm+65b56Ddh+g6AOrpzMJKWfT2xmNc=
Subject key identifier: 45:4B:8E:8C:F0:CA:F7:E1:49:39:C3:2F:2E:AA:46:17:7F:78:7C:AA
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EA7884F8AF99C002B73C991A0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6c0c944-d7b9-3e98-8022-042a749262e1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 202
IP address blocks: 20.137.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:4f:8a:f9:9c:00:2b:73:c9:91:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=646c1e78-e5a6-4394-842d-5d376615f5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:1e:3b:d2:f6:56:1a:9e:4a:34:40:bc:61:
e8:2e:19:b3:e2:61:42:1b:db:cc:a3:f0:03:ba:3a:
5c:82:0f:f3:bc:11:fa:9f:78:9a:7d:31:20:1c:fe:
85:26:29:c1:63:75:82:e2:1d:c9:7b:7d:a1:77:40:
e9:31:80:d7:29:ba:7c:4d:f4:7e:cd:5b:df:d6:74:
db:e3:57:8c:50:fb:54:0d:4a:4f:dc:d5:62:2e:d8:
9c:14:a4:96:39:12:d8:d4:eb:7b:eb:1d:cb:17:57:
34:36:3d:96:8d:b0:73:9b:5f:85:1e:98:ec:ea:73:
78:f6:82:47:88:7a:3f:6a:69:46:0d:e9:22:53:59:
1e:cc:2e:43:78:71:b3:06:20:b6:60:fa:89:26:c5:
73:d1:84:fe:28:c9:8b:2c:63:23:79:79:62:64:b0:
83:e5:96:44:bb:d9:21:a1:75:99:83:ac:6a:2e:f3:
8f:f5:dc:2d:1c:53:c6:88:94:28:51:1f:e3:ca:5c:
73:1c:e6:2e:ec:ee:a9:75:e8:ff:c7:21:38:6b:95:
85:8f:e9:5e:1b:da:5a:e1:4f:62:43:ee:66:22:57:
ae:4a:58:dc:0a:c7:98:71:2e:64:3a:7d:e5:49:01:
48:47:e1:aa:9a:4b:74:ac:dd:1e:15:06:d8:8c:88:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:8E:8C:F0:CA:F7:E1:49:39:C3:2F:2E:AA:46:17:7F:78:7C:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6c0c944-d7b9-3e98-8022-042a749262e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ac:7e:86:47:6d:8f:8f:35:4e:46:77:bd:1f:d4:56:5e:73:
c3:ee:85:95:81:ff:d8:cc:b6:33:fb:23:63:8a:f9:fb:2a:63:
8a:e5:30:31:03:85:64:80:d9:09:c4:41:ab:10:e6:8c:f1:51:
13:b8:32:be:a0:63:e8:04:08:4e:d1:1b:80:f5:90:fa:5a:3e:
f2:5e:1e:22:6e:3e:59:30:8b:7d:66:41:f7:98:eb:4c:66:25:
73:ca:c1:3e:e5:ff:07:96:fa:00:7c:2d:d6:70:97:59:7c:74:
5e:5d:b9:be:44:7f:46:c3:f1:62:64:37:8b:28:8a:f7:81:c3:
0c:db:41:75:f7:b5:47:28:81:3c:4f:c3:fd:88:3b:43:f2:48:
59:06:4a:53:95:bd:0d:6a:14:95:2e:89:85:83:cb:ee:66:c1:
9e:e4:d4:60:d5:49:18:6e:fd:6e:da:ce:95:8c:a2:62:f8:3e:
0f:e4:44:ef:58:24:5c:50:7b:8d:4e:bc:8d:0e:4b:e0:b7:2f:
20:ee:6b:b6:9d:20:52:4c:d0:d7:31:ea:c2:0c:ad:59:fa:2b:
9f:2a:fb:f0:af:25:22:d0:3d:00:8a:2c:54:87:77:2a:06:b0:
29:49:11:af:6e:85:24:9b:63:88:23:18:34:ff:99:81:06:21:
2a:48:18:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:00 2026 by rpki-client