
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa
File: b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa (raw, json)
Hash identifier: 0AdyXKGhHR06HrA4LOkJM55Yfs89BwoFXn1ZkkaHXSE=
Subject key identifier: B8:F5:64:39:47:89:19:43:D3:E3:C0:6F:1C:A2:E2:FC:25:91:0F:E0
Certificate issuer: /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Certificate serial: 010D0C9F4328584D4A8FA43B0E9A4716CDD88D20
Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 19905
IP address blocks: 206.83.160.0/20 maxlen: 24
2620:13d:f000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:a4:3b:0e:9a:47:16:cd:d8:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=93ee607c-236f-4e40-84e8-afc0e72fea0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:be:e1:04:4d:e8:bf:08:4d:f5:8c:4d:6e:
80:79:97:d6:2d:fb:94:71:6d:e1:0d:c5:3d:da:d9:
61:db:d7:ef:64:49:56:3b:37:c1:63:3a:c1:c7:69:
ab:79:6b:a2:9c:f9:8e:86:01:a5:2c:33:ec:26:11:
ec:6b:2c:68:3d:84:8b:eb:c9:60:e6:1b:99:cc:2b:
6c:d5:8f:8a:b5:f6:33:92:b5:7c:65:68:0b:04:6c:
90:9f:55:75:e7:5c:9a:37:b5:76:d1:a3:fa:1f:02:
85:21:ce:14:9f:f1:db:ce:c7:52:e7:99:67:17:eb:
b3:88:6f:9f:99:74:30:68:74:5b:8e:a5:7c:23:18:
9a:e1:0c:42:8c:28:cf:7f:88:41:2d:30:10:91:9d:
65:16:9d:57:df:4b:20:71:1a:66:e4:2a:0b:f3:53:
a8:6e:d6:74:8e:ca:c6:9b:fd:c5:48:6b:ed:e5:41:
55:f4:d8:30:6d:a9:eb:76:76:6e:f5:cc:41:8e:bf:
f6:33:33:ca:8d:c9:4e:61:32:5c:fb:58:38:e4:93:
4f:8e:09:62:52:67:ed:dd:33:ae:3e:1f:ac:03:17:
7c:9f:d1:f7:c7:6a:dd:b5:d6:92:c6:fa:c9:ae:7e:
d6:8b:5f:0a:27:bd:f2:e2:24:34:32:17:7a:64:de:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:64:39:47:89:19:43:D3:E3:C0:6F:1C:A2:E2:FC:25:91:0F:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
X509v3 Authority Key Identifier:
keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.83.160.0/20
IPv6:
2620:13d:f000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:54:2b:33:6c:d2:4c:f6:e6:d2:fb:ee:52:95:ff:06:ea:a5:
9e:6d:fb:b4:1d:26:45:c7:67:95:20:52:20:9a:d0:6b:22:28:
18:e9:7d:f8:99:45:59:ab:43:5a:c8:f2:65:79:a7:9a:c9:4d:
23:7d:9b:e7:cb:5f:ca:ee:58:0f:61:bf:20:18:19:b2:cc:69:
20:c9:58:cf:9f:1b:a4:06:7d:d7:99:c6:22:1d:98:56:e8:b9:
de:6b:73:1f:5b:10:54:5b:b0:80:f7:1b:ab:64:87:8f:52:5f:
32:b2:4c:6a:fb:0b:91:ea:14:3e:65:78:95:b0:f2:ef:5a:5b:
6b:1c:75:80:18:6f:98:ba:a0:0a:51:5d:80:57:41:4b:f8:d2:
bd:92:13:e1:12:d2:1b:6e:23:e6:0a:66:a6:5f:7c:cc:e1:de:
f8:21:5c:f3:dc:cd:d7:de:4e:00:2d:65:3e:0e:57:20:15:17:
f3:18:e0:b8:b5:4d:a5:6d:c0:48:13:a5:90:c0:15:6b:f2:5b:
09:4c:14:fd:8a:81:d1:6f:77:b4:4c:1f:a1:4a:a5:8c:bc:e1:
bf:cc:9f:ec:60:60:8e:f8:25:65:a5:c1:90:ee:17:9c:32:dd:
45:6b:2d:ee:f4:e5:a9:ee:b2:01:28:d7:1b:d8:ff:7e:32:82:
0d:69:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:55:12 2026 by rpki-client