
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba157fd-5058-365c-bb7e-7dc202b10965.roa
File: 2ba157fd-5058-365c-bb7e-7dc202b10965.roa (raw, json)
Hash identifier: xVhgTo+xnZGwuNulGInwD67t7mr/ERFGYprTN2u9Luk=
Subject key identifier: A4:62:A0:0E:1C:48:97:A2:C1:CC:90:2B:38:62:17:E8:3A:79:F1:8B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F53A13C262C29E50FBABF97C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba157fd-5058-365c-bb7e-7dc202b10965.roa
Signing time: Mon 28 Sep 2026 16:32:25 +0000
ROA not before: Mon 28 Sep 2026 16:32:25 +0000
ROA not after: Sun 27 Dec 2026 17:32:25 +0000
asID: 22773
IP address blocks: 70.183.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:53:a1:3c:26:2c:29:e5:0f:ba:bf:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 28 16:32:25 2026 GMT
Not After : Dec 27 17:32:25 2026 GMT
Subject: CN=5345786a-3a7b-424e-add7-054fbfaa67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:2b:34:60:7c:51:cb:60:d5:43:89:4a:e1:
68:3a:48:fb:54:cc:49:76:a7:93:30:59:c9:2a:6c:
28:fa:1d:6e:bf:7b:8f:63:96:f3:a4:66:47:b2:4c:
b2:e2:84:06:f6:84:4b:13:25:eb:c2:38:6f:6f:a2:
43:bb:3e:bc:ef:4c:e7:1c:3d:63:2b:8c:76:17:89:
c6:98:83:83:79:6f:c9:e2:a3:a3:d4:3f:1f:69:c6:
ea:39:b2:ca:a6:8d:06:d2:3b:c7:43:cd:01:be:41:
f5:a9:9b:eb:03:00:df:d6:4f:e6:70:f1:5d:35:e0:
c2:0c:6e:6f:cb:aa:95:9d:f8:e1:5f:16:45:86:41:
0d:a3:12:03:c6:34:65:a3:a6:23:51:ad:bd:22:82:
6f:59:54:26:6e:ca:96:0a:ec:9b:75:e2:64:24:de:
e0:23:5f:73:f3:f1:46:b4:9d:9e:94:d2:3c:83:d6:
bf:d0:e2:74:25:3a:f5:5d:b9:a6:2d:1e:29:47:d9:
42:11:ec:8a:e1:0b:8f:7d:36:34:86:58:ec:54:d9:
4c:83:db:9a:0d:0d:c5:a5:4a:09:3c:cf:d2:26:e4:
7f:c2:6d:40:fa:4b:ea:16:52:57:83:89:26:51:06:
4d:d5:f1:d4:b5:ad:6a:34:90:7b:e5:59:a7:06:21:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:A0:0E:1C:48:97:A2:C1:CC:90:2B:38:62:17:E8:3A:79:F1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ba157fd-5058-365c-bb7e-7dc202b10965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.183.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:36:48:09:97:65:63:84:62:73:90:99:c0:0d:b9:8a:55:90:
89:f4:cd:42:34:98:c4:29:5a:c4:70:32:c3:f1:cc:ef:29:93:
c8:57:ac:d6:19:0d:17:c1:e5:3b:cd:3c:d6:7b:b6:04:aa:0c:
16:8b:04:52:38:2e:76:d8:31:1e:49:4b:a4:5b:21:d2:99:f5:
7a:f6:d6:98:12:71:20:25:81:28:8d:4e:aa:6f:5c:6f:3c:cb:
7d:21:3e:02:d7:82:f3:3d:ae:9c:52:bf:7e:9a:bc:87:b6:a0:
21:50:d9:3f:85:f1:20:c8:8e:b6:93:67:99:cb:f6:48:82:ea:
73:8c:e7:b0:f6:b0:63:ae:3f:9a:61:56:97:f7:95:0f:b1:42:
0b:82:4d:df:9e:6a:e9:b8:cd:43:bd:70:35:54:fb:06:19:19:
46:02:51:ac:e0:d6:be:e7:14:3c:58:a9:81:15:6d:40:c6:5b:
53:8b:56:61:51:f9:a0:b5:ba:6e:05:aa:26:5b:41:1e:45:ed:
9c:c6:d5:75:1c:b2:8b:52:be:94:18:cd:55:71:8e:4d:c5:48:
50:86:85:c0:3c:02:59:eb:db:06:a4:d5:2e:b0:9b:2c:57:88:
26:a6:77:1c:18:f5:fa:0f:a6:7f:dd:19:2e:42:24:c2:db:0c:
ef:54:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:01:16 2026 by rpki-client