
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa
File: 40d296d1-278c-3f5b-b993-eb056d922ec1.roa (raw, json)
Hash identifier: SRKqdYNsb2WmtCJyyjfx4M9BHCxe16hLvSGWD8a/ogw=
Subject key identifier: 98:F9:DB:B4:B0:7E:3A:9A:72:AE:3A:3B:46:AC:8E:81:BA:8C:60:A3
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584D386A6401C6FBDD3F68A30C20
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 202
IP address blocks: 20.149.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:64:01:c6:fb:dd:3f:68:a3:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=913847f6-acca-4d9d-8f86-43a78209e92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:83:f3:3c:a7:a1:a4:12:64:aa:c3:c4:a3:0d:
ea:ae:f9:ac:62:0b:d4:40:47:e0:93:2b:91:9e:6b:
00:6e:67:0f:05:29:47:83:33:d3:a5:da:32:73:5c:
ec:1d:2b:d2:47:56:b6:04:a3:3d:72:50:3d:4d:b5:
3a:22:19:3c:df:83:b2:ff:86:ae:cf:23:3c:a6:3f:
11:9e:f5:c0:85:b1:c4:bc:52:b8:81:0d:ff:fd:15:
09:50:b2:ed:46:f9:f6:f3:47:b5:8c:0f:58:fa:67:
b9:c7:54:b5:77:94:d3:da:59:d4:a3:5e:ad:98:38:
65:86:a3:82:2a:4c:e3:38:2a:f3:42:8d:f4:8f:53:
93:a4:43:b9:4b:5c:1d:ad:38:15:d1:c5:0b:f2:76:
3e:ad:af:f3:29:2e:c9:d7:31:8d:e5:c7:1f:1f:50:
9f:6d:9a:ad:5c:aa:41:3b:86:c0:e0:de:4a:7b:d6:
8e:4c:48:24:e7:45:b8:37:7c:6a:25:06:a7:13:d9:
7c:aa:82:42:8d:0c:a6:8a:b8:58:62:aa:ad:58:72:
85:5c:fb:78:dc:47:59:85:1c:9e:fd:c7:80:5f:c8:
dd:54:ea:bf:2e:5f:63:a0:be:b5:8a:10:64:f1:f0:
4a:eb:c1:43:93:56:12:27:2b:32:4c:d3:93:a9:c1:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:DB:B4:B0:7E:3A:9A:72:AE:3A:3B:46:AC:8E:81:BA:8C:60:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/40d296d1-278c-3f5b-b993-eb056d922ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.149.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:b2:17:fc:ba:23:ea:86:74:3c:1a:24:82:73:4c:a2:7f:38:
1c:51:65:2c:76:a3:4d:c7:aa:64:12:1c:c2:8a:92:a0:a7:a4:
93:a3:ca:41:f3:a3:08:1e:1e:55:cd:67:5b:1f:c1:45:e1:9f:
ab:8c:4c:1a:7e:50:a2:7a:95:d6:04:67:f7:45:2a:a7:30:5b:
de:2d:26:c8:95:2f:5e:39:bb:c5:27:8d:85:a1:c5:78:ae:fa:
d7:86:f5:9d:98:06:36:f4:71:6e:0d:34:31:42:e5:12:c2:44:
59:8a:1b:22:8f:ce:7e:c5:aa:60:27:2a:f6:bc:e8:55:a3:28:
67:fa:68:9a:20:f8:72:27:60:35:d8:cc:d5:c1:3b:9c:03:48:
e7:ea:b8:43:cf:1e:ad:81:3e:9d:64:e0:7b:5e:9b:8d:95:d4:
31:21:44:a1:e4:ab:1f:19:f4:00:f7:f8:ab:21:4f:13:80:0a:
3e:7c:60:f9:02:b5:3e:a8:78:3d:4f:eb:ed:4d:29:96:a7:e2:
7f:9f:a5:eb:98:3b:f5:cc:08:3e:52:95:48:4c:68:89:4c:03:
b5:20:77:f2:9d:0f:d7:99:c5:fb:05:5b:c5:eb:d1:70:60:26:
6f:5d:29:e1:7d:aa:c9:1e:9f:71:62:b5:67:2e:49:1d:81:90:
39:db:ea:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:47 2026 by rpki-client