
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa
File: 5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa (raw, json)
Hash identifier: eXU0Agu7NQxkE2QaYoYYLuYx9PeH713oAq6y+u9g4Zo=
Subject key identifier: 5F:F3:22:FA:0A:74:FF:81:01:19:C1:C7:13:E6:57:88:5D:A5:C0:85
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584D52438DFB712733179E725480
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 8069
IP address blocks: 20.33.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:8d:fb:71:27:33:17:9e:72:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=a2b34730-0296-41e8-b14d-debcec2ffa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:2b:2d:0e:dd:62:8d:84:85:6f:82:a5:34:
b3:39:af:19:af:0e:57:73:95:d3:68:3b:44:da:54:
84:1d:53:54:90:e9:66:07:0c:3c:c7:4c:a3:bc:c4:
5b:3b:0f:d7:83:c7:90:22:0f:9d:0a:48:2d:9d:12:
98:c4:e2:45:6f:89:99:5e:65:f3:d4:4d:0f:25:3c:
1e:f5:3c:e8:55:5a:b8:f2:56:65:f4:fe:6e:0b:8b:
64:31:71:ef:c2:7f:37:69:96:7f:65:82:66:f9:a2:
fe:15:f7:1f:6a:db:e7:28:df:83:78:bf:0a:11:7f:
1d:7f:25:e1:65:d2:e4:f8:19:12:08:09:3f:06:7b:
f1:3c:ec:8b:16:1b:33:fd:a2:99:d6:1c:29:2e:33:
e2:c8:cd:c0:11:97:2c:33:87:5b:ea:f1:05:39:8e:
e8:08:05:0d:ad:f7:e8:fc:48:47:97:b7:7e:5b:48:
72:cf:3c:7b:17:ef:90:8c:43:f8:89:91:27:92:ae:
cd:1d:d8:6a:b2:88:bc:b4:e4:ab:64:7a:a5:76:bb:
af:d6:c6:18:8f:57:cc:a2:40:f8:da:eb:82:17:66:
7d:68:a6:ac:be:bf:93:4a:14:23:17:c1:7f:9b:c4:
34:ad:45:e6:39:1c:79:a1:90:ef:11:9d:34:80:52:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F3:22:FA:0A:74:FF:81:01:19:C1:C7:13:E6:57:88:5D:A5:C0:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5bf04b00-bd2b-33b8-9872-6c352ab3e042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:2f:ea:58:09:95:ea:a4:5d:87:57:88:8c:21:42:7a:e2:ee:
b3:07:36:70:28:a3:ae:63:70:7f:7a:85:49:ae:9e:d5:ff:95:
7a:b8:14:86:f2:63:ea:9b:61:bb:aa:11:63:64:43:ea:29:99:
53:bc:50:33:c2:48:fc:e1:f0:85:a7:ca:4d:d2:f6:c7:3a:39:
b9:45:b5:03:52:c8:d9:5f:82:e9:9c:97:6f:62:6a:e2:25:73:
75:18:2f:de:57:8f:da:de:fc:a7:73:6f:ae:66:0a:37:2b:de:
4f:98:64:d1:5d:b9:70:64:7f:58:fd:e3:00:08:1a:a3:bc:4d:
88:73:70:96:b3:5f:0a:0b:2f:fe:c8:7c:9d:16:35:03:32:59:
d1:ee:33:8e:24:60:fc:0c:23:81:f2:22:33:48:94:38:88:b3:
52:ec:bc:8f:06:f7:76:c7:6d:9a:27:1a:3e:70:8c:69:ea:ce:
c7:0d:7a:ee:29:8b:b1:fe:f3:1d:5f:23:05:77:00:20:20:3c:
4d:8b:40:97:98:99:c8:01:31:c9:24:3c:77:ed:4e:d4:7b:11:
46:dd:27:45:38:38:ce:77:cd:a5:f6:76:b4:30:d6:e7:b6:1f:
16:d7:d4:79:49:a4:85:b1:db:c7:5b:67:ca:ed:a7:18:cb:85:
97:fc:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:31 2026 by rpki-client