
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa
File: 6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa (raw, json)
Hash identifier: Molpxi4ku+xm+1ywCfBvsjz4kHDexlbvjwMVnYxBijA=
Subject key identifier: D4:92:7D:92:2B:2A:1B:35:52:1F:C4:9A:79:DD:AA:C2:50:E2:9A:12
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584D65153B8729801EB7EC66BF00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 8069
IP address blocks: 20.153.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:3b:87:29:80:1e:b7:ec:66:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=8718e61d-9b9f-4eb2-a028-0600bc482f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4d:f4:77:b0:98:a1:f4:ff:88:51:4b:9c:24:
1c:93:68:8f:0b:f2:81:c8:e0:7a:0f:65:ea:68:1c:
8e:d4:bf:f5:e1:3f:9b:4b:7c:21:d6:38:8a:1f:82:
d2:ce:a6:4b:52:cc:1b:07:81:24:9e:c5:05:fc:f9:
1f:41:63:b8:04:e7:91:74:1c:5f:4d:07:5f:f4:db:
c4:b2:42:1b:ad:f5:35:47:ec:0e:62:40:0c:6e:b3:
13:b5:49:56:b5:e9:b2:48:0e:29:c8:a5:44:fa:78:
b6:23:18:5e:7a:8e:57:ee:2f:98:8f:ce:48:e4:c2:
d0:ce:43:e2:c1:d6:b3:7d:b6:7e:9b:f4:7a:12:6d:
2f:6b:9b:67:de:14:22:1e:42:05:c2:44:55:dc:4b:
24:41:2a:37:db:4a:2e:9a:30:26:09:39:fc:f5:0d:
23:bf:82:06:8e:0f:85:18:8d:9e:f3:92:d8:07:46:
81:0f:4b:91:84:a3:5c:40:3e:f0:17:75:33:cf:ca:
9a:9a:2a:ef:e7:e7:d0:87:11:6e:5f:51:21:fb:0c:
9f:a1:5d:dd:53:ec:5c:ec:df:4c:0c:24:6d:96:99:
e1:e3:c1:10:81:44:bf:4c:ee:13:12:c2:f1:3e:7e:
a2:f5:19:e6:d4:33:a1:82:bd:4d:0e:69:e9:1f:99:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:7D:92:2B:2A:1B:35:52:1F:C4:9A:79:DD:AA:C2:50:E2:9A:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:59:e5:25:15:1e:7d:5f:0f:18:a6:df:74:18:76:5e:39:86:
91:fe:ed:39:2d:b0:98:ae:dd:f8:35:03:53:8b:ef:1e:53:f1:
67:76:23:b4:b5:a3:ea:c4:8e:85:fa:aa:b9:b6:09:9a:cd:fc:
09:54:51:16:27:6e:f8:b3:44:48:7c:7e:87:34:19:12:47:b5:
69:eb:02:71:19:6d:a7:1c:52:18:be:7d:92:ee:f2:a6:0c:00:
09:5a:67:04:63:e6:e0:0d:29:ac:43:ac:fd:38:de:7a:d7:ee:
91:5b:9a:16:b5:c3:e5:3b:24:8e:fc:16:c6:68:bc:0a:b4:89:
35:06:87:d6:82:4f:98:65:c3:76:5a:73:90:9a:84:e5:59:7b:
b7:74:ef:11:b3:3d:90:e7:c1:63:4c:cd:01:03:94:91:ca:57:
59:3d:54:a9:e3:04:d7:73:3a:6c:67:9b:70:cf:c8:d1:e6:bf:
bf:69:c8:30:32:08:36:56:62:bc:de:0c:0d:98:6e:19:88:0f:
ef:b1:e8:4c:56:f0:41:f4:2f:c8:16:39:0b:9d:07:ae:0a:8d:
67:df:b1:61:e9:8f:98:00:3a:4a:62:6d:f1:b8:d4:b8:a4:e8:
1e:2b:42:81:c1:cf:ed:74:f1:0e:27:56:84:fc:f1:24:20:e4:
06:a8:3c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTuHKYAet+xmvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
ODcxOGU2MWQtOWI5Zi00ZWIyLWEwMjgtMDYwMGJjNDgyZjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg030d7CYofT/iFFLnCQck2iPC/KByOB6D2Xq
aByO1L/14T+bS3wh1jiKH4LSzqZLUswbB4EknsUF/PkfQWO4BOeRdBxfTQdf9NvE
skIbrfU1R+wOYkAMbrMTtUlWtemySA4pyKVE+ni2Ixheeo5X7i+Yj85I5MLQzkPi
wdazfbZ+m/R6Em0va5tn3hQiHkIFwkRV3EskQSo320oumjAmCTn89Q0jv4IGjg+F
GI2e85LYB0aBD0uRhKNcQD7wF3Uzz8qamirv5+fQhxFuX1Eh+wyfoV3dU+xc7N9M
DCRtlpnh48EQgUS/TO4TEsLxPn6i9Rnm1DOhgr1NDmnpH5mm3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSSfZIrKhs1Uh/EmnndqsJQ4poSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmI0MTVkODQtMDg3Zi0z
YmNkLWE1ZmEtZDRlZWY5ZGM0MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNZ5SUVHn1fDxim33QYdl45hpH+7TktsJiu3fg1A1OL7x5T8Wd2I7S1
o+rEjoX6qrm2CZrN/AlUURYnbvizREh8foc0GRJHtWnrAnEZbaccUhi+fZLu8qYM
AAlaZwRj5uANKaxDrP043nrX7pFbmha1w+U7JI78FsZovAq0iTUGh9aCT5hlw3Za
c5CahOVZe7d07xGzPZDnwWNMzQEDlJHKV1k9VKnjBNdzOmxnm3DPyNHmv79pyDAy
CDZWYrzeDA2YbhmID++x6ExW8EH0L8gWOQudB64KjWffsWHpj5gAOkpibfG41Lik
6B4rQoHBz+108Q4nVoT88SQg5AaoPDQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:23 2026 by rpki-client