
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa
File: d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa (raw, json)
Hash identifier: BEgUzIHAkh6GcraqDP7qFVXgFTv1u9BrXRCAv/dOo6c=
Subject key identifier: 50:DD:2A:E0:F0:51:B7:EC:FD:65:95:9D:93:AC:29:24:C4:F1:EF:EE
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584F1E2CFCA3C6144BC9744DFD80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa
Signing time: Wed 09 Sep 2026 13:00:11 +0000
ROA not before: Wed 09 Sep 2026 13:00:11 +0000
ROA not after: Tue 08 Dec 2026 14:00:11 +0000
asID: 8069
IP address blocks: 20.33.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1e:2c:fc:a3:c6:14:4b:c9:74:4d:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Sep 9 13:00:11 2026 GMT
Not After : Dec 8 14:00:11 2026 GMT
Subject: CN=9b83411d-14c8-4d8c-ab34-5a4f5437962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:1e:da:5e:ec:66:0d:94:6b:c1:54:91:f0:
8f:64:90:10:73:dc:a9:96:db:0d:ae:90:c4:cf:4c:
27:49:3d:36:32:e3:5f:83:24:a1:eb:72:7b:e9:32:
81:a5:01:2c:26:5c:05:cb:d6:5c:5b:e6:13:5c:c8:
b4:06:a1:e6:f5:94:9e:50:81:dd:70:5a:c0:90:f0:
77:cc:b9:39:1b:e0:5d:3d:44:b1:e7:95:b8:3a:52:
61:cf:64:d6:0d:55:8c:13:0c:01:16:ee:ac:57:28:
78:5b:09:58:26:cf:25:c3:1d:f8:d6:7d:83:52:c8:
b8:80:9f:ab:07:66:21:63:01:ef:ac:e2:73:d4:76:
42:b3:ca:75:c8:4e:e6:2e:7d:c2:fe:5e:78:d5:54:
f9:c1:13:6f:d0:3a:ac:6e:a3:0b:b0:8a:52:41:9d:
48:d0:38:94:bb:86:58:6f:2c:a4:cf:bf:f8:d2:d8:
ef:cd:31:4f:59:75:79:45:9f:a1:bc:d5:2a:b4:c9:
38:62:7f:6b:33:c7:f5:1e:e8:ce:cf:61:ce:1b:10:
97:c7:84:25:fa:bd:09:6a:0f:fd:5c:28:e6:7e:6f:
b3:59:8c:85:cb:9b:9a:4e:6b:ed:e4:cb:c1:87:47:
83:ea:4e:48:24:86:ea:b5:07:c2:10:f6:a1:9d:8f:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:2A:E0:F0:51:B7:EC:FD:65:95:9D:93:AC:29:24:C4:F1:EF:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d788fc99-fa38-3c04-8fc4-7eb6bb125dc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:77:bf:f0:81:34:0f:e5:f1:98:f0:a6:b9:6c:db:85:5f:de:
b4:67:9f:b0:ba:d0:e6:97:b1:7d:a3:91:f3:26:10:51:cb:e5:
48:85:2b:70:c9:ed:63:65:23:20:52:5b:6e:49:37:fd:1b:e0:
22:08:61:99:ee:12:96:2f:a8:3b:9e:1d:dd:63:a6:df:df:d4:
38:35:8f:f5:7b:c7:fe:41:29:5e:7b:7d:23:b8:97:15:91:7a:
5b:db:f3:d6:24:b3:a2:dd:7f:02:18:e0:37:5a:8f:c9:75:08:
26:81:2e:52:b9:42:f3:5e:e2:11:ec:f8:91:ac:c7:8a:97:74:
c3:e2:2f:2a:ec:37:d9:41:66:53:ec:8d:43:6f:ba:60:fc:ab:
70:87:57:ef:0a:ed:d6:a9:fa:93:6c:30:f3:43:73:ff:1f:42:
7d:2e:f8:ad:ec:c6:ba:17:a8:5b:76:7b:09:8a:12:0d:c7:a4:
1e:2f:54:ac:61:bb:1e:9b:14:ad:ae:8e:2c:0e:95:06:a8:18:
96:b5:76:62:53:86:6f:ac:36:83:fd:90:e2:90:ad:3b:09:59:
7d:9b:77:e3:97:91:fc:c9:3f:9b:bd:5c:98:f6:24:f1:37:4e:
6e:1b:aa:bb:0c:d4:9c:cf:b0:71:3e:16:ea:08:ce:9f:56:4c:
5f:cb:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:23:43 2026 by rpki-client