
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d4199a9-7b02-303c-82d5-0b96845b74dc.roa
File: 4d4199a9-7b02-303c-82d5-0b96845b74dc.roa (raw, json)
Hash identifier: kMbW9vJibEiHHa6U6fW0ZPY47FAMMzOB6YbjmY7ypPU=
Subject key identifier: 46:3E:0B:0E:CE:40:74:73:FD:B2:A9:96:B9:D2:46:B8:46:63:C4:BC
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584DE2B5F4D67951F750710DCC80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d4199a9-7b02-303c-82d5-0b96845b74dc.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 8069
IP address blocks: 20.153.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:f4:d6:79:51:f7:50:71:0d:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=8a810648-e8e5-4a57-a8f9-b146a1472f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:b6:b0:b7:25:be:ef:19:eb:bd:a6:3d:d9:
11:df:8a:61:5b:9d:45:d4:40:f7:be:b5:09:22:73:
56:95:43:1f:d5:97:0f:79:4a:8b:81:cd:2b:a1:de:
1b:a5:2c:8a:f1:26:e5:bf:e7:ca:77:3d:f0:de:a8:
e0:81:cd:ab:cd:85:2b:90:53:06:e0:f8:de:a4:80:
ef:70:81:52:65:99:4f:01:80:55:ec:89:c6:f6:1a:
9e:2e:4b:5d:0f:4f:c4:d8:a7:ab:63:c4:2b:d4:b4:
de:4a:df:9f:be:54:b9:8d:3a:10:79:a0:6c:17:47:
5a:b6:ec:32:50:21:21:bb:0f:2f:fb:2b:f3:66:71:
6f:1d:ce:7d:f3:34:aa:06:2a:95:1d:8d:46:92:b9:
cd:7a:96:13:6c:b8:22:77:0c:b5:34:a1:4f:ce:6a:
43:b4:1f:59:20:96:54:d9:72:ec:8d:fb:64:e4:ec:
f2:a9:df:ba:b6:b1:6f:a7:c8:41:7b:6c:52:73:ef:
f6:82:ae:8d:db:31:51:f9:98:2e:86:2f:5b:29:a0:
ad:c2:fe:90:b2:eb:46:a3:da:14:b4:ce:29:7c:08:
47:83:22:34:75:41:a4:78:34:42:13:b6:cf:38:6c:
8c:9d:70:8c:36:7e:92:cc:e4:3f:25:a9:11:0f:4e:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:0B:0E:CE:40:74:73:FD:B2:A9:96:B9:D2:46:B8:46:63:C4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4d4199a9-7b02-303c-82d5-0b96845b74dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:18:f8:35:10:84:9a:ad:8d:34:2e:6e:2f:be:13:57:89:f5:
52:be:5a:1a:e4:0b:3f:99:6b:b2:a0:ac:6a:08:59:e8:d4:58:
a7:46:0e:35:7e:dc:a1:3f:4f:8c:da:f6:0c:07:ae:b2:2f:bf:
4b:df:0d:24:46:c9:84:f0:fd:50:d6:89:e0:27:05:f2:ca:63:
39:f6:8b:bc:cb:f7:cb:be:8d:63:4a:a4:22:fb:80:4b:bf:a4:
29:6f:37:88:c2:59:4e:47:55:52:29:15:bd:69:27:d0:12:da:
35:ea:1e:6c:b7:be:cf:4d:73:34:d6:fd:d3:49:fd:07:58:d3:
36:04:9f:61:c1:02:1b:f2:c9:9c:3b:4c:68:50:3c:f4:a1:d5:
d7:62:01:06:a4:b9:33:9e:85:c7:fb:75:3d:63:31:fe:6e:66:
ef:27:8f:fa:a7:da:cd:d6:a6:e0:f2:f4:e3:3a:10:94:33:fa:
a2:b3:69:a0:a9:f0:83:17:b3:00:57:a2:b1:a8:6b:32:23:e0:
91:01:69:ce:b1:a0:be:f5:48:6e:41:2e:fc:c2:b1:f2:bd:4b:
12:a0:8d:59:1d:be:d9:4b:15:d7:12:73:08:37:a2:56:0e:a8:
71:05:26:05:4f:fb:f6:ea:b6:75:98:cd:d9:4a:44:f7:3b:98:
96:37:7f:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itfTWeVH3UHENzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
OGE4MTA2NDgtZThlNS00YTU3LWE4ZjktYjE0NmExNDcyZjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqO2sLclvu8Z672mPdkR34phW51F1ED3vrUJ
InNWlUMf1ZcPeUqLgc0rod4bpSyK8Sblv+fKdz3w3qjggc2rzYUrkFMG4PjepIDv
cIFSZZlPAYBV7InG9hqeLktdD0/E2KerY8Qr1LTeSt+fvlS5jToQeaBsF0datuwy
UCEhuw8v+yvzZnFvHc598zSqBiqVHY1GkrnNepYTbLgidwy1NKFPzmpDtB9ZIJZU
2XLsjftk5Ozyqd+6trFvp8hBe2xSc+/2gq6N2zFR+Zguhi9bKaCtwv6QsutGo9oU
tM4pfAhHgyI0dUGkeDRCE7bPOGyMnXCMNn6SzOQ/JakRD05nhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEY+Cw7OQHRz/bKplrnSRrhGY8S8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGQ0MTk5YTktN2IwMi0z
MDNjLTgyZDUtMGI5Njg0NWI3NGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4Y+DUQhJqtjTQubi++E1eJ9VK+WhrkCz+Za7KgrGoIWejUWKdGDjV+
3KE/T4za9gwHrrIvv0vfDSRGyYTw/VDWieAnBfLKYzn2i7zL98u+jWNKpCL7gEu/
pClvN4jCWU5HVVIpFb1pJ9AS2jXqHmy3vs9NczTW/dNJ/QdY0zYEn2HBAhvyyZw7
TGhQPPSh1ddiAQakuTOehcf7dT1jMf5uZu8nj/qn2s3WpuDy9OM6EJQz+qKzaaCp
8IMXswBXorGoazIj4JEBac6xoL71SG5BLvzCsfK9SxKgjVkdvtlLFdcScwg3olYO
qHEFJgVP+/bqtnWYzdlKRPc7mJY3f5Y=
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:46:50 2026 by rpki-client