
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
File: 11e64435-46b6-3862-bbed-e6b28cc92196.roa (raw, json)
Hash identifier: lcEKJYodFiKxn/wnjyrouyw+VduJ3zWkk6aOXqN9jOE=
Subject key identifier: 9F:64:DC:89:84:2F:3F:AC:FB:78:1A:D5:01:64:ED:6E:1B:A3:B8:F7
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584D91C01C913E8921F61FC4BF80
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 394654
IP address blocks: 68.209.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:1c:91:3e:89:21:f6:1f:c4:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=15fd5c7c-99a6-497f-beb6-8b92410d0f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:48:08:c3:a7:d0:03:29:ee:bd:52:f2:0b:
84:9a:94:7f:f8:3e:a5:b2:93:89:d6:7e:19:cf:53:
66:fc:44:1c:f5:15:f9:4e:08:a1:91:81:31:c5:a3:
39:23:a3:7f:0f:72:43:f7:c2:c6:02:15:29:73:03:
dc:77:af:a8:9c:92:dc:d1:0f:6d:6a:6f:5e:64:61:
f8:bb:df:17:bf:e6:f4:e7:71:e4:88:b7:df:e5:e5:
60:3c:76:45:96:e8:7d:4e:10:e6:72:1a:75:5a:be:
45:94:d5:39:d4:50:6a:23:5a:7d:6b:ea:0c:33:db:
64:b7:79:d2:54:01:1a:89:92:00:83:15:d2:b7:09:
8a:55:4b:aa:75:15:fe:51:0a:20:75:53:b5:54:ca:
55:64:c1:4a:3e:93:25:93:f7:5d:b4:8d:88:cc:9c:
50:1e:59:0f:c0:83:a3:e8:3e:51:90:7e:5d:02:bd:
6f:d0:d2:aa:72:14:fd:a7:b3:f1:dd:a6:3e:6a:91:
e1:de:7a:35:27:bd:d4:29:7f:e2:ad:01:7b:5c:d9:
65:43:f7:ce:96:e4:55:4a:dd:0e:3e:43:bd:a7:27:
6f:7a:47:f7:e5:bc:ab:39:e1:05:e7:28:b1:bf:78:
22:f2:f4:f9:16:13:70:51:6c:92:e6:33:f3:64:58:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:64:DC:89:84:2F:3F:AC:FB:78:1A:D5:01:64:ED:6E:1B:A3:B8:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.209.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:15:d6:01:c3:f9:9b:a7:7f:e7:10:08:47:f4:e1:ae:08:bf:
25:6f:ac:42:83:01:da:0f:20:f6:5a:ec:13:8e:ef:db:41:49:
3c:6b:dd:25:19:15:f2:ce:7e:2c:f7:74:94:fa:1b:20:b7:20:
66:81:d0:7e:40:b1:84:19:ba:c3:c5:99:e2:e3:4d:51:a6:20:
a1:ba:01:cb:95:91:d3:8a:07:f4:37:1f:f6:2d:e1:9d:d7:cf:
11:d6:3f:d5:0a:62:6c:5b:8e:2e:33:bd:5d:a2:2a:54:bb:0d:
6c:c6:df:40:65:99:2b:57:61:40:59:ae:4b:61:54:03:ea:e1:
7c:22:b8:8f:2e:bc:27:ae:d6:8b:de:46:43:4c:b3:74:5c:b6:
76:75:9e:95:c4:f6:17:ec:10:42:8a:e9:4e:2c:a5:0c:35:c9:
3a:ed:ff:a3:50:08:0c:ec:5f:0f:b0:e0:3a:d7:1c:c5:0a:a8:
06:65:57:bf:09:e4:2e:72:f8:5a:b8:cf:74:cd:54:84:b3:eb:
f7:c8:b2:62:fa:dd:4c:fb:d4:6a:83:29:b8:98:5c:f2:e1:bb:
78:0e:39:6a:2e:28:16:df:7a:b2:1c:4c:d9:84:04:71:51:a3:
77:be:2d:23:fa:cd:e7:e6:4d:76:52:b1:54:13:bb:82:01:18:
9f:63:08:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:53 2026 by rpki-client