
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3430c3e3-186e-3bd1-8ebb-63c0d4241e35.roa
File: 3430c3e3-186e-3bd1-8ebb-63c0d4241e35.roa (raw, json)
Hash identifier: LDVMb0oo/CtAblKw30lUI475X6S5VEOf0+lNXdB7gzw=
Subject key identifier: 4C:71:0B:9A:E8:19:0E:62:4B:E8:5C:85:3E:E4:B5:DD:75:25:A7:C2
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DA81591F2EACF65766D690620
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3430c3e3-186e-3bd1-8ebb-63c0d4241e35.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 203
IP address blocks: 20.149.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:91:f2:ea:cf:65:76:6d:69:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=64452f44-dde3-4f98-b0fd-fff5912e3eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:a5:ea:bc:a3:3c:d4:55:e6:42:10:06:d0:
78:48:f8:af:37:07:a7:22:e9:fe:ed:16:db:a7:c3:
1a:dd:4e:59:e7:e8:8b:73:c8:cc:c1:69:47:65:99:
a3:6e:63:a7:38:82:ba:3b:3e:0d:b8:27:38:72:0a:
5f:8c:a2:a8:cd:a5:32:b3:db:3b:d1:6c:32:60:94:
6a:3b:58:9c:80:0f:5b:5a:3c:1e:51:33:37:de:32:
98:31:31:45:9b:66:7d:bc:fe:34:ce:8f:17:d6:33:
3b:7b:e4:ac:c0:4d:82:1a:e0:07:98:1a:98:6a:99:
0a:d4:46:fe:57:a7:33:7a:0f:05:79:27:61:0e:b7:
2d:19:d1:a1:f8:c7:5a:ca:2b:46:a1:cc:f3:8d:cb:
ca:ca:a7:0c:70:dd:e5:27:90:bf:1c:43:af:8c:60:
c7:53:f9:fe:77:d9:34:b7:3a:c6:bf:05:3d:19:ce:
71:c4:df:d4:57:ca:80:df:27:9b:0c:1e:98:7c:11:
1e:6d:48:31:71:c4:6a:33:65:95:73:27:19:67:36:
76:3c:bb:98:28:03:87:ca:87:98:c6:57:ec:33:a7:
34:49:ff:2e:43:eb:38:0e:c4:33:49:8c:87:79:a1:
e2:0b:6b:ac:e7:0f:8b:4c:9e:9c:5b:91:64:12:18:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:0B:9A:E8:19:0E:62:4B:E8:5C:85:3E:E4:B5:DD:75:25:A7:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3430c3e3-186e-3bd1-8ebb-63c0d4241e35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.149.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:b5:81:0b:d0:ad:57:7b:1e:ea:be:0b:3e:e7:c5:99:ef:89:
11:7b:0d:a1:5a:69:11:55:53:7f:41:52:ef:73:45:cd:73:9b:
f9:e8:dd:19:c7:81:df:fd:b0:3f:8d:99:43:34:00:6b:a8:a8:
53:2b:39:42:73:9d:6f:72:30:e0:b2:7d:5e:53:c4:01:39:7a:
8b:92:63:c3:2a:77:2b:cb:4b:39:39:01:b1:96:87:3c:e3:9a:
c9:23:25:70:b7:2c:e3:a4:98:d5:fb:a0:1d:48:9d:9b:97:96:
79:87:61:19:f8:d2:05:f1:ff:09:79:b0:6d:b8:b2:d8:45:fb:
93:88:c6:38:2d:8f:e3:58:68:6d:7e:59:9e:0c:68:4e:5e:ef:
8a:95:98:2c:a7:2e:6e:f0:d1:8d:ed:d5:1d:bc:0a:2f:f6:d8:
de:47:bb:63:42:b1:2a:21:19:49:cf:50:33:2f:5d:38:dd:19:
83:51:eb:20:fc:dd:82:34:03:be:b3:79:a3:a8:2c:ef:f6:43:
66:15:63:f3:d9:d4:48:d4:a6:81:ce:9b:3d:2a:71:ed:cd:2b:
57:8f:32:2b:9b:f4:40:01:e2:74:0e:a3:69:e5:d2:a7:60:ff:
d9:c0:a0:e1:47:bf:67:ce:03:c2:13:e4:b8:1d:b3:1d:d5:41:
cf:fc:23:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFZHy6s9ldm1pBiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
NjQ0NTJmNDQtZGRlMy00Zjk4LWIwZmQtZmZmNTkxMmUzZWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pel6ryjPNRV5kIQBtB4SPivNwenIun+7Rbb
p8Ma3U5Z5+iLc8jMwWlHZZmjbmOnOIK6Oz4NuCc4cgpfjKKozaUys9s70WwyYJRq
O1icgA9bWjweUTM33jKYMTFFm2Z9vP40zo8X1jM7e+SswE2CGuAHmBqYapkK1Eb+
V6czeg8FeSdhDrctGdGh+MdayitGoczzjcvKyqcMcN3lJ5C/HEOvjGDHU/n+d9k0
tzrGvwU9Gc5xxN/UV8qA3yebDB6YfBEebUgxccRqM2WVcycZZzZ2PLuYKAOHyoeY
xlfsM6c0Sf8uQ+s4DsQzSYyHeaHiC2us5w+LTJ6cW5FkEhjg7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExxC5roGQ5iS+hchT7ktd11JafCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzQzMGMzZTMtMTg2ZS0z
YmQxLThlYmItNjNjMGQ0MjQxZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE61gQvQrVd7Huq+Cz7nxZnviRF7DaFaaRFVU39BUu9zRc1zm/no3RnH
gd/9sD+NmUM0AGuoqFMrOUJznW9yMOCyfV5TxAE5eouSY8MqdyvLSzk5AbGWhzzj
mskjJXC3LOOkmNX7oB1InZuXlnmHYRn40gXx/wl5sG24sthF+5OIxjgtj+NYaG1+
WZ4MaE5e74qVmCynLm7w0Y3t1R28Ci/22N5Hu2NCsSohGUnPUDMvXTjdGYNR6yD8
3YI0A76zeaOoLO/2Q2YVY/PZ1EjUpoHOmz0qce3NK1ePMiub9EAB4nQOo2nl0qdg
/9nAoOFHv2fOA8IT5Lgdsx3VQc/8I0g=
-----END CERTIFICATE-----
Generated at Wed May 13 16:13:29 2026 by rpki-client