
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa
File: 7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa (raw, json)
Hash identifier: 0+XoS7/4vSZaWLzFQuV4cqhyyztmSRLuh+tIwPE1gnU=
Subject key identifier: A3:A0:70:B2:D8:32:8E:7E:76:D7:3F:06:4D:9D:AD:39:0D:04:EB:77
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584D95F00D2CC52DD8E59B97A300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 8069
IP address blocks: 20.157.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:0d:2c:c5:2d:d8:e5:9b:97:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=afc30465-0a7d-4d86-b5e5-119a82bf939e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:f6:93:7e:19:66:ad:1a:72:fb:70:b3:86:
54:09:7a:d8:cc:b2:dd:9a:ff:d3:03:43:fe:3a:1d:
99:5c:87:ff:e4:13:a0:42:ca:d3:fa:9f:48:b3:1a:
cd:7a:83:2c:ac:42:f4:aa:64:bd:b5:f4:de:c7:da:
87:ab:00:17:79:d5:f4:1c:e8:e0:96:8f:9f:e8:a5:
e1:55:8e:d6:e8:3f:42:5a:27:28:7e:13:28:b0:83:
d4:17:c0:23:53:c9:43:47:24:c4:f3:1a:b5:38:c6:
04:74:91:2c:6e:9d:f9:7b:bf:80:af:b0:77:3f:d8:
7d:b7:9b:89:a6:bd:83:09:99:63:2f:83:13:fb:e9:
90:b1:05:e1:a3:bf:f8:00:80:3e:cc:13:1d:5d:98:
15:cb:57:5d:54:9d:2c:df:90:17:1b:98:ff:53:f4:
db:b4:1d:f3:85:b4:c2:26:7c:a0:ca:cb:e3:61:d5:
6e:b9:86:28:6c:dd:65:ae:d1:d9:c1:57:6f:8f:ea:
d0:81:ff:42:40:53:fb:48:d6:da:08:ce:4d:ea:6b:
85:09:b8:1e:96:43:9c:3f:54:eb:ae:9f:3b:7d:a9:
7e:b7:73:4e:22:c0:9b:c9:d6:8a:c8:60:17:e2:fe:
bc:ed:85:90:0e:f5:78:b2:0f:e2:34:2d:c6:34:06:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:70:B2:D8:32:8E:7E:76:D7:3F:06:4D:9D:AD:39:0D:04:EB:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fe:5f:d6:80:bc:78:93:f1:d6:93:93:45:5a:68:99:92:0f:
45:31:c1:35:ed:7f:e7:a3:0a:a7:de:16:2b:e4:94:f0:5a:52:
9a:b6:31:c4:9e:b0:ef:94:d3:82:5d:1c:3e:37:b8:93:77:92:
20:8d:02:5b:a7:fa:90:e8:10:9d:c8:19:60:dc:d3:d1:95:79:
7c:36:4a:92:17:5e:c9:58:e0:c0:7b:d3:f6:5b:d4:0a:a4:b5:
a1:ed:d0:9f:a9:e4:58:81:f6:7f:0a:bb:21:96:b4:5b:8c:2c:
a9:36:b8:15:40:05:e1:f4:a6:84:ee:7b:5e:20:38:1b:08:b1:
4e:a3:8b:0f:dd:d1:e6:bc:ae:4f:d1:b9:ed:d2:b2:cd:bd:21:
b6:0e:3f:21:8a:bf:c5:8e:dd:8d:0c:0f:21:14:40:63:0e:08:
ec:ce:76:4d:38:24:a0:6d:8d:4d:f8:81:6e:ca:fd:52:69:23:
1b:81:3b:2d:c1:af:cb:d5:2c:20:41:54:4a:e8:ea:e7:5e:72:
42:f5:b7:d3:c4:7c:6a:39:99:3f:fa:51:ba:89:72:b9:e9:b9:
8c:66:3a:ed:3e:2d:cb:ba:57:21:56:b3:7c:b6:6e:3f:26:2c:
fd:c0:6a:40:97:6f:c7:2a:4d:99:60:b6:e0:dc:51:65:c9:51:
eb:63:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:31 2026 by rpki-client