
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa
File: 2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa (raw, json)
Hash identifier: saXtMZOjn9ZBdDBXZ8aNcu5Xpf/4vm6foKIXhRhY4cs=
Subject key identifier: 38:6F:F9:10:4F:EE:22:3C:7E:D8:E4:06:93:39:BC:86:E3:A5:B0:76
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EB8474807AAFC54F3B0776760
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 22773
IP address blocks: 68.0.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:48:07:aa:fc:54:f3:b0:77:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=1113792c-1893-468d-b94f-a50138928eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:3b:03:da:c8:10:b9:dc:2b:f0:5e:bf:f6:
80:18:3d:a6:98:40:49:cc:a6:fe:f0:43:d5:29:1f:
c6:91:11:a2:5b:f4:a5:fe:3d:9f:1c:a2:ed:58:c1:
71:99:d3:ea:fd:82:15:ff:3c:35:98:92:ec:5f:c2:
af:f8:36:39:c1:7b:24:aa:ed:54:01:cc:95:da:95:
ae:51:fd:a0:0f:c7:23:1b:3e:10:bd:62:51:9b:68:
38:e2:a6:60:78:c5:3d:18:39:3a:21:43:37:d6:ec:
fd:43:99:16:94:f9:ab:ca:e8:90:67:89:1a:9b:37:
0b:ca:7f:6e:da:6f:ad:16:12:be:89:ef:f8:35:c9:
75:32:8d:96:61:79:84:26:6e:37:4f:30:d7:49:d4:
e5:60:41:8c:b5:cc:17:0f:f2:ad:5d:b2:31:d4:28:
b1:fb:de:dc:71:af:fa:0d:1e:d6:83:b7:03:56:72:
17:c5:02:71:4d:45:92:38:32:68:fd:49:e2:68:ac:
5d:32:bc:dd:8a:28:8b:b7:b3:d1:f4:b6:d4:cf:09:
99:02:58:45:a6:0b:70:a1:5b:61:be:80:e8:42:35:
c2:ce:37:d0:dd:bc:70:c8:df:67:0a:03:2e:1b:c0:
a9:ca:0a:97:a0:58:f1:ea:aa:b3:5e:97:b4:c0:c4:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:F9:10:4F:EE:22:3C:7E:D8:E4:06:93:39:BC:86:E3:A5:B0:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ecbf271-c335-33b7-bbc9-da00b48d3b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.0.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:4a:d8:0d:80:95:06:cb:2f:a6:03:80:f6:5d:4e:68:a3:ff:
4c:99:da:e8:11:18:a2:7b:bc:fd:e9:f6:fa:c2:26:44:bd:2c:
07:76:70:03:0a:b2:fa:e2:fe:76:2e:b1:5f:43:c7:a1:6b:5a:
75:79:d8:d0:2a:06:44:12:e5:d1:1f:2d:f7:26:1f:40:f3:b6:
08:ff:81:50:0e:d2:c8:dc:ed:7a:4d:05:0e:ab:22:e7:d6:7f:
d6:b1:96:70:c3:79:af:4b:a2:c7:46:d7:cd:4d:0e:98:0a:c1:
79:3e:1b:6e:d9:1e:8c:77:e2:f8:10:34:9d:58:b6:f7:43:43:
44:bb:9a:27:ea:74:7d:e5:3a:3a:42:7a:40:9a:0f:97:0a:eb:
62:78:9c:98:1e:85:fc:ce:1c:94:6b:6d:33:38:27:2b:dc:b5:
c7:5f:50:42:65:6f:bf:a2:1c:22:3c:70:c1:5d:07:97:1f:05:
f9:69:53:66:53:82:4d:05:10:4e:c9:1d:87:c4:83:68:2c:25:
5b:43:33:dd:89:34:59:2e:53:92:c1:df:b9:b2:14:21:d3:ee:
f9:51:aa:20:e8:10:d8:1a:2c:cf:aa:7d:f7:38:47:a1:2a:a3:
78:84:b7:f8:83:87:1f:62:97:8e:bd:08:af:dd:c7:70:d6:63:
6d:3c:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 05:22:21 2026 by rpki-client