
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa
File: f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa (raw, json)
Hash identifier: /QaMg2qop7gumWy1fYG/D8wGB2MOn4g8mOkg1OolEVg=
Subject key identifier: 6C:F7:CF:FB:3D:A5:99:79:0B:0E:F0:B1:07:CF:87:65:C5:6E:5F:9C
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584CB551F8C84D2BA02EC85B6080
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 8069
IP address blocks: 52.122.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:f8:c8:4d:2b:a0:2e:c8:5b:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=9321e8c0-673f-4898-ae1c-99bdda7c22b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:44:cf:e3:7b:14:41:18:26:4f:cc:16:a2:
84:7a:a4:63:89:6e:f1:a4:43:6a:4d:fc:ab:4c:72:
85:12:60:5d:d0:71:54:5d:7e:38:9f:c1:19:92:00:
49:74:57:d3:ef:84:e2:b1:d6:05:97:74:cb:29:46:
7b:59:f9:c8:a4:b0:fa:29:34:25:cf:7d:88:6a:cf:
c3:db:63:67:fd:2e:8d:29:08:ae:e2:e2:10:93:14:
06:75:41:fd:64:fd:8e:cb:6f:07:04:6e:b0:6e:db:
f0:c4:33:bf:8d:5e:1e:65:e3:6e:60:60:ef:6c:ef:
3f:9f:07:9a:24:48:64:7d:80:7b:e5:f3:48:ef:c8:
b4:24:3a:71:57:40:32:6e:1a:b8:0b:18:c2:bd:5a:
76:31:51:a8:e6:66:41:ca:14:3a:49:03:94:7c:8a:
7d:77:2d:5d:94:bf:a3:e4:8f:a9:a8:57:4e:d5:f5:
d8:c9:9c:d6:00:0e:ab:ea:6e:95:3a:21:31:ee:c7:
83:92:29:95:2a:6a:b0:85:f1:96:df:3c:3f:1c:35:
7f:80:fc:6e:b8:2b:18:6d:28:e4:2f:d7:b3:67:18:
2c:9e:ab:c8:42:45:62:8c:d9:5c:21:f3:21:77:93:
54:d4:a1:bd:70:8e:d2:86:31:c9:27:9d:7a:d7:81:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:CF:FB:3D:A5:99:79:0B:0E:F0:B1:07:CF:87:65:C5:6E:5F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
52.122.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:6d:e5:91:2c:2f:60:56:fb:40:ea:a1:18:4b:71:b3:9d:80:
ff:e0:ae:c9:dc:9f:94:fc:f7:69:07:58:6b:16:85:0f:df:6c:
60:ed:d8:bf:a2:5f:14:93:ed:18:bf:6e:9f:f3:b2:fc:02:87:
1f:2a:4a:76:66:0c:16:2c:18:98:92:fc:b8:e1:0f:d6:85:51:
1c:8a:4e:8c:5d:87:01:85:d1:b8:d2:1a:97:65:6a:12:c4:35:
4e:e5:2c:cf:ba:3d:d3:77:0b:12:0e:e3:8a:38:9e:4a:18:96:
ca:20:60:4a:6b:2e:d7:c0:29:f0:3f:76:f8:f7:77:d4:16:81:
36:66:d2:f6:ea:92:98:9f:44:18:49:09:db:e9:4c:54:ff:dd:
07:f1:6e:3e:10:59:a6:bf:7f:10:3e:4a:a1:f8:f2:96:33:cc:
82:ea:41:37:c9:7b:ed:68:1d:d4:0e:f3:fd:31:52:57:59:94:
70:3c:74:da:14:98:04:08:be:aa:40:19:ea:27:8c:2e:4f:30:
58:e6:f9:d4:fb:bb:07:62:eb:75:c1:ef:84:a4:3a:38:e7:1a:
d5:b5:0e:f8:ad:78:7e:f0:af:7d:95:b1:be:cf:b2:71:4c:6b:
9d:50:e1:78:07:3d:ff:49:b4:b8:0b:85:6f:d6:61:96:38:91:
1f:22:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:14:32 2026 by rpki-client