
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa
File: 0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa (raw, json)
Hash identifier: WIaVa7PSnAtT1oRCX5EoV4K4HdbQn3SY9HNp3G/t1K0=
Subject key identifier: F7:5B:BD:F4:6D:54:F6:98:FB:3D:D9:18:0A:CC:54:A1:6E:6F:3C:9F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D35A00C195050D0386FFA9880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 70.179.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:a0:0c:19:50:50:d0:38:6f:fa:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=6f0c5ccb-1d50-4837-aea1-caeeaa145a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:62:22:e2:dc:ae:63:2b:0f:19:21:a4:de:
80:61:be:aa:9e:5b:42:f3:2d:fe:e2:10:ba:d3:89:
60:86:81:94:72:40:87:15:90:88:c4:ea:36:be:d4:
88:04:ee:97:3b:81:7e:a7:6d:8f:c5:1d:1e:56:73:
49:b2:22:cc:8e:1c:da:28:49:70:38:10:91:37:73:
07:a2:aa:82:be:b5:df:4e:2c:cf:73:5d:57:11:56:
35:d9:b6:c0:52:bc:11:2b:c1:17:aa:3a:28:7b:91:
25:3e:45:f7:53:7e:7f:9d:d4:a3:15:93:75:70:61:
67:91:9f:f6:60:c4:0a:eb:7d:a6:1d:f2:e5:80:ac:
c8:0b:76:c4:c8:db:e8:ea:b3:e1:58:25:c6:6e:fb:
51:58:9c:82:bf:ce:31:95:36:d1:fd:b5:27:66:56:
b4:52:0a:83:4d:4e:7d:c8:89:f1:81:1f:cf:48:7c:
3e:c6:92:52:c0:de:f6:f5:d3:ab:1d:85:5e:48:51:
d5:20:e9:22:9d:99:e2:30:5f:3f:1c:7e:67:89:d6:
e7:fe:4c:fa:65:4d:09:5e:2a:1f:a0:4f:a7:15:dd:
d9:96:52:a5:21:e7:b3:30:08:98:2c:c0:3e:4c:b4:
a8:fb:9a:3a:a4:04:9f:98:9b:d4:c1:ad:7f:d6:b7:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:BD:F4:6D:54:F6:98:FB:3D:D9:18:0A:CC:54:A1:6E:6F:3C:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.179.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:2f:af:83:cf:da:70:89:46:98:d4:d9:f9:af:21:53:af:2c:
de:d0:d2:76:c0:34:3f:9b:18:09:55:9f:27:88:76:08:6c:93:
28:cf:0b:77:57:e7:90:08:9c:f4:74:28:b6:b0:bf:bd:15:08:
97:90:0b:6e:15:f0:a3:01:be:c9:aa:e7:ba:b8:92:2a:69:0b:
59:44:cf:26:aa:b6:ec:ab:7a:87:6b:45:9d:6c:ab:a7:80:e9:
54:05:f6:65:8b:43:b5:84:6c:f0:83:bc:5a:b4:ef:32:ea:26:
83:37:a1:e8:8a:37:44:5a:d5:fa:95:e3:1d:e4:ef:ba:ad:d4:
15:f4:f7:3b:3e:aa:a0:17:d6:4e:e1:94:d7:dd:f0:4b:8c:44:
26:17:39:3e:4f:9e:d9:22:27:01:f0:8b:bd:07:96:a9:39:bb:
73:f8:22:cc:71:2a:16:8d:75:21:de:43:24:1d:a9:21:7e:84:
07:42:48:eb:13:c8:28:4d:2b:44:64:a4:fc:9f:61:23:27:3d:
78:44:36:48:d3:2b:d8:e0:69:23:2f:0d:2e:d7:b2:96:79:31:
52:21:70:8a:10:69:67:03:5a:66:5b:5a:ea:17:5d:1a:94:cc:
d4:b1:04:17:56:9b:7e:34:04:e6:2a:3e:0a:15:28:3d:5f:f9:
af:5a:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:38:16 2026 by rpki-client