
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa
File: 0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa (raw, json)
Hash identifier: 7NEZfXX/0zBeJn+nc1zEGv0ej9HazY1uVUQzhR2EiIg=
Subject key identifier: EF:68:7D:9F:C3:1F:C0:38:AF:E0:F0:54:B4:76:9F:28:E6:6E:BA:3C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EB847668AD849979605D6F200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 22773
IP address blocks: 70.179.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:66:8a:d8:49:97:96:05:d6:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=b2123272-c618-4282-a99d-5d29ae11f359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:d6:3e:a4:00:f5:f2:a8:d1:86:94:6f:24:
09:c9:2b:56:9c:02:25:9b:26:9e:33:fd:b5:7e:7a:
75:32:88:a8:f8:eb:a2:61:3d:36:c0:2f:8f:58:65:
dc:4f:ed:af:e2:d5:02:79:3d:58:a0:c3:06:9d:94:
e0:5e:1f:97:b2:25:b7:55:f2:03:a7:51:53:b2:df:
79:4c:98:b3:69:54:0f:77:37:43:4e:d6:9f:75:60:
d6:00:65:e4:1e:4f:f0:b9:19:df:f1:43:dd:be:9b:
17:ee:d2:90:43:b6:80:5b:b4:61:64:4e:ac:4d:59:
87:03:eb:51:62:40:b2:90:c1:d5:99:30:49:07:fc:
6a:05:a0:7e:3e:63:6f:c6:14:00:19:61:fd:e0:35:
d3:4c:6c:66:95:ff:af:b4:15:62:dc:b9:c2:0b:56:
52:3e:2d:d2:d9:c5:7d:1f:1c:b0:36:86:ed:22:9b:
80:a3:6d:a6:65:13:45:5d:54:25:42:78:e2:f9:e9:
9c:9a:a3:76:d0:37:93:e7:08:89:ff:ca:e7:dc:2a:
2f:ee:ab:cc:d9:65:21:8e:a1:b3:d3:f4:ca:fc:7b:
6c:9e:02:56:62:08:15:82:76:1a:b2:43:e7:3f:80:
76:b3:b2:25:d7:6e:cf:e8:5c:05:6e:37:0d:b5:78:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:7D:9F:C3:1F:C0:38:AF:E0:F0:54:B4:76:9F:28:E6:6E:BA:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a9e8d0f-4473-3160-8110-17e8ccafefaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.179.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:7f:06:0c:9b:08:ed:a0:01:0b:c6:eb:81:2c:11:e8:ff:c9:
1e:15:45:bc:fe:2c:ab:b6:e2:87:df:cd:ef:89:b8:42:d2:35:
c6:45:16:b3:88:36:6c:67:6f:0a:86:68:00:47:96:45:a8:92:
49:c7:27:f2:69:92:fd:b8:ce:9a:69:0f:1e:d2:01:0f:60:3b:
24:ac:99:8c:61:2e:90:01:e2:1b:4b:b0:2e:4f:03:43:12:46:
e3:c3:01:28:4c:7c:ff:0c:b4:73:5a:3a:39:54:04:e7:81:94:
47:57:fa:5a:34:07:50:1c:80:09:f7:5c:20:71:c4:20:2e:2d:
18:c2:ff:c1:8e:0a:d2:5e:22:7e:4b:f7:63:44:ef:99:3f:23:
25:ed:66:af:78:e7:32:94:a3:26:6c:0b:a1:b0:31:48:e7:62:
b0:a0:ee:72:dc:a2:26:33:94:2b:36:13:64:20:de:63:35:b2:
b4:19:61:a1:91:c3:e3:2b:ba:48:d6:5f:13:26:93:93:75:6f:
e6:48:b1:44:f1:89:1a:c8:cd:16:07:54:3a:34:b3:29:4c:ea:
93:92:3f:94:2d:0b:7a:75:a7:01:77:4b:c4:39:32:96:69:e5:
cd:09:a7:36:23:b1:ca:8e:b9:1a:5c:aa:22:53:03:84:b3:ab:
08:9f:18:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 04:06:39 2026 by rpki-client