
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa
File: b8ae9718-f55e-3239-a6dd-058166da4e45.roa (raw, json)
Hash identifier: wXydC4pUjwNy3EHfG1xFLaQju3JRq7iRNGtMfPPTseM=
Subject key identifier: 51:10:CE:35:A2:69:AB:40:BF:E8:1C:FE:D0:BD:11:51:2E:13:97:C9
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584DA8158A90142A7259E13543C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 8069
IP address blocks: 52.122.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:8a:90:14:2a:72:59:e1:35:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=dd6b2fdd-6271-4992-b65d-4d3dd310db76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:46:ec:b6:db:6c:c0:d8:b5:99:6a:36:0b:a7:
9f:44:be:a8:d7:78:a1:8f:9c:f3:c2:a5:1e:8f:0e:
55:64:35:3e:ea:76:8f:9b:b6:6c:76:1e:43:c3:af:
06:29:25:27:3b:e9:ca:4c:13:13:77:c0:83:bf:10:
ea:8b:6a:9b:3f:9c:f5:9d:79:2b:91:9c:7f:03:87:
87:4a:9d:de:e4:03:32:0a:da:8f:b2:7d:e5:b2:7f:
60:76:a2:0f:93:78:e8:9b:94:d7:cd:f9:63:44:e3:
6d:31:6a:91:15:80:be:5d:dc:e9:23:35:36:04:2e:
50:36:94:c3:dd:a8:96:21:71:17:bb:d3:77:71:3d:
4b:91:9a:81:04:26:56:6f:33:03:78:eb:26:d1:ff:
a5:12:78:9c:b1:92:bd:92:82:38:c2:de:f5:f6:a3:
4c:15:f4:b4:df:20:a6:6d:f6:75:ec:71:be:9a:4c:
98:cf:a7:42:1e:93:de:7c:22:ca:4f:2d:4c:e9:a1:
97:87:af:cd:f4:30:74:08:f5:6f:df:6c:07:1c:96:
b7:b6:95:34:47:92:2c:97:25:77:04:dc:78:29:0d:
5b:d7:86:23:a4:45:2b:eb:4d:12:fc:48:bd:df:a7:
0b:b3:0b:25:6b:27:ab:ff:ab:b5:dc:2b:b7:e9:ec:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:CE:35:A2:69:AB:40:BF:E8:1C:FE:D0:BD:11:51:2E:13:97:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
52.122.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:16:9c:a4:11:21:f8:2b:d8:96:ca:2c:38:87:08:08:c2:0a:
a7:50:bb:c6:e0:01:da:51:60:5f:1e:d6:5e:04:a7:ea:ef:7d:
ab:1f:91:7b:f0:a0:f6:f0:87:c1:91:09:2d:14:91:08:fe:22:
c1:b2:44:8a:8a:39:c0:7b:fd:6a:fd:0b:ee:f4:67:4a:a6:de:
50:68:7a:33:99:15:ee:e9:34:28:df:5a:fb:ed:da:6b:40:e9:
03:b8:72:d9:4f:84:70:79:32:01:1e:10:92:54:e8:ea:3e:0e:
00:6c:eb:ae:7d:86:9f:52:70:e9:b0:fe:98:82:75:34:b9:87:
40:d1:40:cd:ab:bb:70:b2:99:93:a4:23:28:85:ac:9e:c5:b3:
1f:af:bb:40:7f:56:61:a6:d9:65:04:d2:8f:8b:d8:69:03:4e:
07:f4:94:f1:57:b9:fe:d9:10:a9:17:e8:9c:c5:41:aa:a9:52:
0c:e0:83:d1:fb:92:24:8a:30:fc:04:10:99:bd:6e:aa:be:4e:
25:94:ee:1c:68:85:a9:a4:fe:87:47:73:d9:47:1f:11:fb:73:
e1:14:6b:d6:7c:b5:22:90:76:3d:56:63:62:51:e1:4c:5d:fd:
e5:e4:cf:bd:4d:b8:bb:12:98:01:e9:b6:11:fb:d4:10:45:46:
3c:a3:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:15 2026 by rpki-client