
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/262741d7-8c75-34e2-88a9-91b27f51794f.roa
File: 262741d7-8c75-34e2-88a9-91b27f51794f.roa (raw, json)
Hash identifier: DaTKUOJH5XAW3aXYXHgEzZtZCWaLQvDkTOmbbFgiI+4=
Subject key identifier: 8B:85:AE:0F:29:E0:98:CB:B6:7B:7D:17:A0:94:0C:91:19:FE:FF:B0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FC9708010A4C7A898F880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/262741d7-8c75-34e2-88a9-91b27f51794f.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.107.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:c9:70:80:10:a4:c7:a8:98:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=49a2621f-c7b2-40ca-93d7-f508c58ef8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:19:de:74:84:4f:b5:ee:6b:85:0b:27:c5:
f8:d3:7f:08:ad:8e:ac:8b:64:59:95:27:ba:90:07:
7c:f2:6c:c5:92:c9:02:96:f8:dd:b3:a7:68:6d:3c:
ea:76:41:37:21:64:7c:4c:bd:7d:a4:9f:0e:60:fa:
f2:f1:22:ed:c6:2f:23:3c:ac:45:b6:9c:ae:43:d5:
80:26:58:d6:f2:88:b2:46:74:67:17:4c:d4:a6:b9:
3b:80:bd:28:71:4d:80:57:f8:6b:c8:ca:d6:d8:94:
76:71:e6:d6:7e:46:66:d2:2c:a3:51:18:e6:72:24:
1e:1b:48:12:7a:e0:ef:78:06:02:1a:4a:29:01:38:
da:31:9b:6e:a4:91:68:04:fe:ef:e9:e7:44:0d:d4:
7c:5d:c9:e4:67:7e:92:25:ee:fb:71:fc:0f:3f:9b:
3e:1c:b7:1a:06:4a:b2:f4:f8:2e:96:d4:70:1c:20:
57:0e:67:43:c7:bc:7e:e8:4e:b6:3d:f6:12:22:93:
77:9f:6a:e2:f2:ea:b1:08:78:6d:43:2d:45:4e:3d:
e8:c1:3e:b8:fd:1c:21:73:18:e7:d9:cd:d8:51:29:
7e:92:2a:85:66:da:3f:03:b9:93:8b:09:18:bf:93:
b1:9c:80:09:16:da:3e:25:fe:e5:4a:da:cd:03:e1:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:AE:0F:29:E0:98:CB:B6:7B:7D:17:A0:94:0C:91:19:FE:FF:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/262741d7-8c75-34e2-88a9-91b27f51794f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.107.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:8b:c9:a1:07:9a:3a:b6:3f:dc:31:76:99:1b:73:39:e7:9b:
0f:00:26:62:6f:c1:b2:1f:9a:99:45:19:bb:10:af:b7:41:0c:
83:53:06:62:9b:32:29:c5:d2:89:04:aa:d4:62:fa:02:f1:e1:
7e:76:01:47:69:5c:fe:96:e7:5c:ee:de:62:c2:8a:0e:56:9f:
cb:90:5d:07:22:58:09:02:df:35:5d:c5:b2:5b:4d:51:9a:18:
0b:2f:b4:0f:a5:81:43:89:14:64:df:fc:3d:ab:a5:0d:80:a4:
12:47:1b:a7:eb:81:e0:f7:3a:0d:6c:2f:0d:45:a4:37:14:9c:
de:2f:bb:f7:ac:22:d4:e3:1a:3d:28:f1:d1:6d:41:a8:69:96:
dd:4c:18:1c:19:01:9b:7a:e7:ec:09:0b:40:5a:75:22:0c:b0:
dc:e6:38:68:8d:93:52:5d:8f:77:a8:d3:e7:fd:b7:a9:9d:11:
d8:f9:1f:d1:8f:0c:da:92:da:28:98:cc:cf:e3:95:83:9c:14:
6f:70:4b:6c:87:f9:bc:97:3d:39:9b:2e:77:36:c4:81:d3:af:
f5:a1:4b:8b:02:f1:7b:88:3b:45:43:24:14:9e:bd:f4:b5:4a:
82:8c:47:03:56:61:84:35:4a:11:fb:98:7e:4e:a5:24:3d:cd:
44:ee:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:42:34 2026 by rpki-client