
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa
File: cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa (raw, json)
Hash identifier: 7JXtuQ06nk4trNnz1KRtidRkOJhYqTEyM6h/O3xIFaQ=
Subject key identifier: 88:8E:2B:F9:1F:26:A0:D8:3B:00:5B:66:EF:32:B8:D3:1B:54:36:CE
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584E6F3A3EF608AC718823DF6A00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 3356
IP address blocks: 20.148.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3a:3e:f6:08:ac:71:88:23:df:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=2602c41c-c0a0-4ac6-aee0-b7d54930c3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:a7:73:d7:3a:96:05:32:00:34:63:de:26:
9b:1b:1b:20:65:54:0f:8c:02:bc:22:99:ec:23:3b:
d7:d2:c2:05:e0:82:13:26:8d:86:47:86:f0:46:2d:
c5:8d:9d:b2:7e:81:31:f9:14:74:6a:94:c5:d4:b2:
75:3d:7b:3a:b2:e7:0a:06:e5:6e:1b:c6:d2:d5:e0:
b0:33:32:b4:1a:9d:e0:18:5a:1a:44:33:6b:1c:2e:
da:3d:eb:7d:d5:69:f5:fb:aa:d4:4a:8c:01:b7:af:
a0:30:10:5d:95:97:c7:c9:ff:36:53:f7:14:29:41:
7c:17:04:12:ab:f3:1a:8d:95:cf:04:4b:55:e3:39:
7b:d9:75:ec:4e:3c:7b:af:75:b5:a1:80:82:55:c5:
3f:76:cd:20:1a:74:e5:46:f1:ff:76:ea:e3:71:42:
54:2e:65:6a:de:5c:6a:35:75:3f:82:09:bd:f6:b8:
6a:23:b5:fc:6e:83:0c:5b:23:f0:e9:b5:ce:48:14:
8e:6f:15:82:ec:71:fd:1c:b8:a6:fd:93:c9:7f:85:
0c:a8:ac:8d:b6:14:3c:7f:02:44:4b:49:fd:95:29:
6a:de:c1:38:42:ee:13:49:26:bc:01:33:13:26:a6:
f6:44:03:2a:39:60:08:33:f4:8e:4c:ec:d6:77:f5:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8E:2B:F9:1F:26:A0:D8:3B:00:5B:66:EF:32:B8:D3:1B:54:36:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cf6a4fa0-3db0-3354-88d9-48b025e0f6cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:60:e1:2f:2f:2f:e3:3c:06:9f:75:05:8a:5b:66:c9:56:de:
5d:0d:07:e2:cd:4d:49:c3:2b:32:ed:b8:c9:9d:2c:95:f2:62:
96:d4:b5:be:78:d0:dd:72:c5:00:83:27:99:e3:fa:42:5f:b9:
50:3c:5e:39:88:16:c5:13:83:48:70:59:2f:39:8b:dc:cb:f1:
ed:b1:44:2c:fb:33:f5:6c:12:2c:8f:48:84:d1:ed:0f:7a:a8:
6f:31:25:9b:62:97:ef:7e:64:10:29:38:ba:ed:15:0b:a3:84:
1b:03:f5:97:73:1f:49:bc:de:34:24:69:76:fb:bd:93:88:70:
3e:19:e2:31:3c:e0:f0:75:c0:9c:56:68:36:2e:76:85:a4:97:
5d:6e:25:2e:ce:6b:0b:57:e8:d7:4b:63:02:3b:5f:d3:27:3b:
40:ac:02:a2:84:dd:96:1b:99:93:25:1e:43:0b:3c:0b:d4:36:
55:30:af:e8:78:ec:56:69:13:4f:2b:34:93:31:41:00:fb:18:
20:07:a1:bc:d5:1d:22:15:b4:04:40:11:f4:ba:aa:d1:44:70:
37:99:d4:15:cf:8a:e4:c3:1b:50:9c:aa:73:70:c6:2c:97:8d:
ea:12:50:96:fc:f9:60:36:02:33:4b:16:8b:dc:40:e3:5f:eb:
e8:04:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:59:50 2026 by rpki-client