
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa
File: b57f4240-51b4-387a-a937-eb616049d478.roa (raw, json)
Hash identifier: qDHr5GaZz3oUzrP7RcwSZpd12sUERGiesd/ZQosjvRA=
Subject key identifier: 03:E9:B7:51:F6:25:7D:DF:DA:82:2A:8B:A2:E4:A6:6F:62:3C:13:DC
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584CC6121EC3C005BF2BE489E500
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 8069
IP address blocks: 20.153.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:12:1e:c3:c0:05:bf:2b:e4:89:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=e1a1eb10-99af-42c0-9e86-645fa0e2334b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:3f:b2:77:b4:be:10:62:2c:73:00:b8:04:
d2:fe:b1:f8:75:72:76:62:b4:a4:8c:63:93:e7:41:
0e:73:d6:47:e8:7e:0e:69:1c:ec:2a:8e:53:83:f2:
6f:5a:24:68:8d:2f:fe:e9:1d:6f:60:ee:25:ee:ce:
16:58:9e:ee:29:0f:25:81:b1:d4:b3:18:ea:99:c2:
16:98:74:a3:f8:0d:6a:b7:2a:e9:d1:f8:25:ef:73:
11:6e:28:93:92:af:8b:e4:c1:5f:5b:41:8f:94:15:
93:97:93:bc:32:d3:1d:cd:81:74:b2:63:03:45:f5:
36:71:a4:48:b2:ca:2b:45:8d:f4:41:7c:6f:05:e4:
1c:19:aa:41:78:2d:de:9d:30:b4:40:cd:dc:d6:dd:
34:4a:09:c4:0e:d6:7f:92:3e:29:8c:a9:9a:93:65:
07:af:02:a0:17:36:82:64:fc:7f:e8:fc:d4:bd:6c:
cf:f5:8b:13:a2:0d:54:e2:14:9f:20:0f:e3:47:6d:
87:90:21:d6:21:92:87:a3:f1:e2:c9:93:a9:2f:56:
00:71:e3:f5:4d:fa:e0:70:a3:93:fc:10:14:d2:a3:
51:cf:a4:f4:35:d0:3a:6b:9f:41:41:99:77:8a:fd:
0d:5b:c1:3d:8b:11:8c:de:88:88:75:ca:d8:91:0f:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:B7:51:F6:25:7D:DF:DA:82:2A:8B:A2:E4:A6:6F:62:3C:13:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:e5:1c:31:5d:f1:11:a3:26:06:f3:0d:f1:e1:ac:5e:87:1b:
8a:bb:2e:91:c5:47:76:3d:3c:b5:7f:4c:61:82:c1:31:18:b1:
32:13:32:fc:3e:81:22:05:2f:2f:95:9f:d3:07:dc:ad:28:fe:
b1:1d:5d:8b:f6:14:59:4a:b4:58:eb:c4:38:13:17:0f:b1:ed:
71:68:cb:22:1a:f2:bf:af:c4:aa:09:ac:39:60:98:03:3c:e9:
90:51:a2:4d:56:99:f3:45:d4:51:57:c5:49:a5:b0:40:73:b3:
9a:3b:a9:bc:18:d3:4b:1e:c9:fe:22:ad:14:7f:4b:79:37:57:
95:49:4a:a6:fa:66:16:5b:85:e7:c0:ed:be:e0:ef:7c:a9:d0:
3a:33:48:ae:74:38:f5:aa:fb:0f:98:15:bb:b7:58:8e:16:ba:
7e:a4:76:7c:99:c8:df:c2:71:2e:42:c1:a3:5a:b2:39:8d:6f:
ab:19:82:be:9a:e0:f5:52:f6:df:df:d1:8a:af:96:07:bd:89:
b2:54:97:70:a6:c9:a7:5c:ac:62:ac:5f:e0:89:05:85:97:16:
9c:94:33:95:91:bd:4a:ba:f8:78:c7:72:88:3a:ee:a2:72:75:
9b:0e:c8:c7:48:be:d9:69:94:1d:62:41:10:83:63:57:d4:b8:
25:90:9b:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEh7DwAW/K+SJ5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
ZTFhMWViMTAtOTlhZi00MmMwLTllODYtNjQ1ZmEwZTIzMzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVQ/sne0vhBiLHMAuATS/rH4dXJ2YrSkjGOT
50EOc9ZH6H4OaRzsKo5Tg/JvWiRojS/+6R1vYO4l7s4WWJ7uKQ8lgbHUsxjqmcIW
mHSj+A1qtyrp0fgl73MRbiiTkq+L5MFfW0GPlBWTl5O8MtMdzYF0smMDRfU2caRI
ssorRY30QXxvBeQcGapBeC3enTC0QM3c1t00SgnEDtZ/kj4pjKmak2UHrwKgFzaC
ZPx/6PzUvWzP9YsTog1U4hSfIA/jR22HkCHWIZKHo/HiyZOpL1YAceP1TfrgcKOT
/BAU0qNRz6T0NdA6a59BQZl3iv0NW8E9ixGM3oiIdcrYkQ+ZiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPpt1H2JX3f2oIqi6Lkpm9iPBPcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjU3ZjQyNDAtNTFiNC0z
ODdhLWE5MzctZWI2MTYwNDlkNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDlHDFd8RGjJgbzDfHhrF6HG4q7LpHFR3Y9PLV/TGGCwTEYsTITMvw+
gSIFLy+Vn9MH3K0o/rEdXYv2FFlKtFjrxDgTFw+x7XFoyyIa8r+vxKoJrDlgmAM8
6ZBRok1WmfNF1FFXxUmlsEBzs5o7qbwY00seyf4irRR/S3k3V5VJSqb6ZhZbhefA
7b7g73yp0DozSK50OPWq+w+YFbu3WI4Wun6kdnyZyN/CcS5CwaNasjmNb6sZgr6a
4PVS9t/f0Yqvlge9ibJUl3CmyadcrGKsX+CJBYWXFpyUM5WRvUq6+HjHcog67qJy
dZsOyMdIvtlplB1iQRCDY1fUuCWQm5s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:12 2026 by rpki-client