
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa
File: 3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa (raw, json)
Hash identifier: xO9Y9urxdn+iySHVnOx5zzeuBceRsmyTSHqfVOmJXPc=
Subject key identifier: C2:E5:1B:60:65:F1:C9:D9:80:E5:C7:B1:94:6E:14:41:7D:C8:71:DD
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584E3A2F3045AEA0EF635B7C2580
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa
Signing time: Fri 19 Jun 2026 21:00:12 +0000
ROA not before: Fri 19 Jun 2026 21:00:12 +0000
ROA not after: Thu 17 Sep 2026 21:00:12 +0000
asID: 3356
IP address blocks: 20.154.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3a:2f:30:45:ae:a0:ef:63:5b:7c:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jun 19 21:00:12 2026 GMT
Not After : Sep 17 21:00:12 2026 GMT
Subject: CN=3b612128-6da8-4c8b-b018-5b1317623dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:96:b5:6b:65:46:cd:45:4e:6f:8c:c4:02:
9e:44:03:54:16:8a:b7:94:b2:f0:7f:44:c3:b6:85:
1b:4e:05:93:16:6c:11:e6:59:07:de:16:b6:de:d4:
cd:10:33:c2:b3:c8:e3:26:fa:b4:38:34:e7:8b:07:
ba:f9:aa:61:b5:96:1c:18:4b:8b:ec:e1:d7:7b:80:
dc:f7:08:d3:d7:62:3f:72:fc:d2:a2:4e:45:0b:c7:
c2:fd:39:f3:3f:12:cc:5a:bc:2a:26:24:9d:60:47:
03:c4:1a:cd:ed:8e:25:b8:76:e3:73:94:28:52:33:
1c:0a:f8:ed:66:74:3a:2b:7b:53:b6:e1:00:1c:65:
ac:76:5a:03:57:bc:c9:f1:01:e4:27:a6:f6:b3:c0:
e7:2a:c0:7c:bc:4b:81:84:0c:c6:b4:c4:da:ca:cf:
a8:cd:79:81:a5:39:e5:8c:dd:4d:6b:7d:78:1c:65:
d6:aa:41:e1:c7:e3:87:a3:39:bc:74:ee:3e:30:89:
4e:fa:4f:6a:a2:5d:03:7a:a2:39:84:2e:5f:a4:0e:
d0:69:4b:e6:48:22:20:97:a1:01:14:73:49:2f:59:
08:b5:d7:9e:40:9b:41:e3:bc:76:a7:a5:8c:59:d3:
8d:f5:d7:a6:90:5e:d6:ee:d9:4a:d2:df:79:61:be:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:1B:60:65:F1:C9:D9:80:E5:C7:B1:94:6E:14:41:7D:C8:71:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3e7f0249-a1cb-3df7-bb1e-e9cbf78f1371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.154.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:e0:06:fb:63:3b:e2:f9:0d:26:dd:d1:b1:51:d7:07:91:04:
8d:bd:f7:c9:2e:42:56:29:8b:05:6d:c4:e4:e7:f9:e6:11:43:
37:91:f7:8e:ff:9b:71:11:f9:c1:39:41:cf:7e:ac:37:ab:4e:
23:a4:d3:29:58:f7:9f:d4:fe:f4:5d:66:79:17:df:a7:47:18:
15:87:f6:01:67:f7:f5:57:4a:9c:63:be:2b:94:03:22:b7:2c:
c0:bc:39:e3:2a:0b:8b:f8:ef:ea:8d:3e:44:21:7e:53:2d:b4:
05:8f:ee:9d:de:e1:b0:84:87:d9:04:7d:90:54:50:80:c4:10:
8f:7a:73:14:08:66:e3:b0:55:3f:7a:73:71:db:58:e2:8d:ce:
77:8d:da:f0:25:db:33:c3:50:b4:68:86:e2:70:17:30:8d:11:
17:02:d9:ce:e5:59:b3:3e:b5:75:73:cb:59:83:65:30:67:54:
31:05:d9:9c:e1:2a:7f:f6:0f:33:11:fb:e2:a1:49:31:e8:7c:
ba:d3:9b:0d:f7:81:43:89:cc:ad:80:11:be:41:4d:ab:32:64:
93:e3:94:bf:24:cb:99:4a:f0:00:6b:50:7c:22:01:1e:44:51:
4d:bf:f3:8a:28:ff:c2:36:c4:b0:0d:49:41:3c:63:2c:2d:32:
b6:8f:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:08:41 2026 by rpki-client