
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa
File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json)
Hash identifier: jgGE6K5652pTJZ3ajiXxUT8XJQDe2pK/C7NBnn4woVY=
Subject key identifier: 9A:98:D6:39:D1:03:8F:EB:6C:01:61:44:DD:69:3E:70:53:72:C2:2A
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584E6F3A3DD50ADF0981EC31F0D2
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 3356
IP address blocks: 20.132.0.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3a:3d:d5:0a:df:09:81:ec:31:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=97feadd3-1ce3-4bc7-b217-78bbb2732842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:ef:04:6e:df:27:a7:8c:04:f0:a0:d6:9f:
e9:38:d2:5d:96:64:11:a5:dd:da:da:df:08:b4:bd:
37:ad:d0:b3:32:a1:61:67:a1:03:74:3a:12:45:05:
46:c6:db:f0:4c:7b:6f:17:22:61:d3:ad:a4:1f:15:
e7:36:f7:7c:f7:ed:c3:e1:2a:38:0a:2d:1b:0d:c9:
53:3c:6c:e1:b4:99:27:3f:84:a6:9d:cb:f2:d4:29:
a3:43:13:9f:9e:ea:3a:22:5b:be:e7:40:0a:bb:4f:
24:63:1c:00:68:a3:be:a2:0e:8c:30:03:ae:7d:e3:
43:07:54:4b:e7:c4:21:86:48:e8:10:49:d5:a4:6e:
db:ed:74:63:5c:d1:77:30:3d:ff:aa:65:11:ed:37:
4f:6f:41:b2:c0:1b:a7:de:ba:9a:d4:7f:00:10:d2:
90:2e:a8:bd:aa:4d:2b:3f:62:c6:75:e5:22:76:bd:
b0:c8:6c:96:56:f8:c0:c3:8e:0a:fd:96:53:fc:c1:
e7:cc:c1:13:20:53:e6:19:86:6e:3a:0d:41:a4:95:
1a:48:b0:04:09:a2:50:c5:48:2c:26:87:eb:98:d8:
69:c3:f0:06:71:73:2e:30:43:d3:91:8c:d1:59:d8:
e0:b8:56:06:3f:53:04:4c:ad:b3:60:39:57:c1:81:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:D6:39:D1:03:8F:EB:6C:01:61:44:DD:69:3E:70:53:72:C2:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b8:28:b6:fc:9d:ea:a6:89:5a:fa:a1:e0:05:2b:e7:28:ea:
3a:e9:9a:9e:e1:b2:42:d4:41:ea:26:c3:6a:1a:55:0b:c5:79:
56:18:9a:1f:90:cf:7a:d5:46:23:08:27:7a:79:f5:6d:94:ea:
09:5c:2e:00:15:b1:b1:fc:63:d6:d9:76:8d:c6:6c:31:55:49:
e7:50:7b:bc:03:e1:be:54:e4:9e:a9:1e:01:5e:08:bf:66:41:
33:1b:c5:c6:c1:c4:3e:bd:22:c5:fc:86:e1:37:c4:16:d3:75:
64:8a:c9:40:c7:09:de:e3:cb:26:78:8a:d5:27:4b:7f:f2:87:
98:ac:2c:2a:24:fe:df:22:b8:d8:ac:a3:8f:3c:06:89:ff:8b:
39:d4:10:a6:cf:f3:7c:66:39:45:4a:5f:aa:34:db:f5:1e:b3:
ba:08:7f:68:25:ec:fc:1e:11:cf:80:13:58:97:a6:41:aa:20:
52:37:0e:bd:5a:b6:32:4b:a8:5a:49:5f:75:5a:01:8c:a1:27:
e2:12:25:42:74:12:42:da:b0:6f:7b:78:e7:a1:6b:50:1d:50:
41:8b:8b:a3:a4:f6:15:c0:d4:6b:bc:b2:f0:6c:00:82:32:63:
64:e5:50:c7:eb:70:ad:b3:e8:7f:29:f7:66:cd:71:81:f0:b7:
c6:67:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:58 2026 by rpki-client