
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa
File: e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa (raw, json)
Hash identifier: D9C9sTftu+ikpes1LQNTFzY1+TcBjwC3ZhCunQnGJmo=
Subject key identifier: DA:C6:30:18:86:01:A5:5C:2A:2C:4C:C8:A8:0B:FA:24:A6:3B:5E:DF
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584DF4DB8C2D3B23A24A54DF37C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 8069
IP address blocks: 20.153.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:8c:2d:3b:23:a2:4a:54:df:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=59c16c1a-0213-4eff-9127-6c911f27c45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:47:0d:f6:2f:16:96:33:80:08:25:eb:21:
37:07:1c:40:84:4a:1e:a7:d6:4c:9a:05:b7:cf:6d:
04:ad:be:14:18:c7:56:3f:16:2e:d9:df:bb:3a:b1:
2c:7b:e2:f0:c0:5a:f7:2c:32:ab:29:38:a9:48:71:
cd:de:00:33:00:cc:1c:9e:18:db:0b:b6:39:c7:c6:
16:64:22:6b:86:1b:8a:11:3f:21:92:ed:bb:c1:ff:
32:fe:46:95:f7:3d:a3:7f:5f:66:f6:27:64:9e:5a:
4a:ef:e8:57:a8:5c:55:3e:95:66:cd:a0:4c:3d:05:
d5:f4:9b:e9:00:9e:4d:31:5a:64:77:26:34:70:06:
54:34:8c:69:36:a7:4d:17:8f:ee:4c:5b:53:06:a6:
a9:ef:be:e5:ef:7e:87:4a:c2:3b:c1:d5:6a:85:3d:
f7:e0:95:ed:53:4e:94:bf:fb:14:6c:ca:00:14:3d:
4b:94:fe:da:62:97:16:25:8d:a4:06:91:b0:9b:36:
64:b5:52:50:cc:d5:7c:f4:fd:0c:0e:a1:f7:6f:6f:
37:7e:09:eb:81:1c:0b:03:5f:ef:e7:c1:6f:e4:ee:
a3:02:9b:4b:b5:81:d5:03:da:a8:de:19:63:80:ca:
74:c6:70:8f:4a:81:51:ea:b2:98:dc:88:8d:a7:04:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:30:18:86:01:A5:5C:2A:2C:4C:C8:A8:0B:FA:24:A6:3B:5E:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:3a:e2:5b:35:cf:30:5e:7f:c5:fa:25:b1:3a:05:c8:81:1d:
ff:de:cb:15:86:78:33:d1:8f:ab:8d:9a:22:fe:95:06:02:63:
85:0e:24:50:c3:e4:d8:b1:c6:8d:e3:78:30:37:79:ce:d1:a6:
31:e9:93:f2:7f:2d:63:f0:e9:88:22:5a:c2:45:21:6a:2f:ad:
ea:27:e7:76:99:26:85:81:6a:f4:bc:e3:b6:0a:b0:75:4e:ff:
96:7c:8c:bb:78:6a:f5:ac:22:37:dc:34:51:e9:ab:09:28:54:
32:41:60:07:ff:52:f4:b0:7a:d6:94:61:08:e1:84:dd:c7:2d:
6d:0e:46:a5:52:4b:f2:e4:dd:6a:a1:c7:86:3c:e4:3f:3f:11:
80:64:09:f0:63:0a:a6:ae:b2:7e:03:b7:f8:dc:14:c3:bd:be:
60:36:57:08:66:7c:38:db:4c:2e:f6:76:7d:33:c6:e7:a5:05:
a9:2d:e9:a5:ea:b2:2f:0b:d3:9b:84:f8:00:9f:92:42:0e:cd:
08:06:cd:3e:69:fe:0e:40:ea:48:2b:66:9b:bf:29:f7:41:92:
82:58:32:6a:07:56:f6:6d:81:2c:51:f3:39:81:c1:e5:b8:9e:
62:6b:d5:eb:73:41:05:54:49:9f:6e:e6:eb:7a:36:b0:40:00:
e9:ca:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:46:29 2026 by rpki-client