
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa
File: 08795fcf-e040-301e-b174-61231872c055.roa (raw, json)
Hash identifier: HiJF5ccZ2mYsUq1GP2zZCaMbylFti+dgdOetFuOv4mQ=
Subject key identifier: 3F:01:51:E6:38:7B:A5:66:51:FF:48:EB:F3:68:8A:B9:88:1D:AD:18
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584CFC82359DF5F580F915BADE00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa
Signing time: Thu 26 Feb 2026 02:00:32 +0000
ROA not before: Thu 26 Feb 2026 02:00:32 +0000
ROA not after: Wed 27 May 2026 01:00:32 +0000
asID: 8069
IP address blocks: 20.153.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:82:35:9d:f5:f5:80:f9:15:ba:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 26 02:00:32 2026 GMT
Not After : May 27 01:00:32 2026 GMT
Subject: CN=15e2a0cf-fb3b-4f23-b3a4-2ed5fa5f9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:28:e9:7f:97:49:f3:c0:6c:69:19:30:56:
9e:ec:1c:85:a7:df:31:f7:ee:a9:6e:33:93:11:e8:
55:a4:5e:7f:4b:af:3f:90:07:d3:a3:d1:98:4a:95:
8d:0c:3b:d3:4a:e6:b9:55:5f:c2:4c:e9:17:b2:15:
bd:1c:50:34:64:f1:f7:5a:97:42:0b:4e:13:f4:a7:
25:9b:4a:07:3a:b5:63:c4:32:39:79:e1:b1:86:bd:
0d:c9:b5:26:5d:3f:cc:fb:95:02:93:64:05:a3:fd:
ed:4f:c8:30:24:10:5c:57:72:14:1d:eb:52:f6:2a:
60:e1:01:37:71:84:ff:7b:14:2b:19:52:71:39:e9:
97:da:41:91:9c:bd:57:6b:3a:09:ea:85:d0:b2:66:
0e:a7:d9:77:0a:d5:36:5c:98:f2:c1:89:52:a7:16:
2d:79:27:ca:ef:6a:7d:89:00:10:2d:a1:53:47:91:
75:c8:0f:ac:e6:93:c2:01:84:41:cb:fa:82:ad:fd:
01:66:d5:43:6f:46:82:7e:d3:4e:39:75:42:86:73:
88:0e:c0:47:39:78:48:e2:4b:e0:34:89:9c:f3:62:
61:7e:8c:c5:ee:a5:16:05:8d:52:dc:54:26:e0:a8:
8b:a1:b0:e2:d0:e2:85:48:bf:0b:e8:48:2a:50:14:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:51:E6:38:7B:A5:66:51:FF:48:EB:F3:68:8A:B9:88:1D:AD:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:bd:d7:b1:17:1f:bb:4c:1f:29:1e:18:ee:fc:4e:aa:16:5c:
03:79:3f:90:31:e1:9d:13:56:19:70:82:7f:63:6b:81:a6:7a:
3c:58:bb:e1:ec:b6:56:75:ab:8a:49:58:80:ce:98:42:63:ae:
16:53:5c:80:3e:d4:9b:3d:cc:db:f1:92:49:17:51:da:1c:2c:
06:12:88:9d:ba:ed:f9:6a:04:97:64:5e:eb:77:03:db:a4:45:
2a:ba:8d:66:20:d0:dd:d7:b6:4a:02:65:15:1c:3b:11:81:7d:
14:32:9b:02:b9:e6:6f:f6:86:ec:bf:de:c7:f3:d9:f1:f6:a6:
b2:cf:b1:6b:67:c6:61:fc:e9:88:7b:84:c3:62:92:c3:a6:14:
60:62:80:0f:17:4a:e2:6c:fc:9c:0e:71:a1:aa:b7:02:8d:8c:
ac:7a:60:c5:1b:66:8f:b5:7e:b9:00:02:18:05:40:b8:51:12:
93:79:f4:2b:75:4c:eb:2a:69:46:63:9e:fa:98:94:78:ba:36:
4e:84:5d:de:62:a5:26:43:3a:13:9e:1b:e2:14:87:fe:c1:08:
49:b2:1a:87:22:c3:85:be:bc:78:54:10:5b:ab:5d:f5:6a:49:
61:a6:2d:1d:7e:e6:b0:ef:18:7d:07:80:98:65:c5:e8:a4:ae:
b2:f3:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:27 2026 by rpki-client