
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
File: eb471c00-32d7-3573-995f-88d34ebe19a9.roa (raw, json)
Hash identifier: lWThWX3wlHZudHx+a3RIWXiNRzIqHExxDzK6GIM1k0Q=
Subject key identifier: 86:AD:3A:8A:66:7A:E7:09:C5:75:39:6F:47:39:F5:86:09:3F:D6:A6
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584EA7884F965A9E1BB309F0B0C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 203
IP address blocks: 20.137.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:4f:96:5a:9e:1b:b3:09:f0:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=98556ee1-8790-4a11-8921-cccfe3266070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:9e:74:49:85:92:f8:d7:22:dc:09:07:c9:
5b:4b:ef:c1:12:4a:d1:e9:9b:0a:99:9e:1c:4f:90:
84:c4:0e:25:14:0e:16:60:f9:ae:bf:87:7a:7e:a6:
25:52:57:2b:5e:fa:df:be:50:b0:cb:bd:f6:16:f5:
c7:7e:88:51:31:68:fc:64:5f:4e:5a:32:0e:0d:be:
04:77:6b:04:bb:f8:42:c7:9a:74:5c:f6:4d:5e:df:
a5:b4:9b:12:d1:f2:03:63:ad:c6:28:82:78:04:2d:
d3:22:e6:59:e1:4d:eb:0f:fc:87:0b:08:ac:2e:4b:
23:30:70:09:72:ec:c2:12:8b:a8:60:1b:a7:82:45:
51:26:65:5a:7e:f3:96:7e:25:c3:dd:2f:e8:a7:00:
a6:22:0b:fe:20:8e:53:bf:65:b9:a9:0f:53:8e:fd:
d8:6f:ac:d2:9e:29:ef:1a:14:d9:5d:32:75:a0:b5:
62:9d:5a:25:41:92:c2:9b:c3:c4:14:97:b5:c7:7d:
fa:39:84:0c:83:1d:dd:d4:28:56:a9:52:c7:19:5e:
a9:0d:64:3a:fb:82:68:f3:2f:cc:47:8e:62:cf:13:
58:68:76:ad:c0:91:55:a5:e1:bb:c8:a6:44:00:04:
8d:19:cd:c5:81:87:23:f3:8a:ff:8f:94:98:44:14:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:3A:8A:66:7A:E7:09:C5:75:39:6F:47:39:F5:86:09:3F:D6:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:95:90:9c:83:57:fb:bd:12:20:84:68:2f:4b:d2:0f:9c:67:
44:5e:ed:bc:ae:2f:3b:73:69:05:dc:2f:14:8e:cc:d3:e3:80:
f6:f4:42:d5:6c:ab:42:33:ca:8d:77:59:b3:af:37:dd:94:6b:
e5:b6:b5:f2:67:83:61:85:d5:a0:32:dc:ed:55:e3:0f:26:74:
4b:75:5d:9c:95:af:2c:6e:8c:6f:bb:00:70:59:8c:cb:f3:d8:
28:8f:7d:a3:8b:d6:bd:37:14:34:ac:c4:1a:a8:ee:ab:d4:05:
13:99:d7:b1:95:26:f6:93:fe:20:6c:42:ff:56:5d:98:33:62:
44:27:37:3e:02:8b:55:2e:bb:d3:4a:2a:db:fc:8e:fa:8e:55:
68:6a:2e:02:dd:29:38:d9:54:4d:2a:d7:89:83:63:b8:32:bd:
1c:2d:b3:c1:ef:c4:c4:f4:8a:29:15:63:c3:fb:50:2d:67:b6:
aa:53:fc:a1:e5:bb:15:93:d4:eb:b8:c6:e1:5f:2f:51:5e:ee:
4b:a8:97:81:f9:85:b9:85:89:af:4a:f1:3b:ad:bc:dd:c3:78:
31:a1:ad:5d:3d:72:ac:64:36:2d:33:20:2d:55:7c:e4:c4:6a:
17:d1:44:d1:41:f3:e2:fa:39:1e:0d:5e:b8:25:01:3c:ae:b1:
52:34:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:40 2026 by rpki-client