
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa
File: 3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa (raw, json)
Hash identifier: J6gvWD3XwgqGlQRWkea6vz/wAdbRqoJCbNgMGPW38Ck=
Subject key identifier: E9:97:E5:7C:4D:7B:4F:5B:9B:C7:AC:84:A2:F2:FF:82:23:70:35:CE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EB84713FCFDD06E7B46732B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 22773
IP address blocks: 72.199.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:13:fc:fd:d0:6e:7b:46:73:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=2159ebcb-b753-473d-9c4f-80027c7a9dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:c6:b9:3b:c1:ee:65:7e:3b:71:09:09:72:
22:4d:8b:2a:3c:be:f8:16:e1:58:4a:5e:40:87:16:
da:c8:f5:5a:a4:aa:0a:c9:f8:fe:f8:f0:08:bd:9d:
6e:9b:6d:5b:77:e8:63:a6:b2:f8:4d:dd:be:39:4e:
47:3f:ea:b2:1a:5b:35:95:1e:09:99:33:9d:20:20:
81:df:ba:2a:24:3b:5a:e3:44:31:16:1f:3e:37:13:
f7:a7:a9:99:bc:31:af:20:28:1f:93:f7:2b:10:8d:
d0:e2:94:0d:0a:b0:39:ce:a5:ba:69:95:d4:f0:8c:
82:29:61:97:c7:d1:62:fd:ad:4c:b4:3b:05:1c:4e:
de:bb:8d:d5:09:c7:93:6e:76:fa:b8:72:5d:c5:7d:
ac:19:fd:9a:a0:a8:e6:90:9a:c1:92:1e:1c:1c:be:
fe:95:6c:79:b5:16:8d:ab:7e:10:98:49:2c:44:d2:
78:2c:0a:34:42:81:5c:4b:62:f8:cc:f4:ce:11:88:
a3:83:88:c7:76:3f:04:d6:33:6b:5c:c5:26:6e:f9:
05:22:92:be:e4:db:3e:ed:28:e3:cb:06:f0:e2:23:
05:fb:46:ab:23:8f:41:73:c0:ae:4e:09:62:4c:f3:
95:2b:e5:7a:4c:e7:29:da:3c:fb:d0:13:2f:fc:a8:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:E5:7C:4D:7B:4F:5B:9B:C7:AC:84:A2:F2:FF:82:23:70:35:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.199.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:af:ce:f4:b8:2a:a3:25:01:08:3e:b9:b8:c9:10:23:21:96:
ce:6f:3a:0b:c4:38:ae:b3:aa:54:4e:08:40:f1:52:20:59:67:
67:24:83:5e:d2:59:c0:96:c7:1f:b2:07:3f:b7:1c:a4:41:ae:
25:ca:44:86:a4:cb:6c:2f:b7:ee:d3:bf:6c:e5:c5:6e:86:7c:
45:50:71:71:e6:06:4b:66:fe:53:96:ad:ba:9c:dd:82:67:84:
b3:92:1c:ac:1a:f6:d1:9c:18:ec:1d:d9:58:c6:fb:e3:6d:8b:
78:9c:d1:bf:98:c9:ed:9c:f0:3c:02:ba:7a:a3:2a:f9:4d:1a:
28:cd:26:a9:ef:3b:1f:5e:04:3b:86:42:bd:9c:20:42:1f:db:
6a:79:d2:6e:91:04:ff:c7:a4:a3:5f:0e:6c:ac:06:9e:1f:82:
3f:93:49:d6:f4:81:4a:13:cc:b3:61:ac:83:67:ee:ac:d7:f9:
cb:14:4c:fd:e7:43:de:e2:08:b5:4b:f4:38:cc:ac:09:c0:98:
f0:92:8b:c6:ae:d2:25:7b:b7:62:95:06:f8:69:06:9c:be:a7:
dc:b1:fc:05:28:0b:39:9b:cb:2f:84:4c:24:08:53:19:47:35:
0e:10:14:b2:1a:f3:7c:1d:9a:0a:bd:e6:17:50:8f:99:93:28:
96:d1:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 04:09:52 2026 by rpki-client