
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec270492-bce7-38b7-be61-15cd9d627fa4.roa
File: ec270492-bce7-38b7-be61-15cd9d627fa4.roa (raw, json)
Hash identifier: pKRupp8yyiFSec4ntX3zerTCkuemLL1DTb6dtsMHCXU=
Subject key identifier: F0:62:F7:90:9D:FE:72:A3:D5:73:80:FF:E8:71:4B:50:8F:59:99:2F
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584CC347491C3394D5E886EB6700
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec270492-bce7-38b7-be61-15cd9d627fa4.roa
Signing time: Thu 05 Feb 2026 14:00:40 +0000
ROA not before: Thu 05 Feb 2026 14:00:40 +0000
ROA not after: Wed 06 May 2026 13:00:40 +0000
asID: 8069
IP address blocks: 20.157.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c3:47:49:1c:33:94:d5:e8:86:eb:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Feb 5 14:00:40 2026 GMT
Not After : May 6 13:00:40 2026 GMT
Subject: CN=f55d4525-c678-41a7-8e21-4762ecd54aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:8b:7f:a0:f3:50:f6:79:c5:cd:72:5e:8e:
8f:92:2d:48:88:89:eb:9a:92:68:88:df:0e:a0:cb:
5b:da:dc:e9:69:88:d5:a6:89:ac:25:6e:71:9c:73:
ad:f6:9c:7a:e1:d1:0e:17:57:c6:6d:07:f8:15:0f:
8e:71:fc:15:14:b7:2c:19:e8:d6:de:72:4f:c9:cf:
5a:c7:ee:03:be:00:ba:21:f4:a0:d4:7c:04:4f:a7:
50:84:80:a2:19:f6:14:1d:01:7c:28:9b:73:4d:ea:
83:f9:9f:36:3b:64:94:d1:cb:82:d1:46:d1:25:71:
52:1a:3d:5f:24:cf:55:76:d0:13:ef:c1:7b:6b:02:
1d:27:9c:8e:bf:d9:36:c3:ab:e6:b7:b4:b2:f2:68:
8f:c8:2f:f8:2a:0e:7c:b9:15:59:a8:25:60:87:4b:
b2:a9:8e:15:e9:a1:66:dc:66:ca:43:8e:94:33:54:
24:c1:95:dd:e3:ec:6e:9d:7e:ed:e6:26:79:fb:3f:
1a:e7:1c:7d:7f:8d:85:7e:88:db:1f:05:18:98:6b:
81:54:88:e9:e1:07:44:2d:6d:aa:1c:cc:be:11:60:
3d:5f:cb:42:a1:fd:03:d8:82:9a:81:c5:0a:78:5c:
19:ce:e6:56:d6:94:a6:ec:0d:83:27:53:92:72:0b:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:F7:90:9D:FE:72:A3:D5:73:80:FF:E8:71:4B:50:8F:59:99:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec270492-bce7-38b7-be61-15cd9d627fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ea:73:44:c2:0c:3d:63:21:7d:7d:18:fe:dc:d9:0c:76:78:
63:ec:35:c9:04:3e:4c:bb:b9:a6:4e:8d:b3:c6:c2:27:da:55:
20:9d:aa:27:69:9c:5a:06:fc:cf:78:de:b1:10:a9:2d:a6:e8:
f7:30:8a:87:59:64:ed:0e:28:ef:79:4b:da:ad:1f:ba:62:7d:
66:0f:19:90:08:f1:7c:3e:c0:85:52:4e:95:3f:dc:ec:0e:68:
f2:64:5a:2e:9f:6a:ca:9e:d8:b9:a2:af:67:78:64:c1:af:ba:
78:4e:8c:81:f1:ab:a6:ea:b5:d0:96:3e:62:9a:69:2e:a1:2a:
3e:53:e9:4b:df:71:63:5d:38:61:08:97:f4:5e:45:72:6d:6b:
32:2b:2d:4a:18:52:fd:aa:05:71:24:f0:25:87:04:ac:af:2d:
11:e4:fa:69:bf:26:52:84:76:45:78:e9:85:4e:84:ff:96:5a:
9b:f7:73:4a:91:dd:8c:2b:1d:4a:84:d4:fb:c0:69:09:01:f4:
f4:9c:85:07:7b:de:a4:6c:cc:24:19:e7:13:53:fc:a4:bd:45:
54:ca:dc:f1:25:aa:2c:dd:1c:84:0b:c9:ca:e3:ed:0b:a9:55:
eb:61:72:d1:e6:09:eb:14:0e:1b:44:f2:2f:bf:7e:3a:2d:31:
11:0b:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:27 2026 by rpki-client