
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa
File: 0944b58f-2c51-3787-a810-732d8f208d66.roa (raw, json)
Hash identifier: yHkKTfKcmFPZ/jis8Z7lfHdytVo00DUPV0apr1Yq+Qc=
Subject key identifier: 7F:DF:75:59:AC:F8:57:E5:98:87:49:8C:78:D2:E0:1F:E7:44:ED:F5
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584E9D4A76B7410750611FD2F600
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 8069
IP address blocks: 20.33.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:76:b7:41:07:50:61:1f:d2:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=91761ed9-2393-4713-b5af-88d2df7579ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:f2:e1:fd:27:6d:03:9c:35:7d:55:ed:74:
60:f1:81:89:8e:95:51:19:b9:c9:2b:6e:d3:6c:0f:
09:89:74:14:2d:d1:d1:80:27:ed:30:13:e7:4b:9f:
5f:04:7c:11:99:3a:22:3a:0c:a6:04:2b:46:d6:72:
cf:48:ac:ed:ae:86:bc:69:23:f0:40:58:7b:e2:f6:
7c:0e:ef:be:23:f0:80:c7:98:c6:50:ee:82:f1:ab:
0b:73:d2:38:85:c5:64:b7:11:78:4d:c0:5a:a4:f3:
97:b9:b5:3f:12:a3:84:69:7f:c8:f6:48:af:ad:01:
36:58:7a:f4:30:10:c6:ee:dd:a0:b5:50:1a:78:57:
54:f1:4c:1e:e3:6d:1f:e4:96:b7:df:b8:2f:3d:7d:
a1:ab:80:9e:9a:09:82:83:eb:b0:ca:a6:e2:6a:5e:
cf:60:f9:9f:55:dd:7d:21:73:c6:03:6b:2a:57:b0:
18:bf:a0:ce:71:7e:9b:3d:9c:6a:4a:b8:39:1d:f3:
71:64:fb:dd:35:4f:a3:ee:ba:e0:46:ee:da:d6:a7:
db:6e:93:08:67:e2:a1:ce:98:0d:bd:1c:18:e5:b8:
44:11:41:5c:8f:24:9a:02:12:15:c7:13:4b:42:9e:
be:0a:11:a4:a8:5f:c6:55:cd:a2:87:90:85:31:98:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:75:59:AC:F8:57:E5:98:87:49:8C:78:D2:E0:1F:E7:44:ED:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c5:27:e3:36:ec:ab:57:a0:43:27:99:ee:ee:65:65:0f:d9:
d1:39:a0:53:94:9b:20:eb:67:a8:76:f3:77:cb:5a:00:10:5f:
c1:87:c6:28:dd:5d:8d:38:71:8f:28:f7:74:40:4e:e9:59:61:
54:0a:74:29:bb:20:da:01:19:5b:fa:01:08:7b:b5:62:5b:f4:
5a:75:13:cb:a2:b8:f3:27:1a:c0:aa:c9:e2:ab:5b:56:a9:50:
b2:7b:a4:56:c0:6a:8d:15:3e:9d:67:82:97:f4:b3:66:15:67:
d7:8b:a2:3e:c5:1a:da:d8:01:ec:0f:18:1b:60:68:01:49:ee:
31:f9:ae:14:13:91:7c:f8:e5:77:b9:99:03:f9:ca:93:26:42:
1e:d6:a8:ea:ee:01:aa:a3:9c:44:22:bc:c1:46:58:d2:db:73:
11:a0:41:d3:ac:8b:b4:a9:b3:8f:a5:9a:b7:e0:29:aa:ed:20:
d8:54:9f:29:11:97:2a:94:21:bf:4f:ba:2c:2a:91:b4:ec:54:
0b:94:5b:aa:5f:fb:4d:71:9d:fd:bc:48:8b:63:88:83:79:bc:
ce:c5:9f:96:2f:d7:69:3f:bd:40:6f:0c:97:96:ee:cc:aa:b7:
45:0b:69:81:25:6a:18:1c:fe:16:e7:31:cb:dd:17:ba:0c:58:
53:7c:c8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:49:22 2026 by rpki-client