
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01010b3c-fbc5-3a66-8a84-11b3673736c0.roa
File: 01010b3c-fbc5-3a66-8a84-11b3673736c0.roa (raw, json)
Hash identifier: s80CaN+O2W267FakWJHiPOLuRpD7zvgzn0EUL9PfOHQ=
Subject key identifier: FB:52:4E:5A:64:5D:DB:EB:94:84:2D:4F:C6:EC:59:76:FA:62:32:77
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F5A3328D41A715DE76E743EA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01010b3c-fbc5-3a66-8a84-11b3673736c0.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 22773
IP address blocks: 70.172.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:33:28:d4:1a:71:5d:e7:6e:74:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=cc827c94-bf4d-470f-ad88-f9566a550671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:af:88:ee:00:8e:16:ce:3c:92:75:51:da:
fc:0f:58:6b:89:af:60:b2:5a:22:9b:c0:d1:5e:4f:
53:4e:26:fa:a7:65:e9:b2:e6:85:fc:c6:3f:43:d0:
38:2c:f4:f5:09:29:5e:fa:91:0c:40:21:7e:f5:04:
5c:54:53:38:5b:3b:cc:66:7f:8b:9c:54:35:30:45:
04:f2:62:70:f3:55:b4:f4:ca:c9:0a:18:26:0b:2f:
74:a7:ea:25:6e:c5:c0:3b:d9:3c:f7:9d:d0:d0:1d:
c9:a2:58:ba:13:e6:ba:5c:3d:17:08:69:b4:22:09:
3d:0c:bb:9c:d3:b6:1a:f0:01:45:5a:69:ff:21:b6:
10:08:dc:7b:2e:7f:68:b5:b7:01:eb:53:0a:72:80:
88:f9:ac:4e:7a:d8:5e:b5:7b:4d:50:88:e0:bc:40:
e3:87:54:cf:ad:b4:56:2f:60:4a:53:01:85:f2:1c:
92:f9:87:35:4f:0a:1b:05:f9:8d:30:f9:7d:f5:61:
13:45:77:9b:41:47:62:7e:57:3e:9d:48:c8:1e:99:
b2:ae:db:bc:8e:09:f6:8a:dd:e8:d6:b9:bc:a3:81:
9d:77:46:91:a6:d2:c9:9f:fb:5f:eb:22:11:d6:67:
aa:99:42:93:f7:17:80:58:d9:e6:4c:18:a3:0a:24:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:4E:5A:64:5D:DB:EB:94:84:2D:4F:C6:EC:59:76:FA:62:32:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01010b3c-fbc5-3a66-8a84-11b3673736c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:5e:85:bf:d1:44:a1:34:8e:34:55:13:02:d2:29:49:6f:fd:
2e:a2:76:0b:d2:b1:c4:52:70:d8:15:10:5f:27:7d:2b:c4:c7:
30:61:3a:28:75:aa:00:ad:16:4c:1c:c0:d8:11:b4:45:46:2a:
8f:7a:54:90:14:a1:0f:91:47:f3:5c:61:f5:7a:a1:af:23:e7:
a8:f0:aa:72:a7:af:6f:c9:30:a2:24:3d:d9:2b:c2:35:35:17:
57:3c:b5:17:0c:6d:21:9e:fb:77:c1:cf:ee:12:70:6b:46:99:
f8:95:ac:6a:84:8d:75:25:72:41:a7:b5:f0:83:9c:c6:f3:fe:
a2:91:1a:0b:f3:35:3d:30:a7:92:df:db:64:2d:d0:d1:4e:37:
b4:4f:26:4e:4c:5b:b7:80:b8:9b:d7:1e:1d:07:66:4a:28:dc:
df:c3:8c:2c:c3:c9:8b:47:bb:e9:81:8b:2f:18:ec:d4:ba:ae:
5d:5c:89:fa:9c:b2:49:36:8a:f2:17:6d:2e:ea:71:35:3a:91:
e2:c6:ac:d5:80:31:96:5d:60:14:19:19:49:23:70:4f:c0:0a:
e8:d5:9e:f5:cd:ff:c4:ab:d2:50:4f:70:dc:56:c2:d4:8c:4a:
a7:db:99:79:ae:2d:fb:82:0f:93:9b:c4:95:84:42:77:4f:e1:
f2:16:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:12:45 2026 by rpki-client