
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa
File: 8b450991-fe79-301e-aa84-d70f6fad1d98.roa (raw, json)
Hash identifier: JvbPEuVv/3zBdp+2V7Ppq+CB2AUSEqG24N3XHETRaOI=
Subject key identifier: 66:2E:C5:1B:03:E2:6A:77:F8:4C:57:96:EC:15:A9:78:A6:DA:11:5F
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584F4976EDED1F745D6DFE506900
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 202
IP address blocks: 20.155.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:ed:ed:1f:74:5d:6d:fe:50:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f5231a6a-4c10-406b-a355-3159b395998c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:bf:78:a8:94:af:03:75:b3:a5:42:eb:e1:
4b:1b:33:6f:7e:31:70:f4:01:2a:16:e0:fe:2e:e9:
f3:01:58:bc:47:da:11:5d:d6:c0:73:09:a7:2d:e1:
a0:c2:8a:2a:f8:3e:da:27:3c:5c:b4:ff:43:42:c4:
97:41:4d:69:53:f5:68:ba:d0:bc:13:c1:fd:cf:ac:
f6:6e:9f:46:95:99:fb:a6:73:d4:8c:90:a5:c9:3e:
3e:cd:39:b5:4a:1e:b5:05:74:fb:91:96:4b:90:2a:
14:22:ae:b4:89:a3:9d:c3:d3:05:65:34:31:3b:62:
5e:85:57:5e:3a:ff:a6:a0:c3:8b:73:56:b2:d9:6e:
1e:34:01:11:3c:88:26:ec:4e:18:0f:59:d2:ed:b6:
42:62:ba:67:3e:5b:2c:95:19:9d:9c:14:63:65:69:
12:e7:7a:06:39:74:55:b7:05:f3:a1:56:4f:bf:a6:
d7:b0:f4:6c:43:e1:f2:6a:2d:16:e9:3e:22:df:9c:
b7:ed:a6:95:08:41:58:0e:55:e5:e9:2f:c9:00:90:
03:e3:61:a1:1d:a6:63:e9:be:d0:ca:0b:31:05:cd:
9d:00:54:c1:29:f4:08:c0:a9:22:39:7d:af:9b:60:
0a:01:f4:7b:c1:d3:21:9d:3f:fa:e3:3c:63:2c:04:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2E:C5:1B:03:E2:6A:77:F8:4C:57:96:EC:15:A9:78:A6:DA:11:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b450991-fe79-301e-aa84-d70f6fad1d98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.155.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:5b:42:7e:60:41:cb:46:14:09:2d:68:b4:91:73:1c:5e:f8:
80:40:0a:c5:8d:9b:c0:00:6e:d2:af:a9:d3:06:b0:a1:4d:de:
eb:5c:1b:be:db:03:bf:a0:96:57:3a:bd:05:99:a1:bc:36:e2:
34:be:e1:4e:26:d4:93:10:86:17:ad:12:09:d4:a9:ff:2d:8d:
54:c7:1a:31:68:99:4d:55:6e:e7:fc:1f:38:f5:cb:21:a3:e5:
37:4b:c0:12:86:2b:41:1c:50:45:f2:e9:2d:c3:e6:34:5d:99:
06:68:34:fc:17:06:ca:68:af:e7:63:15:62:6a:ae:68:02:56:
3d:12:93:11:9e:c8:25:07:45:1e:48:7f:47:df:38:2d:90:51:
18:9f:32:e5:1f:25:ea:a0:77:b2:bd:7e:1f:ae:96:65:d3:d7:
70:ed:cf:e1:51:f8:36:b0:36:74:8a:a5:ba:36:0e:99:e6:ee:
af:90:31:70:ab:21:1b:c3:64:d2:b5:ac:5b:bb:1f:53:a6:44:
41:4d:8a:1d:87:91:58:1b:10:f9:ce:86:41:39:13:a2:d5:44:
1a:9e:43:95:a5:b5:1d:41:4a:d0:0f:38:5c:1f:e4:4f:60:ba:
d2:ef:9e:3a:ea:0f:57:40:56:ed:66:da:7f:05:a2:31:ff:da:
21:5d:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:53:56 2026 by rpki-client