
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa
File: aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa (raw, json)
Hash identifier: t9LSVfrG7m+fP7svZq5f2BRSGtF79RkrZuuGCGr3lFA=
Subject key identifier: BF:F7:78:DA:4F:D0:56:12:9A:8D:18:8D:BC:87:1E:55:00:A2:D8:8B
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584DC40052CCCD75E56F0310CF80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa
Signing time: Fri 08 May 2026 13:00:30 +0000
ROA not before: Fri 08 May 2026 13:00:30 +0000
ROA not after: Thu 06 Aug 2026 13:00:30 +0000
asID: 3356
IP address blocks: 20.132.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c4:00:52:cc:cd:75:e5:6f:03:10:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: May 8 13:00:30 2026 GMT
Not After : Aug 6 13:00:30 2026 GMT
Subject: CN=b9487426-ebf9-4f93-bac9-fdd34fc6fe27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:6c:09:35:7d:dc:5c:f6:51:cf:64:04:9c:
8d:53:b6:1e:23:9d:5f:72:fc:03:f7:f7:96:a3:08:
e0:cf:1b:d6:6f:91:01:ba:e4:ea:84:cb:7c:06:f4:
38:cc:f9:f1:f7:ef:a1:a6:04:36:dd:8e:a1:ec:d6:
a0:80:a3:35:6e:09:f7:85:67:da:33:e9:e7:6a:ef:
2d:9e:6b:4f:a5:d8:d0:e7:b2:ec:ce:d9:dc:5a:8a:
6c:f8:73:bc:bb:bf:ea:7a:1c:60:e8:c5:5b:11:91:
02:fb:e7:0d:72:9d:4b:ae:13:e6:89:88:f0:e6:c3:
8a:72:47:bc:9e:95:9a:f6:9d:b3:72:c6:d5:02:da:
0e:26:bc:37:33:3b:b0:41:40:f3:17:7e:71:5a:97:
e4:c7:60:c3:12:cf:76:41:90:e4:a1:af:3b:5e:dc:
b7:ab:ff:e7:eb:ea:bf:dd:22:5c:c1:0c:07:7c:a8:
1d:91:95:4b:9f:53:d5:c2:bf:ef:8a:b7:54:ea:17:
e5:c2:46:24:de:87:4d:7a:6b:ce:78:fc:34:38:e9:
e4:0b:7e:49:8f:dd:06:b3:58:27:14:59:c8:64:45:
d5:da:7d:48:6e:ab:bc:6f:9c:93:7b:4c:9f:7d:c8:
c1:81:27:08:0c:06:84:b4:b9:af:c6:af:ca:2c:9a:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F7:78:DA:4F:D0:56:12:9A:8D:18:8D:BC:87:1E:55:00:A2:D8:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aa2ce0f1-9da2-3179-8c52-8be3548bcb46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:55:5b:c1:c1:fa:61:3a:7a:6c:9e:79:fb:7e:7f:21:bb:f8:
b5:61:6e:20:95:b3:db:4f:65:4f:d1:c4:a1:f1:67:c2:fa:50:
1d:b3:b3:5c:f5:bf:6e:2e:f0:1f:cf:93:66:24:50:b2:2a:11:
58:78:f3:72:e2:74:6a:23:d0:6b:71:54:44:f6:78:32:b6:ad:
41:f7:6e:1f:b6:8e:d5:ef:a1:e4:ce:d4:3f:ac:bb:4d:a7:0b:
e3:a8:75:01:10:38:51:80:6b:35:c6:a6:f5:4e:fd:67:cf:69:
4e:fa:92:b1:d0:a0:ea:1f:51:78:6d:c9:7c:65:61:93:83:5c:
55:33:63:36:fc:a4:63:65:2d:74:95:34:e6:ed:28:7e:f4:47:
95:f6:ca:52:4e:70:53:d8:82:72:b7:9d:a9:da:bd:95:9b:4f:
64:21:02:25:14:e7:a2:ba:77:30:98:3a:64:2d:23:69:c3:d7:
c4:b5:53:02:75:85:c4:e6:da:12:a8:9b:2a:40:83:fb:1a:c6:
ee:a8:c2:9c:b4:4c:4c:a4:0c:6c:23:99:fa:75:f2:d2:36:67:
39:69:64:8c:6f:cd:f4:30:61:ed:68:fa:a3:e6:89:c6:0e:29:
4d:a0:17:14:84:ea:12:cc:e7:f3:e3:18:4b:88:bd:42:aa:bf:
88:bb:25:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFLMzXXlbwMQz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk
Yjk0ODc0MjYtZWJmOS00ZjkzLWJhYzktZmRkMzRmYzZmZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO9sCTV93Fz2Uc9kBJyNU7YeI51fcvwD9/eW
owjgzxvWb5EBuuTqhMt8BvQ4zPnx9++hpgQ23Y6h7NaggKM1bgn3hWfaM+nnau8t
nmtPpdjQ57LsztncWops+HO8u7/qehxg6MVbEZEC++cNcp1LrhPmiYjw5sOKcke8
npWa9p2zcsbVAtoOJrw3MzuwQUDzF35xWpfkx2DDEs92QZDkoa87Xty3q//n6+q/
3SJcwQwHfKgdkZVLn1PVwr/virdU6hflwkYk3odNemvOePw0OOnkC35Jj90Gs1gn
FFnIZEXV2n1Ibqu8b5yTe0yffcjBgScIDAaEtLmvxq/KLJr9LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/3eNpP0FYSmo0YjbyHHlUAotiLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWEyY2UwZjEtOWRhMi0z
MTc5LThjNTItOGJlMzU0OGJjYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpVW8HB+mE6emyeeft+fyG7+LVhbiCVs9tPZU/RxKHxZ8L6UB2zs1z1
v24u8B/Pk2YkULIqEVh483LidGoj0GtxVET2eDK2rUH3bh+2jtXvoeTO1D+su02n
C+OodQEQOFGAazXGpvVO/WfPaU76krHQoOofUXhtyXxlYZODXFUzYzb8pGNlLXSV
NObtKH70R5X2ylJOcFPYgnK3nanavZWbT2QhAiUU56K6dzCYOmQtI2nD18S1UwJ1
hcTm2hKomypAg/saxu6owpy0TEykDGwjmfp18tI2ZzlpZIxvzfQwYe1o+qPmicYO
KU2gFxSE6hLM5/PjGEuIvUKqv4i7JQY=
-----END CERTIFICATE-----
Generated at Wed May 13 19:42:49 2026 by rpki-client