
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa
File: 6e008e9e-063b-3c05-919d-1af2b82b48cd.roa (raw, json)
Hash identifier: K2K1lxVK7qyoj6eYE/QxCs7G1+GLK/wr/BZ8IXju6iM=
Subject key identifier: 9F:98:7B:BB:86:4E:9B:AA:89:53:60:A9:C3:37:55:38:08:C8:90:3E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584DCAFB19588202D9FBF1BF56C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 8069
IP address blocks: 20.153.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:19:58:82:02:d9:fb:f1:bf:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=1b0337e8-b754-4d0c-9977-1159763a36d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:c1:4c:44:44:f8:fc:c1:e3:a0:2c:03:05:
82:db:f0:8f:20:c4:fa:70:f9:5b:d1:0f:df:e8:9e:
4d:43:da:69:0a:b9:9d:0a:04:dc:23:37:e9:85:dc:
b2:68:c9:d0:c6:95:7b:54:a8:45:03:53:de:d6:64:
97:35:41:53:7d:fe:fd:de:c9:48:56:ec:54:ba:fa:
9c:26:95:83:86:94:c3:12:b2:8c:55:58:81:e7:d5:
43:f7:6f:1d:17:a5:c2:4a:99:9a:57:a8:87:7d:b0:
22:72:55:d0:2b:3b:19:c0:10:b7:27:29:d7:f9:9d:
b8:33:1c:47:06:73:5d:c3:07:e7:fe:26:b4:73:09:
86:0f:d6:9d:82:ea:1c:17:c0:5f:3e:a9:8e:41:cc:
78:b9:54:8c:aa:ac:7f:c5:5f:dc:ae:85:2e:7f:c0:
d2:09:48:ac:0f:53:83:47:5f:c7:0a:5c:91:44:2b:
cf:f9:c7:fb:29:3c:45:90:0a:dd:d7:41:6a:7a:d8:
8b:f2:e5:11:6d:0a:a3:d0:6a:83:9a:a3:85:7c:0d:
a5:07:84:c1:f5:d9:42:d6:14:30:3d:85:56:90:ae:
b8:f6:eb:b7:8c:40:81:4d:04:fd:7b:aa:b1:33:cb:
60:f2:cd:90:f4:80:99:f2:36:f4:36:3c:b1:7b:99:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:98:7B:BB:86:4E:9B:AA:89:53:60:A9:C3:37:55:38:08:C8:90:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:f1:30:8f:d7:f1:31:5c:b1:15:1f:28:db:f6:70:13:f3:39:
aa:b5:59:23:d2:11:a3:90:f9:26:75:89:1d:8e:2c:80:09:02:
c9:eb:f4:31:a2:ef:79:d2:62:56:11:27:67:bf:20:4c:3b:82:
17:27:db:4b:4c:47:5b:44:f7:7e:a1:ed:cf:46:90:7c:f3:07:
33:f2:9e:a2:90:4f:96:df:7b:0f:61:4b:af:3f:6e:2b:83:db:
f8:68:3c:b6:b1:12:b5:58:66:bc:4d:4a:01:ef:44:1b:ba:7a:
7a:74:81:39:c6:ae:fa:cc:c0:4b:4d:81:07:10:6a:e1:ea:03:
f2:84:02:56:c1:bb:7a:f7:b8:d4:3c:2b:68:5a:ef:f2:59:91:
b2:06:1d:fa:85:3d:79:34:9d:cf:6e:9c:2c:b3:b3:d5:0a:83:
c7:09:6d:c2:07:58:64:ab:1a:64:32:29:cd:bd:28:8d:2f:a7:
65:23:28:18:35:80:97:13:fe:d6:83:29:70:26:ef:56:f9:c6:
9d:97:d8:0f:cb:0a:72:37:19:cd:eb:26:3b:72:8b:a1:c9:8c:
54:21:52:97:b2:55:c5:72:08:9d:b7:48:25:68:65:3b:96:75:
95:72:1a:01:81:ab:3e:53:9f:5c:9c:70:2c:37:66:31:18:49:
b7:59:0b:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xlYggLZ+/G/VsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MWIwMzM3ZTgtYjc1NC00ZDBjLTk5NzctMTE1OTc2M2EzNmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WbBTERE+PzB46AsAwWC2/CPIMT6cPlb0Q/f
6J5NQ9ppCrmdCgTcIzfphdyyaMnQxpV7VKhFA1Pe1mSXNUFTff793slIVuxUuvqc
JpWDhpTDErKMVViB59VD928dF6XCSpmaV6iHfbAiclXQKzsZwBC3JynX+Z24MxxH
BnNdwwfn/ia0cwmGD9adguocF8BfPqmOQcx4uVSMqqx/xV/croUuf8DSCUisD1OD
R1/HClyRRCvP+cf7KTxFkArd10FqetiL8uURbQqj0GqDmqOFfA2lB4TB9dlC1hQw
PYVWkK649uu3jECBTQT9e6qxM8tg8s2Q9ICZ8jb0Njyxe5m26wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+Ye7uGTpuqiVNgqcM3VTgIyJA+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmUwMDhlOWUtMDYzYi0z
YzA1LTkxOWQtMWFmMmI4MmI0OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJldMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3xMI/X8TFcsRUfKNv2cBPzOaq1WSPSEaOQ+SZ1iR2OLIAJAsnr9DGi
73nSYlYRJ2e/IEw7ghcn20tMR1tE936h7c9GkHzzBzPynqKQT5bfew9hS68/biuD
2/hoPLaxErVYZrxNSgHvRBu6enp0gTnGrvrMwEtNgQcQauHqA/KEAlbBu3r3uNQ8
K2ha7/JZkbIGHfqFPXk0nc9unCyzs9UKg8cJbcIHWGSrGmQyKc29KI0vp2UjKBg1
gJcT/taDKXAm71b5xp2X2A/LCnI3Gc3rJjtyi6HJjFQhUpeyVcVyCJ23SCVoZTuW
dZVyGgGBqz5Tn1yccCw3ZjEYSbdZC4M=
-----END CERTIFICATE-----
Generated at Wed May 13 09:13:15 2026 by rpki-client