
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff7f92b-ccc1-3e47-a481-b3c17519f0f6.roa
File: 0ff7f92b-ccc1-3e47-a481-b3c17519f0f6.roa (raw, json)
Hash identifier: 7leYw1ReXaeMJyJeamL2Xqxt+FYuURyGO7GKxmmtla0=
Subject key identifier: 28:AC:89:27:A3:79:7D:44:81:E7:28:55:0B:F7:D9:C6:B1:E1:D2:EA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FA2A759530064F8F31BE2
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff7f92b-ccc1-3e47-a481-b3c17519f0f6.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 24.254.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:a2:a7:59:53:00:64:f8:f3:1b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=479d7027-f23e-4c83-8c19-35a5a5092240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:c5:04:ec:30:ef:2e:65:af:45:ac:88:62:
53:f3:72:8d:98:ad:97:97:e1:90:a3:40:9a:96:85:
f8:c0:fe:82:e0:2b:57:ba:3d:88:f9:18:e3:54:4f:
0e:91:5a:33:6d:99:91:fc:0f:ef:41:37:9d:96:99:
23:b2:63:51:09:fe:07:a3:90:e5:75:8d:35:17:34:
01:64:3d:c6:aa:53:30:15:42:56:d4:13:7f:a0:5a:
43:55:d7:7c:22:56:b7:5e:34:77:fc:ae:96:58:5e:
b2:3d:d1:9a:5f:07:26:0d:13:f3:e7:e5:cc:60:a7:
be:3c:de:2d:53:3f:18:53:b3:a9:d0:64:ef:4f:be:
3e:44:5a:3e:9d:6a:1e:c4:7b:b8:2f:64:73:5c:17:
02:0c:92:3b:3f:68:47:ac:e7:19:29:bb:e9:6e:eb:
fc:2a:4f:16:66:f3:ba:91:14:d2:c8:ab:db:77:d9:
27:fc:cc:1e:16:e1:93:cb:60:e9:da:8e:01:8b:9d:
27:ea:c5:78:17:15:37:ec:5f:85:05:2b:9d:3d:92:
68:b1:41:c4:28:05:54:cf:9e:e5:8f:06:f1:bb:ab:
25:96:b1:c8:fb:3a:70:c0:f0:64:51:cb:91:f0:3b:
a3:62:8c:d8:d9:82:48:5b:d4:90:00:84:48:a2:6a:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:89:27:A3:79:7D:44:81:E7:28:55:0B:F7:D9:C6:B1:E1:D2:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff7f92b-ccc1-3e47-a481-b3c17519f0f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.254.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:de:63:6c:80:1c:92:60:95:af:2a:3d:99:cb:e8:e5:25:db:
5e:b1:40:93:b1:ea:fd:b2:bb:72:25:04:24:36:c2:cc:9f:18:
9b:c4:9b:83:aa:ac:4a:16:c9:9b:fc:c9:60:01:30:6b:f7:15:
44:86:e9:3d:dc:8a:75:37:46:04:67:39:32:03:ea:ae:86:8a:
55:cf:4d:1e:cc:5f:66:b0:fb:ee:67:c9:9c:57:f8:c4:5f:80:
9a:69:57:b1:c1:70:5c:47:e8:9b:fc:ab:e1:86:21:c4:6f:55:
3b:36:7c:37:15:38:34:5b:83:c4:25:3d:e7:b2:a3:14:f5:7c:
35:f7:f5:df:d0:92:75:aa:97:1a:22:aa:07:fa:4e:eb:ad:d3:
35:0f:06:79:ca:e6:5a:56:22:56:1f:90:03:ce:ce:04:f9:c4:
19:61:02:b9:dd:af:04:c8:be:6a:38:2d:c8:b6:5e:bc:80:22:
7e:9f:84:31:c7:b0:b7:76:98:f6:42:f1:4f:6b:a0:8a:70:70:
0e:9e:85:3a:45:93:03:a2:5c:0f:3b:0f:4f:fa:d1:22:e3:19:
6f:e3:a8:8f:18:d4:75:fe:71:f2:73:0c:56:61:99:73:47:ea:
7d:d5:24:b5:2a:2e:45:57:ef:e1:96:6d:12:22:c0:a0:60:59:
e7:43:d9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:09:02 2026 by rpki-client