
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08881c63-3da1-3822-a6d0-cc865a5003b2.roa
File: 08881c63-3da1-3822-a6d0-cc865a5003b2.roa (raw, json)
Hash identifier: u1+tNl/B1AQVg8yOAfDnC8I/jKgqVjvlfC/uxhMmo4g=
Subject key identifier: 2D:32:20:2C:CE:B2:1F:87:BB:61:EE:84:D0:57:B7:15:22:A1:86:14
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EB847680CC59FF1D9593906D0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08881c63-3da1-3822-a6d0-cc865a5003b2.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 22773
IP address blocks: 98.170.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:68:0c:c5:9f:f1:d9:59:39:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=2eb8d667-23d2-4787-818a-c4ede978bc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:cd:f1:da:6a:d2:01:26:24:66:8f:e1:5a:
52:4e:3b:d5:bb:e7:67:f4:0e:47:19:62:f0:7d:2b:
c2:04:06:bf:29:f0:1c:db:6b:1d:d5:d2:d9:84:18:
a8:63:92:97:4e:e9:e0:ff:15:f6:11:7f:4c:48:14:
46:d8:38:10:57:91:83:e1:7d:3f:78:af:7d:bf:24:
eb:9a:0a:a4:35:3f:94:a8:3e:67:3e:96:b7:42:48:
d7:5a:7a:fc:c8:0e:55:a2:ac:b8:56:b2:b7:e8:b7:
1d:8c:63:11:c7:c4:43:c8:f9:d1:85:a1:b7:0f:af:
b8:2c:04:17:34:72:70:05:5c:36:64:c5:79:c7:fa:
be:17:bf:ac:81:c4:5f:bb:df:6c:4d:03:30:d9:20:
b8:eb:97:e2:c4:ab:e6:cb:e8:18:7b:71:51:03:d9:
4c:98:e2:67:2f:4e:d9:b1:43:bc:14:f5:42:89:24:
ae:9d:45:a6:6c:73:62:e2:02:67:20:a2:75:92:a4:
27:f1:3e:7d:a1:53:f4:db:1a:37:8e:fe:34:49:01:
13:ab:36:2b:9c:9c:ff:7a:b0:34:1d:8b:46:36:6c:
4e:29:1c:de:f3:bd:f7:d0:8a:03:66:28:a8:4f:d0:
6c:05:0c:c0:8a:28:fc:d4:04:17:54:5e:7c:e8:fe:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:32:20:2C:CE:B2:1F:87:BB:61:EE:84:D0:57:B7:15:22:A1:86:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08881c63-3da1-3822-a6d0-cc865a5003b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.170.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:e4:3b:e8:fa:ce:fc:5b:34:ea:68:ae:cf:ee:70:3a:83:0c:
d7:d6:3b:ff:5f:dd:4b:5c:06:13:cd:59:0d:6b:08:6c:af:ce:
a3:54:20:1a:60:ea:50:62:02:4d:96:23:a0:5d:e4:88:32:81:
c4:cf:b3:70:cc:3e:a6:a1:74:16:f6:98:fd:28:66:f7:78:b9:
a1:65:3d:07:28:29:e8:ad:8f:5c:a1:85:87:2c:47:f6:51:77:
0e:80:34:fa:13:20:cb:22:82:00:46:17:82:98:7e:0f:2e:33:
7d:29:0a:78:81:78:74:5c:92:6a:6d:b3:a4:96:a1:b3:b0:7f:
06:09:59:85:8c:cd:b4:88:a6:3e:83:d6:dd:6d:f3:1a:7d:1e:
e8:7d:31:2c:05:8a:25:03:2e:1f:4f:6b:4d:be:c8:45:08:fb:
c6:a7:da:fb:7f:af:02:1a:e0:18:8d:17:43:d5:78:37:ce:00:
66:34:fe:2e:16:78:e1:91:7e:49:8d:f6:94:f2:33:e3:9b:d2:
3c:86:94:6c:ea:5b:61:62:03:df:49:18:67:a7:9c:8f:b1:a5:
cc:9b:61:7c:a7:1e:51:60:0a:e1:00:45:6e:eb:3f:30:35:71:
59:e7:8e:c8:32:fe:d3:6c:a9:78:de:1f:75:f4:08:13:6d:11:
c2:56:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 04:10:45 2026 by rpki-client