
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f6121b2-bb59-34da-b5b3-2ed088234eaf.roa
File: 4f6121b2-bb59-34da-b5b3-2ed088234eaf.roa (raw, json)
Hash identifier: S6Jd/db9W08pYi+CKwknj70w4FhtMRc8DvFcayFwec0=
Subject key identifier: 0B:3B:72:F4:EE:E3:37:0C:C2:27:A8:79:E7:E1:41:0D:03:84:E0:5B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584D651539DC857B1D50A3107C80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f6121b2-bb59-34da-b5b3-2ed088234eaf.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 8069
IP address blocks: 20.153.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:39:dc:85:7b:1d:50:a3:10:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=1e3d2d1e-a793-4595-b8e3-794e1d5be0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:48:3e:2b:bc:1e:bb:ae:cd:03:cf:7f:f5:
64:db:11:0d:68:90:eb:be:c8:16:30:71:56:a0:29:
bc:53:e3:0f:af:f9:51:5d:ac:e2:7e:74:58:5e:51:
83:d8:d3:13:ea:50:20:61:04:d5:b6:bd:5f:c2:88:
be:f4:9f:83:ea:f1:e3:b4:e7:e3:f2:0c:c1:73:96:
94:3c:56:0f:46:1d:74:0e:bf:3f:69:71:60:5d:05:
d1:87:f8:30:5b:75:95:d5:68:0d:64:57:aa:41:07:
0a:c2:84:cb:df:12:a0:1b:f6:45:e6:a8:d9:55:3c:
83:16:f1:b3:e4:b9:48:28:12:9f:0c:41:26:fd:26:
73:02:6e:99:9f:0a:e2:68:60:40:36:1a:d1:2a:84:
0f:e6:ab:5d:20:78:03:09:73:3a:e9:8d:37:52:b8:
0e:7a:91:10:16:cd:ee:fe:0d:27:00:f0:7b:ef:34:
b6:0a:6d:55:6f:d7:54:e2:8d:33:d4:27:cb:90:53:
f7:99:8a:d1:55:13:a9:6c:54:7b:0c:2e:cd:12:2c:
69:04:c9:df:68:8c:a2:8d:0a:ec:25:ad:c4:eb:31:
c4:ba:d1:0b:a6:cc:0a:b1:04:3c:c2:ce:88:e4:c9:
14:cf:b0:a9:e0:32:49:7d:52:4c:4f:93:06:b7:4c:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:72:F4:EE:E3:37:0C:C2:27:A8:79:E7:E1:41:0D:03:84:E0:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f6121b2-bb59-34da-b5b3-2ed088234eaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:4c:cd:0f:62:62:c6:ec:5e:43:9a:dd:52:0a:b8:a1:5c:70:
c5:a6:f8:2d:5b:85:38:b3:8b:0e:16:4b:69:7c:a4:e4:43:60:
b2:a4:b9:ec:3e:dd:ee:66:14:2b:d7:7c:93:e0:8a:f8:40:c4:
71:fa:4c:5a:84:83:28:0a:08:39:a4:84:ed:12:4b:d8:17:5b:
83:ae:ad:3e:6a:ee:90:98:27:c5:8b:9d:82:c3:6a:73:fe:11:
d4:b8:4d:32:4f:1b:b3:0d:10:cd:9f:f4:7a:fa:70:83:4e:3c:
79:e2:c5:9f:8b:02:6e:a4:23:80:a7:94:41:67:c0:3f:9b:ce:
9d:83:57:fb:c6:52:13:c5:ea:4d:bf:24:96:19:c7:81:8c:cf:
7e:fe:81:68:6f:84:89:54:d7:22:50:44:98:8d:ec:32:94:78:
3c:44:37:35:08:57:84:e7:81:11:fb:34:a8:b6:5b:13:db:7f:
25:49:39:23:5b:4c:31:21:de:dd:b2:94:cc:ab:16:e9:ee:a3:
f5:ac:53:f4:4d:1f:bd:fe:1c:e0:23:f8:fe:e8:37:51:00:73:
79:f0:48:c5:cf:4b:62:02:d8:af:94:a5:7f:66:96:94:fb:bd:
2c:7d:89:42:b4:bf:4a:79:c0:67:89:cd:fd:30:8c:ee:9a:d7:
0b:fc:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:16:36 2026 by rpki-client