
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa
File: 57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa (raw, json)
Hash identifier: uFFVVCTHt3aC6SIPI+cFlJIIqpUiwYvg8E4Db99ZfSg=
Subject key identifier: A1:40:E9:88:25:39:99:4D:9C:27:94:5B:97:0B:30:E6:45:D3:67:A7
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584F4975E5E98D9AF3DE1F5D2C40
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 3356
IP address blocks: 20.137.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:e5:e9:8d:9a:f3:de:1f:5d:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=dc3bb426-e9fa-44de-b501-62186c880432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:4c:36:d9:97:c5:8a:43:cd:04:10:0d:52:
a2:47:ab:34:3c:d3:9e:64:0b:6b:80:de:c9:56:f0:
e5:fe:4d:cf:36:1b:51:fa:bd:a5:0c:6f:ab:bc:2d:
a1:ec:0e:ba:81:ad:e6:e5:57:0c:b0:36:be:31:69:
89:50:f4:d1:98:01:1e:01:8c:c8:a0:a7:7f:1a:c3:
8c:db:d5:bc:ff:8a:d3:4d:f4:32:0a:cc:6b:7a:d8:
52:99:f1:d1:8a:50:21:f9:1b:0a:15:ca:83:69:de:
7c:a9:0a:e0:ea:4f:68:3f:f1:2d:a8:bb:4d:39:34:
b0:bc:ae:0a:ff:2a:6b:63:f9:ab:75:81:20:c8:2a:
b5:43:c5:8c:84:60:8c:f3:48:15:f1:12:71:a4:be:
1a:67:45:a3:f6:f9:db:6b:ef:b9:c8:8a:a2:2b:b5:
c3:bd:2c:c6:b9:ef:89:48:f0:47:a3:aa:45:43:b6:
7f:6c:e5:f5:64:b1:40:55:68:a0:3a:4b:7f:56:6b:
bb:17:46:2c:83:01:b0:94:e0:38:35:5c:3a:94:a7:
e2:e4:11:c0:ff:eb:e4:fe:de:22:57:4a:bf:fb:dc:
ac:b8:9e:81:2e:f9:e5:d9:a1:3b:c3:f6:6a:86:c8:
f9:a7:3c:30:16:1f:21:f1:96:25:66:37:db:90:50:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:40:E9:88:25:39:99:4D:9C:27:94:5B:97:0B:30:E6:45:D3:67:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/57ffd1e6-b14a-37b0-9cfa-d1f48aeec9b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a6:3e:b9:f4:82:2d:ef:73:8b:ee:28:d7:10:e9:9c:08:43:
b8:f8:43:5d:ba:11:eb:11:00:4d:05:cf:5b:95:a0:bd:a3:ef:
41:b2:44:b7:ee:1f:f3:8c:93:53:08:f0:80:71:f3:91:4f:2e:
b2:58:4b:2d:10:c2:46:bb:55:e4:44:e4:ba:14:1f:fc:27:40:
10:64:a4:56:87:9d:2d:7e:84:9a:bc:a8:53:6f:91:1f:a3:fd:
10:b1:60:8c:e7:4b:89:eb:15:87:d4:4b:c3:19:0c:23:c2:ec:
c7:97:b2:a5:e9:ea:0e:61:27:56:b8:d3:52:b0:34:db:54:e1:
74:38:55:15:b4:52:13:73:c3:36:53:9d:d1:a2:09:14:b0:d4:
08:9b:aa:9b:0e:7e:f0:b1:d8:dd:fc:90:cf:c8:3c:ed:5f:06:
92:0d:0d:8e:7a:c7:6f:8f:6a:85:9a:45:0c:ff:07:3b:58:d2:
21:af:ed:64:65:e7:d8:6e:2b:48:eb:56:c3:b2:de:46:d6:44:
00:1e:e0:6e:bd:2d:fc:b0:28:5d:bd:a8:6a:e0:52:97:5a:62:
7b:2f:e4:27:a4:47:e5:2e:ea:46:dd:e9:9a:6e:3c:2f:33:2e:
78:55:30:6c:c4:bc:4a:3a:ea:7b:5f:03:1c:20:51:3b:4a:f1:
25:e0:71:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:11 2026 by rpki-client