
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
File: 20885ce4-5a76-39c3-86d6-c90d2b265830.roa (raw, json)
Hash identifier: RPFt3GUdDLqXkmn8X5x4KNaSkVsDd+AY5ZvuIK+RYVM=
Subject key identifier: 12:E9:8F:C9:2D:79:CB:44:21:49:C5:CF:DB:AE:9A:82:59:A6:52:35
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F4328584F2EED15AA180168AC8059C480
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
Signing time: Tue 15 Sep 2026 13:00:12 +0000
ROA not before: Tue 15 Sep 2026 13:00:12 +0000
ROA not after: Mon 14 Dec 2026 14:00:12 +0000
asID: 394285
IP address blocks: 174.137.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2e:ed:15:aa:18:01:68:ac:80:59:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Sep 15 13:00:12 2026 GMT
Not After : Dec 14 14:00:12 2026 GMT
Subject: CN=a51c912b-93c4-4627-9b2f-68767360c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:7d:ea:00:6d:a4:c8:77:26:3e:27:ac:4f:
a7:a1:7d:0e:0b:9f:c0:34:0c:c0:00:48:c3:d1:8d:
c0:98:31:24:5d:40:d1:54:f5:b3:92:b4:04:6a:b6:
39:b6:3e:a3:de:4c:ae:0e:07:8d:03:38:5a:15:99:
c4:27:2e:d6:00:76:6a:e8:21:33:48:b0:61:43:e5:
86:28:ee:b2:13:72:ae:5c:70:18:15:71:05:09:7b:
57:92:76:0f:57:fa:df:e5:a0:09:f7:ed:3e:e9:68:
f8:57:db:b1:b5:1f:8d:4b:15:de:f8:08:f1:e8:f1:
fc:6e:69:63:a7:e5:08:59:20:62:7e:51:55:03:98:
f9:96:b0:8d:a0:33:28:5f:4a:6a:a7:42:43:cd:5d:
68:bd:89:99:03:70:7b:75:e4:ee:a2:3a:0f:aa:d9:
8b:c8:39:4a:1c:c7:43:81:5e:d2:f6:2d:9d:fb:5e:
a2:41:a0:8f:cd:0e:45:d3:37:40:3c:bb:20:4b:e4:
5a:62:20:67:b9:50:36:a2:50:61:a1:a9:9f:b0:9c:
6c:72:39:75:96:3b:e6:68:d5:36:52:ef:b2:cc:e0:
63:d1:29:a7:00:4d:67:47:18:0e:88:6d:ab:ef:23:
d3:5e:b3:fe:7c:67:7b:a5:ed:9d:1a:fa:0d:70:78:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:8F:C9:2D:79:CB:44:21:49:C5:CF:DB:AE:9A:82:59:A6:52:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:d3:ae:5c:5c:e7:81:7f:14:df:65:a0:62:c8:d4:4e:e6:e7:
88:3e:1b:cc:5e:c0:11:52:9e:0b:21:d6:60:3e:7d:3a:a7:39:
49:3d:cb:42:4d:5a:54:13:c4:21:4f:e1:06:9c:ab:76:a4:90:
df:64:19:ba:b4:bc:c2:6b:82:86:e3:c0:dd:9f:6a:ac:9f:3b:
f3:c5:8c:40:b7:ff:3c:b5:7d:de:ac:00:e2:51:ec:34:fa:10:
f4:c3:e2:d3:47:0f:a3:e7:11:23:40:07:a2:1a:49:c4:dc:70:
b5:01:0f:07:d2:90:e3:e2:29:14:3b:5c:28:5a:e7:37:c0:a4:
51:e7:1d:9a:5c:24:07:6d:ff:4b:1e:0a:31:15:e9:6f:74:84:
c2:05:80:80:15:09:ac:98:54:e6:9d:ab:50:9d:c3:8f:7f:1c:
cc:38:7e:59:86:73:c7:65:d6:8f:34:a2:50:11:68:fb:e6:26:
8b:8f:e7:11:89:e8:a5:d2:7d:92:88:63:c1:11:ed:e0:e1:95:
50:31:3e:e5:72:85:a4:85:b9:05:88:7f:30:ae:00:14:f3:a3:
84:43:a5:26:24:44:e4:5f:9d:e9:ba:98:36:ae:02:f9:41:4b:
8d:7e:9c:52:e4:f1:cf:11:77:11:2c:94:72:52:7e:4a:25:a2:
1d:0f:1c:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RWqGAForIBZxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk
YTUxYzkxMmItOTNjNC00NjI3LTliMmYtNjg3NjczNjBjOTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBl96gBtpMh3Jj4nrE+noX0OC5/ANAzAAEjD
0Y3AmDEkXUDRVPWzkrQEarY5tj6j3kyuDgeNAzhaFZnEJy7WAHZq6CEzSLBhQ+WG
KO6yE3KuXHAYFXEFCXtXknYPV/rf5aAJ9+0+6Wj4V9uxtR+NSxXe+Ajx6PH8bmlj
p+UIWSBiflFVA5j5lrCNoDMoX0pqp0JDzV1ovYmZA3B7deTuojoPqtmLyDlKHMdD
gV7S9i2d+16iQaCPzQ5F0zdAPLsgS+RaYiBnuVA2olBhoamfsJxscjl1ljvmaNU2
Uu+yzOBj0SmnAE1nRxgOiG2r7yPTXrP+fGd7pe2dGvoNcHhD3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLpj8ktectEIUnFz9uumoJZplI1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMjA4ODVjZTQtNWE3Ni0z
OWMzLTg2ZDYtYzkwZDJiMjY1ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALDTrlxc54F/FN9loGLI1E7m54g+G8xewBFSngsh1mA+fTqnOUk9y0JN
WlQTxCFP4Qacq3akkN9kGbq0vMJrgobjwN2faqyfO/PFjEC3/zy1fd6sAOJR7DT6
EPTD4tNHD6PnESNAB6IaScTccLUBDwfSkOPiKRQ7XCha5zfApFHnHZpcJAdt/0se
CjEV6W90hMIFgIAVCayYVOadq1Cdw49/HMw4flmGc8dl1o80olARaPvmJouP5xGJ
6KXSfZKIY8ER7eDhlVAxPuVyhaSFuQWIfzCuABTzo4RDpSYkRORfnem6mDauAvlB
S41+nFLk8c8RdxEslHJSfkoloh0PHJs=
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:16:31 2026 by rpki-client