
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
File: 8dea440f-3599-3031-bd25-4f82936b64f4.roa (raw, json)
Hash identifier: 5N8wxa+oV2wuA3C5iCK0xN6Xrjv7ng6lLZLlgQCwj6A=
Subject key identifier: 3D:88:36:45:A7:09:F0:BA:73:FC:F1:41:F0:46:FE:38:19:72:DC:7F
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584E7634E3B5C9A57D96DC493D40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
Signing time: Sat 11 Jul 2026 09:00:12 +0000
ROA not before: Sat 11 Jul 2026 09:00:12 +0000
ROA not after: Fri 09 Oct 2026 09:00:12 +0000
asID: 8069
IP address blocks: 20.157.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:76:34:e3:b5:c9:a5:7d:96:dc:49:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jul 11 09:00:12 2026 GMT
Not After : Oct 9 09:00:12 2026 GMT
Subject: CN=855fd358-ff1a-4967-b283-3ac2d4b60e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:96:78:9e:6e:33:51:b8:b2:e9:ba:61:53:
d8:7a:43:f6:33:1d:a9:ed:4e:62:99:61:5b:e8:52:
52:79:3f:0b:6d:ce:53:c7:6b:69:df:83:7b:57:6e:
5a:9c:0c:07:f7:0a:0a:0e:9b:68:3c:19:2e:2e:cf:
b2:76:09:c2:b8:e0:0b:8c:9d:24:89:7b:03:45:cb:
5e:d9:7d:7e:82:3e:e3:78:64:8b:ef:da:35:b9:9a:
c6:0e:1a:9d:7b:b1:82:3b:ea:38:5e:fd:4f:8f:bf:
17:03:89:54:ae:79:19:42:66:2f:38:5a:91:03:0b:
86:9a:b4:7c:27:42:4e:44:d7:6f:33:7f:4f:d9:44:
cb:a0:09:e9:60:30:80:55:5b:d0:ec:83:2b:98:33:
0a:d5:da:e0:0b:60:ac:b1:af:6e:6c:da:5e:cf:db:
71:ef:b9:71:fc:c6:81:24:37:32:6a:96:c0:c3:f4:
af:1f:90:73:00:33:7e:73:7e:a7:83:6c:1f:42:f8:
75:fc:42:eb:37:b3:42:08:be:69:a1:ee:2e:40:98:
b4:2a:ba:a4:cb:14:37:98:3a:e1:4b:02:53:1d:52:
e3:ab:73:fb:f1:ac:4f:a0:2b:93:ba:e4:f9:76:22:
d0:ee:61:a7:fa:f2:4a:7e:12:3a:af:91:11:7c:b8:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:36:45:A7:09:F0:BA:73:FC:F1:41:F0:46:FE:38:19:72:DC:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:08:17:1c:1e:34:1d:f1:c3:e6:39:51:4d:b7:17:e9:4a:10:
23:9b:76:c9:95:33:52:06:4d:d4:06:d7:b5:5c:7f:dd:b4:c5:
60:ac:96:52:61:f3:24:8e:58:7a:8a:a4:3a:50:b2:5c:f4:23:
72:bf:8e:39:ab:05:21:05:84:aa:a5:b3:35:56:f8:84:4f:06:
c7:23:75:cc:9a:95:26:40:b7:50:fe:f4:ff:fe:53:59:b1:4b:
c9:70:ed:b0:69:fc:08:8f:5b:15:5a:b7:8c:7f:09:27:60:0d:
12:21:41:aa:e8:6c:43:36:e7:de:1e:ce:e1:3d:9a:b9:e1:e8:
51:09:a6:67:81:c9:1a:22:90:22:b5:55:40:b6:c3:b3:44:4b:
10:49:d5:09:4f:ae:48:b7:59:fc:60:67:f9:3a:67:bd:94:38:
f7:9f:f1:6b:86:af:8f:23:fc:71:e0:0a:41:48:2b:88:b1:e7:
1e:fa:d7:23:3f:39:33:ee:f2:77:05:75:cb:c8:94:4f:88:17:
bb:d1:24:2b:59:3b:c8:35:5f:42:20:b1:83:ea:e0:b6:48:bf:
a6:53:7a:72:b0:15:ff:36:d8:5d:9d:94:8e:88:19:c4:2d:ee:
6e:1c:30:77:0c:3d:9e:90:19:42:0e:48:a8:ee:e8:8a:19:9a:
22:6c:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:09:16 2026 by rpki-client