
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f8a44d66-f316-342f-9da7-91b76cca5108.roa
File: f8a44d66-f316-342f-9da7-91b76cca5108.roa (raw, json)
Hash identifier: RmSKTW0XdMToIyEaDswV95Rn8WmGjm90ISw520qlTD0=
Subject key identifier: BF:13:4E:7A:F2:08:F7:B7:85:A4:B1:89:8D:0C:61:07:A3:98:46:01
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584EE4234CB509E996791A59A200
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f8a44d66-f316-342f-9da7-91b76cca5108.roa
Signing time: Wed 19 Aug 2026 18:03:56 +0000
ROA not before: Wed 19 Aug 2026 18:03:56 +0000
ROA not after: Tue 19 Mar 2030 04:00:00 +0000
asID: 8069
IP address blocks: 20.47.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:23:4c:b5:09:e9:96:79:1a:59:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Aug 19 18:03:56 2026 GMT
Not After : Mar 19 04:00:00 2030 GMT
Subject: CN=ec46859c-8c2d-41ad-bf8b-495b9c973a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:68:5b:fe:a8:45:a2:6f:2c:88:55:6a:89:
1f:d6:6b:6c:21:27:31:ab:2f:4e:57:91:53:78:d7:
a9:8d:64:b4:dc:68:f3:94:94:57:66:a2:4e:08:25:
4d:ab:bd:da:ba:8c:73:3b:56:9c:06:30:22:88:92:
9f:bf:36:53:02:35:42:39:af:d9:4d:66:4f:a3:d0:
b1:b2:73:cc:b1:7e:9f:2d:7f:64:df:ea:fd:1f:d4:
a2:79:7d:05:34:92:76:7b:ba:93:bc:7a:85:34:e1:
7d:64:b5:5c:58:b4:21:e4:0b:e3:78:c9:37:30:2f:
5e:bb:9a:04:ab:f1:9a:0b:59:fc:e1:9e:da:50:8c:
1e:0f:cd:12:64:a9:35:af:12:e0:ec:9c:eb:ff:eb:
1e:b9:8d:78:eb:c1:2e:26:d0:b9:24:79:f6:b2:a9:
35:66:d3:d7:43:5e:40:3c:3d:22:55:60:d5:e4:70:
dc:a5:be:4c:93:fc:42:a8:bc:ac:28:69:1f:35:a5:
fe:4a:92:8c:0a:12:c7:0d:c3:9b:3f:73:fc:c3:c7:
7d:a1:e9:54:5a:4c:78:41:6e:96:23:f2:14:a3:43:
8e:e0:f5:6c:94:28:bf:ef:a7:ab:80:e7:50:02:23:
5e:93:81:48:c0:b4:5e:75:ff:e1:24:14:3e:fa:0f:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:4E:7A:F2:08:F7:B7:85:A4:B1:89:8D:0C:61:07:A3:98:46:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f8a44d66-f316-342f-9da7-91b76cca5108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.47.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:4b:30:7e:6f:76:05:c2:b0:c8:14:fc:2c:48:10:6a:34:d8:
e7:bc:e5:8c:b4:bf:bf:de:68:af:31:8d:ab:79:ae:00:2d:cb:
a8:b1:63:45:53:65:0c:a8:56:23:79:28:cb:1d:f9:2b:5a:26:
9f:e7:73:7a:c7:20:fd:d6:d8:8e:ad:0b:0e:c7:3a:a9:a6:d6:
3a:db:4d:f8:a0:fe:1f:ff:72:b0:b4:95:1d:ec:0d:01:c6:0f:
de:f3:05:eb:a5:21:aa:d4:47:9f:bf:39:f1:68:c5:ff:42:4f:
66:06:95:d9:15:61:e4:83:e6:44:d6:6f:f6:3d:b0:31:03:c6:
f0:42:ff:d3:77:3f:a6:5d:af:b9:fe:f1:1c:90:3a:a6:01:bd:
d4:37:f7:87:4a:dd:a3:1a:cb:a0:5e:a7:ec:c1:c5:41:ed:64:
09:6e:ea:ac:99:ec:77:32:cf:8a:d5:56:5b:32:b7:7b:49:25:
0b:12:5f:12:ef:a1:6a:30:0e:d7:0d:3b:8b:1f:c5:d8:37:5d:
f9:39:93:50:0e:ec:a5:db:61:7b:03:8a:3e:69:77:bf:d0:f8:
54:f7:29:62:85:6a:72:20:29:b4:ea:1a:2b:4d:5f:79:50:1f:
44:e8:a0:53:dd:af:20:78:1b:b7:5a:63:4f:59:78:53:8a:da:
9a:14:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:58:41 2026 by rpki-client