
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b23b0f0-9cdf-3c15-bb26-ea24eef3f1db.roa
File: 3b23b0f0-9cdf-3c15-bb26-ea24eef3f1db.roa (raw, json)
Hash identifier: Pql94lrmGccn3qjFXVeecCGPv2ezf+xliJI7CQDnxm4=
Subject key identifier: 6F:EB:B9:79:1E:77:92:44:CD:01:DA:81:7D:60:09:6A:51:C4:F3:2C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D35A01ADF83ABEE6BEE75A8F0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b23b0f0-9cdf-3c15-bb26-ea24eef3f1db.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.10.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:a0:1a:df:83:ab:ee:6b:ee:75:a8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=17e2ade7-c888-4d06-8b4e-81466a0db979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:a1:4b:eb:5f:95:af:5f:1c:44:91:4a:8d:
0f:16:94:23:45:28:1a:5d:6c:3d:65:1e:ed:24:33:
fd:23:e5:aa:a3:87:85:a2:cb:a5:1a:12:17:c0:22:
36:f1:7a:e2:c3:a8:64:cc:cd:f3:2f:b6:3a:4e:f8:
03:e9:57:1d:47:b7:12:7f:3f:ed:a2:60:ae:81:aa:
c0:31:e5:7c:67:41:e3:77:82:dd:83:17:26:49:03:
fd:01:ac:d7:58:9e:87:8c:06:ad:88:b0:ef:f5:f1:
8d:14:59:24:db:09:0b:b9:31:dc:72:77:64:d9:8c:
6e:9c:85:a5:da:11:2c:4f:8f:34:2e:3d:33:5d:5a:
78:61:80:04:9a:f6:2d:7b:9f:61:9c:24:7d:32:40:
88:69:a0:7b:e6:89:08:50:17:c9:82:8b:2d:14:70:
05:30:26:cc:c9:92:b8:ad:a3:58:5c:5b:b5:44:a4:
16:db:fd:83:d1:63:5e:71:a7:c2:85:17:78:bc:89:
8b:b1:bc:be:45:c9:12:90:03:b9:e4:4a:0c:42:c4:
cd:bc:9e:d9:78:38:73:61:c6:d8:b0:d0:8b:57:ee:
9a:a0:4c:45:05:c6:1c:86:d0:46:01:ef:9d:76:ca:
a6:be:0b:78:9b:a8:b3:cc:23:26:cd:ee:69:e5:9f:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EB:B9:79:1E:77:92:44:CD:01:DA:81:7D:60:09:6A:51:C4:F3:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b23b0f0-9cdf-3c15-bb26-ea24eef3f1db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.10.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:56:66:33:35:b1:86:d2:57:e7:40:4c:15:33:92:a9:16:60:
6b:87:08:ea:6c:8d:5e:52:3f:e9:f0:62:e9:47:96:0b:e3:b3:
26:75:b8:b4:7d:d3:9d:7b:64:e5:06:03:0c:25:b2:b9:ce:de:
7b:1c:d7:e9:74:56:3e:69:45:6e:9c:ab:cf:3b:c1:8c:03:fe:
76:c7:61:89:c4:45:3c:93:9a:c5:69:91:59:77:3b:f6:35:49:
a3:0b:1c:b1:52:57:2a:49:7e:ee:d0:dd:5c:d3:6d:29:4a:e3:
5e:98:59:11:8a:e2:72:0b:ee:dc:26:e0:44:2a:29:5b:66:2e:
c6:ac:8d:93:2a:54:fe:38:74:f8:17:e8:37:ac:59:75:d1:1b:
a9:e4:90:4b:18:44:36:9c:12:cc:21:eb:e6:99:93:48:75:6f:
4f:31:96:5c:47:7c:de:99:04:0b:95:6c:31:f2:50:65:05:05:
8a:fd:b7:36:62:4f:87:91:49:f7:48:11:ed:2d:42:bc:2d:22:
85:5f:a5:c3:81:25:6d:bd:aa:23:04:83:c0:00:69:16:6b:7e:
0d:61:0e:3f:8a:e2:24:c2:72:66:ef:87:af:e1:ca:d4:fd:10:
59:16:66:99:06:1e:4e:43:22:f6:b4:1a:b2:78:66:48:59:c9:
74:87:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 06:55:19 2026 by rpki-client