
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37ba4fc4-1acd-313e-8280-66188038d7d8.roa
File: 37ba4fc4-1acd-313e-8280-66188038d7d8.roa (raw, json)
Hash identifier: EbkTwe4ATx2fJlUIdi+D+FsjwAVabaYIHjyzYMmLAbo=
Subject key identifier: CE:E2:CE:98:42:BF:83:9A:9E:49:80:A8:A1:A9:F6:20:DD:17:6B:04
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FCBA4D1074A712B621FC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37ba4fc4-1acd-313e-8280-66188038d7d8.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 72.199.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:cb:a4:d1:07:4a:71:2b:62:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=0c0e5a31-d9bd-4166-bb96-528e7f874a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:77:4f:05:29:c1:ab:24:a4:9f:80:23:85:
8b:55:ab:14:39:e0:14:3e:f4:44:a8:7d:48:95:a3:
cb:13:59:f5:d6:10:8e:a4:5e:5b:d7:79:ba:d6:3b:
17:2a:34:4e:30:3d:e2:bc:43:ce:86:d4:a6:5e:27:
e1:27:0f:f4:61:eb:d3:7b:70:cf:75:c3:56:ef:2c:
b1:04:e3:a6:69:5a:7c:7e:7d:ed:0e:de:5e:50:3e:
89:b9:5b:2e:ed:1d:e8:0c:d0:8a:4c:cf:d9:24:3b:
f7:c2:d5:16:2a:cd:c2:5d:12:aa:22:43:ee:b1:b3:
19:76:16:4c:e4:5c:20:fa:39:b2:2f:29:1c:7e:14:
86:a9:c4:41:f1:6b:7c:a9:08:0f:06:e6:d8:1a:8d:
aa:41:6b:f8:d1:d4:7c:61:8e:4e:7c:52:44:c4:dc:
e1:af:91:8c:59:d9:91:bc:b1:9d:1d:8d:24:66:93:
31:db:e2:8a:e4:9e:c4:4a:58:f0:e3:5a:c4:8f:f1:
3a:96:1e:d9:15:a7:ae:3f:18:94:5f:08:a6:cb:40:
4a:4e:29:02:7c:e5:a2:e6:dc:3f:90:14:eb:b1:e0:
95:1a:f9:b6:ee:3b:5b:28:2f:ed:52:8f:40:ae:d5:
60:98:13:dc:ea:21:7d:6b:5a:a8:9e:e5:dc:aa:4c:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:CE:98:42:BF:83:9A:9E:49:80:A8:A1:A9:F6:20:DD:17:6B:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37ba4fc4-1acd-313e-8280-66188038d7d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.199.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:69:93:b8:07:74:9b:65:9d:d1:92:cd:a7:c6:62:5c:37:c0:
d9:a2:00:09:6d:90:66:d7:e1:c4:50:a6:bc:92:3b:e7:f6:fe:
16:66:8d:11:ec:c9:00:12:2d:3c:c1:d3:de:72:aa:0b:43:a4:
6c:0c:7f:a6:9b:16:39:f3:13:fd:39:e8:a7:e1:70:38:a1:25:
fd:3c:6c:05:64:2f:11:53:e3:62:b5:de:54:67:a9:ce:6f:c3:
2b:d1:dc:b8:1d:fd:e3:12:aa:d6:41:51:41:a0:18:65:69:50:
ed:d3:6f:7d:92:67:d1:1e:24:4c:dc:d6:c1:47:0a:82:f6:01:
19:66:70:89:73:c3:ec:d8:b1:04:6d:77:97:12:a5:8c:8f:42:
ae:61:25:6d:b6:8e:ba:f2:8a:1f:10:89:ac:cf:1c:f1:82:68:
48:d4:9c:86:d9:76:1d:49:36:2e:38:30:03:a5:dc:ba:82:30:
dc:da:0f:58:bd:09:ba:3f:b2:4d:d6:07:e9:e6:5c:23:69:e2:
79:ed:d9:c0:1b:89:8e:5c:46:f6:88:d2:a5:e4:93:1c:fa:df:
51:59:4d:2e:1e:21:57:62:34:2d:18:dd:00:18:38:93:86:02:
84:ca:8c:8f:1b:04:eb:fb:23:de:13:23:99:28:29:5b:0b:66:
9a:0a:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:34:17 2026 by rpki-client