
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa
File: 38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa (raw, json)
Hash identifier: 2LtN85Dm+gT5/WCP5J7X/abPCdn0JJujQFDWeW2Q1qg=
Subject key identifier: 40:0C:DA:75:E8:5A:E8:DA:C1:C1:5A:1F:85:93:71:78:73:63:66:F2
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EB84763F09A7901946EFF9200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 22773
IP address blocks: 68.13.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:63:f0:9a:79:01:94:6e:ff:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=48b52568-c1c8-4a69-8431-03c768e0a03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:2a:e6:c8:3a:88:70:90:95:0a:8c:cf:a7:
8b:4d:72:4f:f9:28:7a:d7:be:99:ea:40:ec:4d:57:
6b:87:94:b2:34:93:d4:3a:15:fc:1f:83:63:f1:07:
81:99:69:9b:ea:56:bd:da:0e:aa:0e:52:a3:42:32:
4f:e3:3a:78:b5:8a:b6:94:43:f3:a3:00:8a:15:b1:
96:28:38:82:bb:ec:97:7b:53:99:6d:9c:a8:89:24:
17:fc:15:3c:88:f4:73:96:2e:dd:76:28:c7:ad:3b:
1b:5d:ab:8f:6f:d8:bb:34:ca:21:f9:11:d9:5e:32:
32:0e:8a:44:91:85:ea:ec:f9:98:15:8b:96:23:46:
e0:a3:7d:66:9a:64:6e:99:0b:a4:7c:98:90:ea:11:
8a:80:a7:55:ea:31:fb:d9:f9:e5:e8:80:50:e9:72:
0f:3b:dd:e4:d2:bb:5a:83:89:3a:8b:8e:53:ca:7b:
ab:a5:a9:55:de:ee:ab:33:53:48:52:bb:4a:5c:7a:
d9:f2:a6:27:f3:f1:2e:da:8f:2a:5b:65:5d:7a:b9:
7c:83:b0:78:a8:59:d8:55:7d:ce:8c:49:d5:d5:b8:
21:79:f4:ae:42:c2:34:44:0d:99:ca:46:8d:45:1b:
ab:39:28:a7:9e:73:c2:d5:29:63:a1:ad:8b:b4:54:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:DA:75:E8:5A:E8:DA:C1:C1:5A:1F:85:93:71:78:73:63:66:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38831b9c-5cd0-3a15-9bd2-a69643d4d31b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.13.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:29:81:23:8b:d5:02:32:5d:62:1e:23:48:e5:e2:c3:eb:9f:
3c:1a:df:54:8d:ce:78:6f:47:a7:2c:99:dd:79:64:9f:1a:42:
4c:49:7a:cd:6c:5f:ca:16:e8:c0:55:1b:35:66:f9:33:b6:88:
f9:e7:14:22:8d:f1:0b:86:39:2c:f1:b1:31:51:7e:44:c3:02:
d5:c5:16:ce:10:05:87:06:8a:ba:37:c8:44:4e:62:97:63:f4:
ac:e5:08:8c:28:c5:e0:e6:1d:80:7c:86:77:68:93:c2:37:94:
0f:1f:eb:71:77:1e:6a:0e:50:3a:b5:d3:e7:40:27:f7:9c:61:
82:71:9f:d6:27:62:27:0d:7f:f3:fd:2d:f0:ed:68:ae:54:e8:
84:30:64:08:07:41:99:a4:e2:17:86:f0:fe:63:fa:ec:23:d8:
ab:e3:51:44:2b:d5:b7:76:1e:6a:25:da:64:a2:d4:d1:14:8f:
6c:ec:d1:d7:d5:51:55:b3:a5:58:7c:b2:b2:c8:04:03:72:65:
67:46:e1:de:f0:8e:2a:51:33:b7:3f:41:54:44:bf:f7:2f:f3:
19:1a:46:70:7b:1d:a8:ac:7f:0f:1c:57:04:19:ad:ab:ce:d1:
71:47:d9:da:01:47:f1:29:b5:25:5c:f6:f0:e0:74:72:2f:e4:
cc:a9:0f:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R2PwmnkBlG7/kgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
NDhiNTI1NjgtYzFjOC00YTY5LTg0MzEtMDNjNzY4ZTBhMDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4sq5sg6iHCQlQqMz6eLTXJP+Sh6176Z6kDs
TVdrh5SyNJPUOhX8H4Nj8QeBmWmb6la92g6qDlKjQjJP4zp4tYq2lEPzowCKFbGW
KDiCu+yXe1OZbZyoiSQX/BU8iPRzli7ddijHrTsbXauPb9i7NMoh+RHZXjIyDopE
kYXq7PmYFYuWI0bgo31mmmRumQukfJiQ6hGKgKdV6jH72fnl6IBQ6XIPO93k0rta
g4k6i45TynurpalV3u6rM1NIUrtKXHrZ8qYn8/Eu2o8qW2Vderl8g7B4qFnYVX3O
jEnV1bghefSuQsI0RA2ZykaNRRurOSinnnPC1Sljoa2LtFTXJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAM2nXoWujawcFaH4WTcXhzY2byMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg4MzFiOWMtNWNkMC0z
YTE1LTliZDItYTY5NjQzZDRkMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA3KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIApgSOL1QIyXWIeI0jl4sPrnzwa31SNznhvR6csmd15ZJ8aQkxJes1s
X8oW6MBVGzVm+TO2iPnnFCKN8QuGOSzxsTFRfkTDAtXFFs4QBYcGiro3yEROYpdj
9KzlCIwoxeDmHYB8hndok8I3lA8f63F3HmoOUDq10+dAJ/ecYYJxn9YnYicNf/P9
LfDtaK5U6IQwZAgHQZmk4heG8P5j+uwj2KvjUUQr1bd2Hmol2mSi1NEUj2zs0dfV
UVWzpVh8srLIBANyZWdG4d7wjipRM7c/QVREv/cv8xkaRnB7Haisfw8cVwQZravO
0XFH2doBR/EptSVc9vDgdHIv5MypD+c=
-----END CERTIFICATE-----
Generated at Tue Aug 4 05:25:43 2026 by rpki-client