
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ea1838d-26ce-3bf9-ba87-f8f76f0b05cc.roa
File: 2ea1838d-26ce-3bf9-ba87-f8f76f0b05cc.roa (raw, json)
Hash identifier: s+UyKBg8DJSOeuYOs+RnjAHNlASl/2/Mz5d8iNClmtw=
Subject key identifier: 26:26:03:CE:CD:BC:F7:33:9C:A1:A9:26:3A:D8:58:0F:2C:DD:8D:A8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D35A01534585B33EAB263E200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ea1838d-26ce-3bf9-ba87-f8f76f0b05cc.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.8.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:a0:15:34:58:5b:33:ea:b2:63:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=32b29c5f-c2ea-440f-9c69-c84e95288875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:e9:eb:25:87:1b:61:f0:f4:70:8a:09:68:
b6:96:53:a4:4b:db:5b:ec:19:b1:ab:62:8b:96:1e:
b3:db:d1:76:3c:ef:46:e4:3b:89:a0:c6:2b:49:0d:
a7:bf:aa:d8:5d:25:fb:8a:0f:e6:be:50:e1:43:84:
60:ba:43:98:5b:b4:3f:3a:1a:f9:ef:7b:49:b7:03:
5f:06:42:6e:74:c5:75:df:9f:ea:08:bd:0c:21:fc:
bf:9b:46:7b:0f:ed:06:0f:6d:6d:af:17:8d:ce:00:
be:31:ed:d0:a3:57:2b:20:9e:4d:1b:61:03:97:fc:
bc:11:75:7e:2b:3e:b3:54:3b:59:d3:e9:d2:43:ea:
2c:c4:f5:52:db:ad:3a:6a:0d:bc:70:92:c2:b3:92:
e5:6f:c8:fb:00:4d:76:16:c8:f9:72:cf:94:52:a3:
a1:7e:ba:5b:c4:94:aa:b7:8f:dd:c1:ee:9f:2f:76:
34:e1:a3:e5:91:3f:43:62:ec:61:36:98:11:67:ad:
53:5c:55:ae:df:65:16:9e:f8:a4:2d:81:2d:0e:33:
d0:f6:47:07:49:0c:38:a8:3a:33:3e:d3:c7:69:59:
71:0b:cb:bb:2a:c6:05:49:23:1b:cc:8f:50:ee:c9:
ea:85:fb:e6:97:86:e3:86:c9:56:80:e6:ca:5a:0d:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:26:03:CE:CD:BC:F7:33:9C:A1:A9:26:3A:D8:58:0F:2C:DD:8D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ea1838d-26ce-3bf9-ba87-f8f76f0b05cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.8.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:bb:57:27:00:4d:00:84:bb:f1:3d:cc:c0:4f:27:a4:7e:20:
a3:55:d9:e7:82:95:50:b3:57:6c:26:57:e1:d7:de:85:a8:58:
8f:23:a8:31:b3:b3:86:41:74:9a:8f:22:70:6d:47:c1:b7:19:
10:8e:76:b4:7e:45:27:b6:16:ca:de:38:8f:0a:99:8e:53:39:
6a:40:6a:7b:d4:82:d0:e6:ef:97:8b:7e:26:d6:d5:02:a8:da:
da:aa:2c:5b:50:02:e2:43:35:7b:8e:12:b5:12:a8:28:d6:62:
7e:08:b3:aa:66:35:a4:33:49:7d:3b:8d:93:c5:cc:80:18:83:
90:e1:5b:0d:e1:16:dc:53:c1:48:e7:1f:b8:53:6a:5c:1e:f6:
f1:b3:a8:53:d7:e6:2b:31:3d:d2:36:24:7a:a5:a4:23:6c:6f:
63:5a:bc:c2:f1:d6:98:0c:8c:37:d8:b4:24:00:54:48:0c:41:
19:08:fd:cd:17:01:33:1a:f3:c5:5e:83:49:67:6d:ee:89:c4:
3f:1a:9c:d8:08:26:ce:57:5a:3f:66:21:98:90:47:eb:28:2b:
22:7e:79:08:07:5a:55:99:88:d0:1f:39:ea:d3:45:a4:17:d1:
67:77:2f:df:17:41:94:a2:56:cc:73:8a:f3:cc:8a:98:ae:72:
d1:a8:73:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:01:10 2026 by rpki-client