
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
File: edf37cc8-43ef-3f95-8478-5c871e14d557.roa (raw, json)
Hash identifier: n/CPaqM9jn0/YZzfQB8/4IC5tEKe5P+GUTqkwJRB258=
Subject key identifier: 1D:CE:02:93:0F:30:64:3A:B7:AE:2C:B7:2B:47:51:7B:9F:AC:CF:D9
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584E253F0D30E683EA333985D700
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 8069
IP address blocks: 20.33.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3f:0d:30:e6:83:ea:33:39:85:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=198be9f8-549d-4a3e-b5ad-8e2756506a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:c5:18:75:ba:3e:65:32:bf:ec:16:d6:45:
88:d8:4a:dc:00:a3:71:c8:ef:ea:65:2e:e7:3f:1c:
22:46:28:16:85:7d:cb:28:da:d8:5d:7e:0e:91:49:
5b:24:a2:04:fe:81:26:02:df:e6:2d:81:34:55:68:
ec:0f:06:4c:0c:83:66:22:44:ad:43:21:8f:03:17:
38:4c:b0:b9:c3:50:2d:41:9a:04:8d:f5:55:66:b2:
ed:9a:1b:25:ac:dc:df:51:f9:6d:2c:93:3b:63:d4:
89:79:97:99:eb:28:92:b4:74:35:53:04:b7:89:4f:
05:b8:90:36:26:fb:14:a8:50:35:7c:16:4a:99:1b:
17:c2:81:49:e5:e8:5a:40:34:65:b8:02:d4:2f:a9:
22:2b:69:a4:f9:18:4d:7d:b6:97:54:79:ba:eb:2f:
d9:cb:ad:3d:32:a3:1f:84:0e:96:3e:8e:71:21:06:
5d:d4:e0:6c:19:99:09:db:20:af:96:98:31:df:be:
17:7a:34:ba:cf:fe:7a:5b:e6:4f:6d:32:b3:1a:69:
0a:2a:2c:20:59:2b:08:38:1b:bd:44:84:c7:f6:78:
a0:17:a7:7a:f5:e9:4d:41:a4:9f:a7:e2:0e:b5:d3:
0d:cd:7a:ae:8a:22:b8:0c:6f:3d:00:c1:79:7c:a2:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:02:93:0F:30:64:3A:B7:AE:2C:B7:2B:47:51:7B:9F:AC:CF:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:00:20:32:8e:96:df:24:f7:d8:52:2b:ae:d1:a5:cd:25:db:
ab:89:fc:0b:f8:f0:31:6e:6a:a8:ba:77:83:70:46:ae:6c:9b:
34:d3:52:35:ba:e7:7f:0f:2f:e4:d7:47:3b:1a:75:66:46:bf:
7d:10:f5:ee:dd:63:6a:54:74:42:12:d8:03:97:d3:b5:29:36:
d8:8b:8e:52:b0:84:52:fa:20:63:40:13:06:51:1a:9d:35:00:
ea:f6:63:47:b4:16:71:01:bb:bd:19:e1:11:cc:4d:e0:c9:01:
77:93:3f:36:fb:d0:fd:b5:05:05:55:83:ad:14:65:81:ff:89:
6d:33:ad:cf:d6:a2:be:9f:68:fa:af:64:72:05:93:a2:c1:fb:
ce:5e:3c:ef:0a:6e:67:ea:6a:e1:fd:e5:89:5b:c4:84:26:66:
e4:4b:7d:0e:82:18:93:1d:3b:0d:7e:91:09:0d:de:ec:04:6a:
3d:d6:18:9a:ba:79:90:7f:8f:95:f1:51:a6:a9:b0:ee:a6:a7:
29:86:b7:5a:aa:e2:d5:e4:48:7a:db:12:60:7d:1b:3b:f5:6d:
3d:84:83:f9:49:b3:6e:1c:ce:46:b3:3c:b8:a9:ab:26:3f:34:
74:fa:91:0f:ab:db:fa:25:09:67:65:a3:11:37:e2:8f:6b:32:
08:f5:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:28 2026 by rpki-client