
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa
File: 8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa (raw, json)
Hash identifier: yFz+Jey8JiTnVbJ52locrhYLK2O4g5xSsc2SD47lD1k=
Subject key identifier: 7E:50:98:A2:0D:FE:0B:8D:8E:0C:8A:A8:CB:D0:90:EA:03:1E:06:2C
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DA815935124860736C38A9500
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 3356
IP address blocks: 20.138.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:93:51:24:86:07:36:c3:8a:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=9b57e319-103a-4466-bf1e-cc8ae6ad03a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:d8:6c:07:40:57:92:15:86:e2:bb:2c:13:
38:d2:0b:31:df:2b:1d:c1:81:bb:1c:10:ea:fe:65:
f2:1b:f3:96:0f:fa:83:e5:43:27:15:cf:e7:08:ff:
5a:20:97:ca:b9:3d:31:8e:86:da:08:52:5a:37:30:
73:4c:91:99:95:be:28:7d:54:bc:38:46:81:91:18:
f5:d9:64:a0:4b:fc:bc:c5:a4:5f:5b:60:64:1b:02:
3d:2a:cf:9b:bc:40:4a:3d:dd:6f:f9:06:3e:4b:72:
f3:a3:47:a7:4f:1b:55:ee:f2:01:f5:e5:1a:1b:47:
99:be:7b:86:e8:84:38:a5:5f:f8:df:5c:79:d8:e2:
ef:6e:6a:7b:2d:b3:5a:ee:2e:f0:66:5c:99:73:0a:
62:2c:4e:5b:ed:d5:b9:31:af:50:18:80:b8:10:12:
26:75:e6:ab:be:91:98:b9:7b:77:4b:8f:0c:14:14:
d5:f4:be:cb:37:c6:e3:fe:70:ba:dc:f1:1c:89:ad:
45:4d:9f:e0:3c:0b:7f:46:9d:cc:80:86:7d:d7:39:
66:23:4c:84:4f:61:c9:19:ed:d4:3d:68:15:d8:29:
06:3b:22:1e:c2:2a:8f:3e:18:90:21:4f:92:ae:33:
40:36:5f:89:47:29:65:a5:8c:2b:9f:a9:46:d9:f9:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:98:A2:0D:FE:0B:8D:8E:0C:8A:A8:CB:D0:90:EA:03:1E:06:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8b873ffd-879b-34e6-8a3a-fe7eff79427b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:fb:10:83:91:c6:f9:1c:25:9c:fc:f0:57:29:72:5b:90:b0:
2f:61:19:4b:f7:84:b5:46:b9:cf:f3:48:25:d0:88:4f:f1:a6:
53:ea:76:d8:e8:f8:7a:7f:63:7f:ac:7a:cf:1a:05:ce:96:97:
1b:68:b6:af:75:ad:c6:4c:2a:65:f2:8c:5d:f7:85:23:6b:8d:
36:2d:bf:ab:47:f1:c3:b0:15:73:80:5a:67:7a:db:6c:c2:92:
a2:2f:b7:2a:d5:f8:d6:1c:c7:cc:fd:95:13:8e:55:ee:90:e0:
e1:a9:28:e1:15:37:cf:dd:e0:e8:46:80:c6:a5:6c:41:5a:8e:
82:63:c1:ae:72:04:8c:59:8e:c6:01:10:bb:da:a3:0c:03:8a:
b8:37:11:5b:6f:a4:15:25:92:11:58:7a:7a:7c:24:2f:70:53:
c0:3d:34:c0:73:86:18:45:72:f0:f0:c7:9d:97:e5:79:69:53:
f4:88:ea:b7:cd:69:95:87:11:81:bc:9c:53:f1:b6:8c:2f:c8:
d9:85:24:65:c5:c2:a2:1e:48:9c:eb:2f:f2:b4:ee:a2:08:92:
64:8c:bf:19:14:d8:a8:d9:77:65:e2:b1:13:af:b0:34:6a:9d:
b1:13:a8:dc:7a:1a:f0:27:94:d7:9a:8b:59:bc:25:81:c6:95:
d4:44:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:32 2026 by rpki-client