
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67b54986-59fc-3f8a-820f-66b7f6929fad.roa
File: 67b54986-59fc-3f8a-820f-66b7f6929fad.roa (raw, json)
Hash identifier: EUFCvqHn9S2j9cw+rZBo3rdfWGv3nc/nEQ8ltW0ofbM=
Subject key identifier: 23:46:69:AF:28:FE:77:47:DF:DB:F1:4E:F4:25:50:F1:10:FE:BD:5A
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584F3A17C7684988F0559A4F2200
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67b54986-59fc-3f8a-820f-66b7f6929fad.roa
Signing time: Sat 19 Sep 2026 13:00:12 +0000
ROA not before: Sat 19 Sep 2026 13:00:12 +0000
ROA not after: Fri 18 Dec 2026 14:00:12 +0000
asID: 8069
IP address blocks: 20.153.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3a:17:c7:68:49:88:f0:55:9a:4f:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Sep 19 13:00:12 2026 GMT
Not After : Dec 18 14:00:12 2026 GMT
Subject: CN=48a55c2f-e3fa-4690-9b8e-5ed76fc8ecc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:e1:9b:90:86:c0:c2:7a:6f:e5:8d:f4:5c:
6e:96:2a:d3:71:e9:e0:94:ba:97:dc:a0:04:ff:42:
7e:1f:99:3b:67:e2:9d:f3:d8:8b:51:c8:d8:d3:ce:
42:97:4d:3b:bf:bd:f3:f0:90:ef:05:99:97:9b:50:
39:ee:93:3c:00:80:53:3c:76:0a:3f:07:32:2b:25:
8d:e3:78:7c:e8:fc:f9:d6:70:77:4c:54:d4:a5:1f:
59:5c:e1:2c:66:80:e9:fc:b2:69:02:ab:fd:02:47:
db:69:f1:7e:de:c2:0a:29:03:b0:4c:31:02:70:86:
3a:89:69:3b:72:bf:aa:10:cd:39:4c:3c:2b:6e:18:
be:51:fd:71:78:fd:34:6d:1f:78:65:a8:e3:e6:04:
58:15:58:8e:ce:fd:df:b3:a9:db:a2:56:da:ec:bb:
9f:94:f8:e3:a3:24:e5:4d:ed:ca:7b:9a:83:fb:e3:
ea:9b:1c:3c:9b:d8:76:3a:49:67:d2:ac:24:34:ef:
89:ca:fe:48:b5:96:9e:17:f7:4e:62:05:6e:25:6e:
f8:89:28:c5:8c:65:c2:71:a6:b7:30:82:fc:7b:63:
e2:39:1b:c5:41:38:dc:96:ba:bf:3d:23:b5:91:fb:
22:68:02:33:1c:64:14:da:79:af:61:3e:db:67:43:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:69:AF:28:FE:77:47:DF:DB:F1:4E:F4:25:50:F1:10:FE:BD:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67b54986-59fc-3f8a-820f-66b7f6929fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:6f:f5:5b:37:64:d3:a4:aa:74:14:70:3b:12:75:6c:a1:1d:
45:ef:d9:17:92:6f:9a:df:b8:4d:3d:ae:97:ae:14:c6:31:ab:
5f:6e:37:e3:ff:91:82:f6:9a:73:16:f5:88:a2:4a:8c:40:f2:
28:26:41:f9:50:ab:f7:83:30:44:41:c2:43:b5:40:f3:91:86:
cb:52:33:08:9a:85:0d:ff:b7:ea:59:2b:9b:94:8d:0f:48:55:
75:d6:f6:42:bc:b7:ac:76:ad:d3:b8:13:63:67:3e:32:a7:96:
ff:16:39:e4:31:93:5e:72:0a:31:74:9f:b2:f3:87:0e:9f:2f:
53:a5:46:be:0b:a0:b3:b9:b9:a1:92:0d:b3:c1:76:a7:2a:25:
8c:b4:9d:2e:04:48:f0:51:fc:ce:e2:a8:4b:ee:46:96:39:86:
d8:03:7a:d8:46:b1:1e:df:4e:bb:0e:3e:61:23:dc:f9:9b:12:
d6:e8:74:10:7c:47:91:d6:46:f1:d8:c3:22:81:65:1d:7e:7d:
d8:24:9c:d1:f3:19:cd:d7:f6:fd:29:7e:65:8d:6a:41:6b:35:
76:11:0f:13:5c:df:86:69:c9:8a:4b:03:03:62:35:05:fc:97:
de:a6:90:11:82:bf:28:6d:e0:01:3a:f7:37:ba:91:7b:bb:3c:
70:ee:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:23:49 2026 by rpki-client