
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ad6f02-df9a-3053-8c93-a93261663245.roa
File: 28ad6f02-df9a-3053-8c93-a93261663245.roa (raw, json)
Hash identifier: pFC775ZC3DxSc4a8DC6fyIruGMk/wFyiSQuz/mrreRQ=
Subject key identifier: 9D:1A:66:18:0D:8E:F9:C2:0C:FB:92:BD:68:93:6B:5B:66:C9:7A:F6
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D35A01EBA23C167E640F34B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ad6f02-df9a-3053-8c93-a93261663245.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 72.209.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:a0:1e:ba:23:c1:67:e6:40:f3:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=69cfe005-79a9-4634-9dc7-12b90c7f966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:1a:80:0e:15:b4:2e:39:98:48:d0:a7:a4:
26:db:80:ba:66:31:34:31:85:d7:14:20:e8:8f:c7:
8f:d4:b0:b4:32:47:09:e2:de:58:98:83:f9:09:9b:
13:62:81:d7:3e:6a:76:33:72:2e:85:d6:1d:fe:78:
ef:68:59:d2:4f:0f:72:07:66:55:16:03:fa:97:04:
0e:56:8d:b1:8b:46:7c:fe:96:c5:bf:e2:30:22:1a:
12:d3:e4:08:7d:92:66:59:c6:ae:2d:c6:0f:90:53:
1f:7d:67:68:cb:47:d8:3c:cf:22:f8:02:49:a0:aa:
6e:fe:93:47:15:26:23:37:87:b4:0b:f9:3a:31:6e:
85:ab:e5:ee:7b:a7:28:bb:2e:45:44:ce:c8:a8:8e:
80:a5:2d:f1:71:8a:b2:f7:f1:c0:53:e2:d1:f0:ad:
77:e0:07:28:97:f8:60:f8:da:29:b4:d1:56:cf:c9:
9a:c7:99:7f:3e:b5:5c:75:3b:11:ab:c3:cb:fc:4e:
b4:f6:57:85:79:eb:b9:60:d5:ce:02:cf:11:00:d8:
ee:d4:f5:52:aa:4c:12:11:56:1e:8e:71:94:64:ee:
6d:3d:2b:08:6a:c4:51:93:e7:19:1c:9e:24:f7:98:
c4:5f:97:45:51:a0:82:57:bc:b1:f5:e5:80:96:24:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:66:18:0D:8E:F9:C2:0C:FB:92:BD:68:93:6B:5B:66:C9:7A:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28ad6f02-df9a-3053-8c93-a93261663245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.209.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:4e:a5:88:54:d6:32:e6:20:aa:34:bd:07:a8:24:23:dd:32:
56:49:96:fa:fe:4f:4a:67:10:96:fd:6d:43:bd:4f:ac:a5:bb:
66:df:fd:35:42:7d:e4:d2:82:76:cd:3a:ab:f6:9c:04:db:8f:
69:11:09:14:1e:41:19:5f:e1:bc:3b:c9:b8:e1:13:1d:ab:a3:
1b:45:67:0e:5e:95:8e:03:8e:da:55:38:17:98:71:50:1e:f4:
43:4e:16:c6:32:49:28:30:03:5e:92:00:80:c6:79:18:f9:3b:
4c:16:76:72:c6:3e:f0:fb:ce:d8:d1:4e:f3:b6:65:14:a5:2f:
e8:84:b0:68:3a:ae:a1:78:70:4c:dc:42:fa:09:d2:bc:fa:9e:
03:b3:1c:22:c8:99:d6:50:cf:e4:49:5f:de:00:11:9f:fc:5b:
13:d1:8a:dc:da:cc:ec:f8:1e:21:68:dd:04:13:e0:0b:20:34:
45:95:d1:bf:6a:bc:f6:35:76:31:24:2b:c0:1d:a5:ae:e7:8e:
f6:1b:e4:ab:c8:7c:67:03:84:8a:cc:7d:81:6c:fb:f5:58:df:
c4:df:e5:b7:98:08:98:c8:38:fd:ca:c8:85:62:0f:55:83:cc:
18:89:90:8d:19:f7:46:f3:e3:57:80:d6:fb:a0:ff:27:22:06:
c8:e6:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 06:57:28 2026 by rpki-client