
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17aad98a-f178-362d-b701-0b808354d7a2.roa
File: 17aad98a-f178-362d-b701-0b808354d7a2.roa (raw, json)
Hash identifier: GNMlr/wKEioD0BVPDbp8m5MrBF9ifwneIpC7hPexPUk=
Subject key identifier: 7A:F9:8F:21:A5:7D:2D:85:ED:2C:85:43:BF:14:8A:26:A0:0D:AE:C4
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584EE423584719D83D88939F6100
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17aad98a-f178-362d-b701-0b808354d7a2.roa
Signing time: Wed 19 Aug 2026 18:04:02 +0000
ROA not before: Wed 19 Aug 2026 18:04:02 +0000
ROA not after: Fri 12 Apr 2030 04:00:00 +0000
asID: 8075
IP address blocks: 20.150.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:58:47:19:d8:3d:88:93:9f:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Aug 19 18:04:02 2026 GMT
Not After : Apr 12 04:00:00 2030 GMT
Subject: CN=61ca7410-6e99-4c78-843e-ad02e00b077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:02:c2:4b:0a:9b:8b:b7:6c:c9:2a:9a:3c:
50:e3:a1:c0:bf:e2:fa:ba:0a:c5:79:3c:68:08:e2:
3f:f2:07:c6:91:e0:7b:5c:65:5b:eb:ab:82:2c:6e:
f2:8e:26:60:94:d5:d3:83:93:57:d4:d3:3d:71:a4:
99:3c:78:4d:8f:7c:65:82:2e:8f:dc:d2:62:f6:ed:
d7:ce:d0:42:7a:31:a0:06:f0:9d:9f:10:82:1d:1f:
21:ae:7c:97:66:ec:84:9e:52:ba:44:0b:c5:58:a9:
b5:c1:d6:7e:ba:06:97:57:a7:5a:91:68:55:63:a1:
4a:2f:6c:d6:e7:e9:96:1a:fd:52:1b:ce:99:7f:0b:
21:12:6a:d3:df:50:ef:f1:70:df:78:f1:52:b1:be:
3d:7d:67:95:85:a1:91:ac:a2:65:3f:be:6f:63:d6:
10:f8:5a:1f:a6:0e:fb:ac:f8:14:d9:9c:8c:be:fb:
8f:2d:c4:68:c4:ac:60:81:66:83:2f:97:da:63:fc:
50:66:de:36:4f:df:e6:99:41:ef:7b:5f:33:03:ad:
f4:1a:c2:43:ad:48:01:33:6f:b6:da:28:75:e9:68:
d0:bc:00:16:2a:a0:2c:62:8f:a4:d5:82:51:78:1d:
84:28:fb:50:e2:28:2a:52:44:ac:f6:84:15:5f:ab:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:8F:21:A5:7D:2D:85:ED:2C:85:43:BF:14:8A:26:A0:0D:AE:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17aad98a-f178-362d-b701-0b808354d7a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.150.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:26:21:d2:d4:2c:cf:0f:a1:de:84:ab:6b:4a:ae:e2:3e:18:
51:90:d6:7b:9f:a3:03:ab:73:41:60:6c:6d:b5:c3:ea:74:c8:
f5:62:8d:2b:36:58:72:74:ec:41:3b:cb:fc:42:47:eb:eb:6f:
19:72:46:84:6d:63:fa:19:9c:5d:20:0e:2c:ed:d8:a5:7a:3c:
87:84:d1:aa:de:5e:d1:50:4b:47:ee:ad:f3:1b:f5:ed:e2:d0:
a4:2a:b6:c9:b8:f5:cb:62:e1:7b:f6:a4:a9:c1:b5:be:58:00:
24:3a:14:0b:c9:21:cc:f8:56:72:76:e0:d6:81:24:05:f7:29:
a0:01:4c:7f:3d:5d:1e:83:5f:85:e4:79:61:97:b1:ee:1b:7b:
e1:54:d0:ec:0a:65:4b:57:bc:c9:c5:c8:05:bb:0a:d5:cf:6e:
5b:69:e9:8b:c4:88:18:df:ee:3f:80:6d:f5:ae:c3:6e:ae:29:
b8:54:19:0d:21:69:20:10:82:a0:6c:53:cd:e5:3b:74:c9:a8:
06:1c:54:9b:c2:7e:2f:c4:50:25:ec:90:47:f0:57:b4:5d:9e:
bd:8f:10:50:5d:af:ca:c6:09:70:3f:16:2c:1c:49:fd:38:0c:
2a:c1:cf:4e:66:16:18:5a:c6:86:f1:fc:cb:68:b1:a7:72:ac:
3e:24:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:42:01 2026 by rpki-client