
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
File: dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa (raw, json)
Hash identifier: uPadiXQ0rEPJEXay/wSfj49lFP2o/PVLZIpc3DMKn6E=
Subject key identifier: 49:10:AE:AE:1C:8B:C8:7B:8B:94:FA:B3:A4:6D:51:13:CB:FB:47:F2
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584EA7873CC3697636394C841980
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 8069
IP address blocks: 20.157.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:3c:c3:69:76:36:39:4c:84:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=718fc473-16ea-4f49-88b2-ebca6a14f23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:8b:9d:1b:06:26:ac:08:d3:04:c7:da:98:
a2:4b:57:9f:a5:2e:5e:fd:1b:70:94:7e:15:77:18:
8e:f7:cf:24:6f:d8:d3:6d:2a:3b:3c:0a:b1:e7:e0:
06:1a:7f:b5:91:6a:99:ba:39:c5:75:96:11:74:1b:
85:a2:41:68:72:77:a9:72:3c:06:2a:38:0b:a6:21:
6f:a9:3c:0b:ca:65:67:1f:c2:79:01:0d:a8:11:91:
01:0e:67:53:3f:79:f1:3e:e5:85:20:61:e7:4e:59:
52:04:7a:bf:7a:e8:76:ec:7d:be:97:2f:91:1f:66:
e5:8c:02:7e:7e:ed:6a:eb:83:bd:c5:5d:15:c0:c2:
65:87:d4:03:23:9f:a0:4e:46:08:62:3f:5c:98:e8:
eb:06:02:15:a8:d5:bc:50:12:57:c9:f5:cb:f2:96:
a3:fe:5d:52:cd:73:70:0e:28:dd:d7:c2:c1:5b:29:
32:95:26:9a:47:9e:b6:17:a2:7f:c4:10:1e:69:2b:
73:18:02:9a:29:35:cb:39:4c:70:ce:06:6f:af:53:
03:d0:81:ea:7a:48:6c:f5:e4:34:8f:7a:f2:8b:5f:
44:8c:c6:95:0a:05:d7:3c:21:8d:af:aa:6f:89:a7:
d4:7d:1b:00:de:17:a4:b9:47:7c:b9:2f:8c:21:b7:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:AE:AE:1C:8B:C8:7B:8B:94:FA:B3:A4:6D:51:13:CB:FB:47:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c3:08:bc:13:6b:26:62:01:ad:24:36:66:c4:5a:a1:67:02:
50:f7:5b:6b:05:19:50:c5:de:a1:f8:36:9f:d7:ac:af:24:41:
7b:61:71:6f:3b:9b:3b:b3:17:6a:5e:70:1b:fc:8d:c1:57:f2:
6b:81:3e:b0:fa:fe:2b:fc:3a:13:69:b7:a5:2e:3f:dd:ea:5a:
8d:73:40:51:a5:5c:a0:0c:9a:88:b6:db:c2:40:19:a9:5e:c0:
4e:e5:ca:72:51:8b:bf:cd:c1:7f:1a:e7:ca:8b:35:f8:19:b3:
27:be:45:bb:d2:ed:3f:07:48:a9:1e:0a:b8:a6:58:14:66:d7:
0e:fc:36:1e:c0:81:0e:15:f6:55:ae:06:66:63:75:ce:9a:b6:
ad:86:98:05:dd:f7:ab:62:6a:e6:7f:d0:90:79:28:7a:e2:22:
b7:4a:47:de:e0:fc:5a:b3:e0:21:92:c1:6e:f2:b1:3d:1e:77:
ac:cb:6c:10:93:9f:37:97:ba:59:a7:d7:9e:7b:2b:eb:4b:ae:
7c:dd:71:89:f3:b7:ba:0b:69:47:fc:ba:e6:23:bb:94:cd:e1:
c4:50:da:be:65:f3:5a:56:74:a6:26:ca:e0:3e:f0:c6:95:0f:
10:8c:2b:b8:f1:a7:d7:1f:d6:98:74:e5:b4:28:9c:b7:4a:a1:
d1:77:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:49 2026 by rpki-client