
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e854e64-9440-302f-b3d8-f644eac2c688.roa
File: 0e854e64-9440-302f-b3d8-f644eac2c688.roa (raw, json)
Hash identifier: hDihQPvQ25NoBvyWKX6Zhgs+E7t4meYomQqxGLWAgyY=
Subject key identifier: 73:74:EF:D6:97:40:3C:55:06:51:00:B9:E1:41:EB:37:C1:2B:59:66
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F53AD6F380444CA96BDFB89A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e854e64-9440-302f-b3d8-f644eac2c688.roa
Signing time: Mon 28 Sep 2026 16:57:00 +0000
ROA not before: Mon 28 Sep 2026 16:57:00 +0000
ROA not after: Sun 27 Dec 2026 17:57:00 +0000
asID: 36801
IP address blocks: 70.166.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:53:ad:6f:38:04:44:ca:96:bd:fb:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 28 16:57:00 2026 GMT
Not After : Dec 27 17:57:00 2026 GMT
Subject: CN=2cb5bddf-2e81-4b7d-ad40-c192f5cedb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:b0:29:88:cc:eb:56:d4:3c:e8:aa:39:ab:
e7:d3:b7:83:3c:9c:ab:09:b1:ff:f6:1e:ce:7f:81:
38:93:07:21:66:db:3f:43:44:60:23:c1:ff:55:81:
d4:4e:f1:b2:1c:b9:14:1f:7b:80:18:50:fa:89:61:
fe:bc:ed:6e:3b:7e:a3:51:78:79:f0:78:30:71:da:
01:6b:6f:03:af:d3:2d:01:b8:41:94:78:8e:dc:de:
bb:bb:49:ea:b5:21:d1:87:f8:56:46:08:1d:92:a9:
79:05:7c:87:ed:72:88:7b:6c:22:27:a9:89:5d:44:
8f:5e:2b:4a:e0:f6:01:4b:30:6b:2a:30:8a:9d:4d:
37:e2:0a:90:99:de:7a:5b:67:73:71:de:4f:4b:f1:
2d:91:e1:88:23:79:33:15:64:71:f6:a8:b4:a3:fb:
f8:54:64:6a:f9:87:bd:c7:0f:dc:b9:05:06:72:7b:
31:af:41:a3:33:65:88:86:b2:14:4a:39:7a:2b:09:
d8:cb:fd:12:9f:62:85:2c:71:b3:8e:10:9d:aa:5b:
71:a9:aa:5c:2c:f6:37:d4:79:14:05:4f:90:de:f0:
c3:39:b1:a3:b4:63:fc:6f:b6:ec:bd:52:47:c3:da:
d0:f1:a7:60:14:57:df:32:ab:33:c3:4e:8e:28:97:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:74:EF:D6:97:40:3C:55:06:51:00:B9:E1:41:EB:37:C1:2B:59:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e854e64-9440-302f-b3d8-f644eac2c688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.166.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:b5:30:2f:3b:b9:d8:f6:f3:3b:12:b2:94:be:b7:df:fd:6f:
ad:dd:0d:68:ba:10:73:91:47:8c:48:5e:49:8e:ee:35:45:4e:
f7:1e:5b:c0:13:0b:69:6f:4f:d3:21:ef:ea:53:93:b2:90:11:
fa:7a:0a:c4:13:1e:84:73:64:8c:de:11:c5:02:03:5f:22:a1:
2e:f3:5f:84:a0:ec:45:03:c2:8f:6a:15:5c:78:37:23:c4:f4:
39:13:91:31:8e:c8:96:b0:5f:bd:79:e8:54:45:47:26:fd:0b:
09:1a:b0:7e:1d:68:cf:68:46:21:3e:b6:78:12:33:a6:af:aa:
76:a4:cc:a6:e6:de:47:cd:e1:45:6e:9d:3b:ae:91:ed:8e:b2:
ad:8c:a3:7d:1f:cf:3d:2b:11:bf:f0:75:dc:89:a8:30:be:19:
72:30:f3:45:fa:ca:9e:9b:d5:5e:46:7a:71:72:d5:f6:84:6d:
9f:50:e4:8a:f9:da:29:d6:07:8d:dd:b7:1e:ec:dc:53:5d:44:
52:01:92:63:b3:20:48:db:9f:1d:d6:87:c1:88:34:fa:32:2e:
dc:46:b5:5c:17:76:7d:b5:37:30:1c:0b:a7:00:fd:03:3c:c8:
0b:e2:15:b9:d2:8c:63:c1:fa:c2:19:4f:48:f1:74:4f:4c:86:
70:da:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:45:43 2026 by rpki-client