
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa
File: 0de336de-11a9-3a69-b501-10b69cf8f881.roa (raw, json)
Hash identifier: V8It91PXLaiAFAEpquAaFnwx1jfVFXa7/vnu4VlpiDU=
Subject key identifier: C1:F1:C4:4D:F3:D3:BC:B2:DD:36:33:EC:08:35:C9:D6:B5:D1:BA:C5
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584F2957AE783592C78371CAD2C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa
Signing time: Sun 13 Sep 2026 13:00:11 +0000
ROA not before: Sun 13 Sep 2026 13:00:11 +0000
ROA not after: Sat 12 Dec 2026 14:00:11 +0000
asID: 8069
IP address blocks: 20.153.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:29:57:ae:78:35:92:c7:83:71:ca:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Sep 13 13:00:11 2026 GMT
Not After : Dec 12 14:00:11 2026 GMT
Subject: CN=557531a7-ad5e-48cd-ab2d-3296f12317e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:d8:21:85:20:d0:2c:0c:19:1a:c1:44:56:
f6:ad:73:94:89:37:7c:b7:86:11:d5:f2:14:fb:f1:
6a:f2:f7:c3:a6:f9:32:54:46:76:35:c1:fc:4f:d4:
7c:6c:69:bd:75:7a:49:f8:b5:f7:f0:7e:1a:c0:14:
24:e5:c8:73:89:d0:8a:75:35:61:fa:33:b8:cd:75:
e9:ff:29:e6:db:4b:1d:6e:09:c4:bd:13:ad:a5:ba:
b1:27:80:d3:40:72:d6:6d:d1:6a:7e:db:42:7d:0e:
f0:e4:21:4b:41:4c:46:4b:b0:dc:66:36:5a:02:e7:
ef:c5:29:3a:73:ee:8e:f7:b0:ee:4b:96:dd:62:f5:
ab:7f:54:4c:cc:b9:56:0b:b7:fb:68:29:5b:bf:61:
2a:b2:e6:b7:e1:9f:ff:68:2c:08:f2:79:be:83:1a:
6a:21:00:e9:c8:b7:92:9b:2f:f2:a8:0e:0a:59:0f:
ef:e4:db:2e:7d:65:b9:de:c6:dc:4b:26:1c:f0:a0:
d1:ad:8b:9f:6d:11:46:2b:1b:2b:66:90:c2:df:3b:
71:d6:dc:db:70:ee:fa:1e:7f:a7:bb:df:19:a9:a3:
e4:50:3b:7d:2a:1c:db:e8:0b:53:bd:a5:82:21:01:
a0:a8:de:7a:41:d1:a8:a1:03:ff:fa:53:9f:64:72:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:C4:4D:F3:D3:BC:B2:DD:36:33:EC:08:35:C9:D6:B5:D1:BA:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0a:05:8f:fd:b4:db:0c:06:23:0f:a2:21:df:d0:c6:fa:dc:
ba:99:99:6a:6c:58:8e:e9:33:25:90:e1:3d:9a:d3:84:88:8e:
bb:59:1c:aa:76:85:d0:28:0a:ff:95:58:77:1c:92:b2:bf:e0:
77:54:2a:70:88:7f:63:0c:67:b4:4c:39:e0:42:8d:3a:7f:d9:
2f:e8:df:df:d9:8e:64:0e:fc:92:99:a0:d8:46:92:bd:fe:5a:
f8:0f:bb:ad:69:52:1e:ae:6a:b0:e0:40:61:c8:75:42:00:64:
62:36:5b:f6:8b:26:80:c2:dc:df:b1:7b:7f:71:18:82:f8:fd:
08:93:8e:96:de:dd:eb:34:c1:ed:27:3c:ea:98:6b:44:17:96:
e3:0b:a0:17:6e:f6:bb:ec:aa:40:e7:76:8d:15:cc:4a:12:05:
62:c8:c8:73:e3:46:62:ab:f6:dc:de:c6:6e:98:23:c7:9b:cf:
ec:91:f4:21:97:67:1c:d7:0b:b7:17:ee:38:7d:15:53:7d:d8:
04:46:b9:98:f4:5f:bc:06:c5:56:69:98:40:fd:59:46:cf:6b:
e5:33:c8:68:ba:02:fe:91:97:5f:94:19:05:53:5d:5e:d1:50:
12:4b:a2:9e:8e:5f:c1:87:7d:20:52:4e:97:32:a2:e7:2d:82:
2c:73:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:12:27 2026 by rpki-client