
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
File: d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa (raw, json)
Hash identifier: 3+7nAgZ8WLrCRrke+gTcqqo6DKxlKwgIhJrrY/ULq20=
Subject key identifier: 0A:B8:0F:73:CC:8E:DC:40:0A:A6:06:67:1E:07:D0:FC:41:CD:68:E2
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584F119D0CA6EEED5AEF581A8980
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 3356
IP address blocks: 20.132.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:0c:a6:ee:ed:5a:ef:58:1a:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=b3697e7f-e535-4310-8556-af01bf962ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:5f:c1:ed:39:63:98:f2:eb:9d:29:b9:45:
cf:cb:b1:96:f2:bd:40:9f:0d:52:63:79:67:09:2b:
ae:7c:f9:0a:e1:97:e0:ca:d5:6c:c0:5b:fc:0e:41:
69:f8:e1:f3:ed:39:e5:08:3c:f9:0d:81:63:71:85:
c7:2e:e9:a2:e6:fb:33:d0:86:4b:c9:44:32:56:1c:
94:c3:1e:dc:8e:01:bd:e1:b3:e3:25:1f:0f:7f:b2:
df:48:28:8a:c9:f2:78:ff:fd:2f:e1:0a:13:09:31:
8a:09:c1:b4:75:e5:f6:8b:8e:63:34:9e:1c:61:8b:
4b:77:f8:d1:c8:1f:a7:63:60:7f:04:9b:22:10:75:
1f:e5:b5:94:db:3c:e0:3b:4f:c9:6f:a7:57:e8:b1:
a3:17:a6:08:40:6a:ae:97:34:12:2b:75:40:62:ee:
19:ac:47:3f:13:c4:b3:37:80:d3:c0:c6:45:71:07:
cf:76:9c:f4:89:0b:3c:e2:ec:89:9e:32:4f:41:51:
7b:54:80:0c:7f:24:ba:27:2a:81:9e:a3:24:a1:9a:
a6:16:de:99:3a:23:c5:40:cf:34:4a:4c:0f:5e:48:
22:82:3a:27:66:bd:c6:e4:6a:11:68:75:a3:82:45:
a1:81:3c:89:b9:52:4a:7a:47:0f:55:4c:5b:b7:78:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B8:0F:73:CC:8E:DC:40:0A:A6:06:67:1E:07:D0:FC:41:CD:68:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d55e9cd1-5e98-32d9-9dcd-38a4e1a9c17b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:63:f7:c6:21:17:ba:22:a4:fb:68:a8:80:74:41:f4:9c:f1:
74:aa:0f:0b:e6:66:d8:8c:8e:53:64:ba:a7:41:55:d9:bc:7d:
05:3d:12:03:9a:94:f0:ab:fa:54:8e:6e:c4:e9:13:b4:db:c6:
5d:ad:d4:19:c5:45:7e:70:f3:68:49:37:d8:9e:be:c0:ab:56:
b3:53:13:f1:28:d9:d9:76:2f:78:12:a7:8f:f8:4c:62:24:38:
05:d3:07:7a:1c:bb:72:0e:fd:01:20:72:fe:fb:6f:de:43:d3:
27:87:82:de:4d:d3:f5:38:af:03:d4:2e:d8:74:d8:c7:c3:15:
4c:23:0a:05:20:8c:80:1b:c5:a3:97:54:28:9f:be:14:c5:b8:
79:10:4f:bb:42:ac:37:53:26:ad:0e:19:71:eb:a9:bc:1a:67:
3b:14:25:52:ca:bf:a5:ae:b4:da:1f:d6:65:8a:c1:dd:3e:83:
68:d8:27:8f:07:c8:dc:80:64:f6:7c:3e:a2:bd:a9:ef:48:f7:
0b:b1:ee:52:36:05:d8:31:af:42:23:ba:9b:5c:6c:62:ba:7c:
33:89:58:2c:58:b3:8b:ff:f2:d9:68:e0:92:37:18:a1:0c:22:
27:4c:b4:66:4a:37:75:e2:cf:e8:ef:b7:5e:eb:58:ac:e5:bb:
20:99:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:06:12 2026 by rpki-client