
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/448b15d0-209a-3f49-9f42-0b09bee72bf5.roa
File: 448b15d0-209a-3f49-9f42-0b09bee72bf5.roa (raw, json)
Hash identifier: yk3NOYn3e+S1WEjiaH5HlOiGAIKJ2w9nS4ovpk7WOMU=
Subject key identifier: 20:BA:27:EC:37:44:FD:D6:65:33:0F:83:61:5B:9B:E5:9F:09:9C:86
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D19B4BC43AC3906A2B5435F08
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/448b15d0-209a-3f49-9f42-0b09bee72bf5.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 393991
IP address blocks: 72.203.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:bc:43:ac:39:06:a2:b5:43:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=bb2d4b9b-3128-46bf-8b30-03fe2383c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:3c:e3:72:46:12:30:43:1f:12:3e:3d:20:
e8:32:d1:dc:74:cc:d1:87:9f:f7:dc:dd:2a:4c:9c:
5e:5b:6e:f5:d2:90:48:8c:b5:4b:c4:71:e1:79:54:
0f:dd:e8:20:d1:a5:18:d1:a8:9c:2e:a8:4d:83:b2:
b1:ec:24:ed:9b:7e:0d:c3:a9:ec:ee:29:6f:57:69:
de:54:de:ac:6b:f0:b2:59:7f:d0:e5:4d:a5:80:fb:
d5:8b:92:6e:e8:4d:a1:21:d0:8e:db:8f:f6:0a:8d:
4f:e0:43:46:d2:3d:c2:9c:4f:d5:56:c1:c5:38:1c:
d2:3d:a7:c0:52:f0:6e:a2:63:e6:35:31:68:ee:4a:
51:99:77:f4:e1:70:04:00:3c:32:3a:6f:8b:56:34:
ec:87:e1:e0:48:26:6b:51:f7:8c:cf:6f:56:90:b5:
aa:ff:10:b8:bf:d7:63:7d:2f:81:df:83:12:ce:e0:
68:ea:2a:b0:fc:41:01:5b:c0:7a:8d:5f:70:50:6f:
ec:be:5a:50:c0:f6:7a:6e:6f:73:21:98:19:19:a4:
3e:32:de:19:71:ce:ed:fe:78:d4:5b:2d:54:39:d0:
1f:bd:4f:16:9f:35:af:2e:01:83:d7:1a:e0:f0:e5:
0a:e7:2e:fc:d1:4c:3d:c7:6c:2a:da:7d:92:f4:07:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:27:EC:37:44:FD:D6:65:33:0F:83:61:5B:9B:E5:9F:09:9C:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/448b15d0-209a-3f49-9f42-0b09bee72bf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.203.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:2a:64:58:80:d5:ea:dd:90:70:7b:0d:2f:24:91:0f:de:aa:
ef:0b:56:75:f7:e7:37:80:d1:02:11:2b:a3:14:f6:73:e9:d0:
ee:51:ce:b1:48:a9:ec:11:d3:9e:b8:e2:69:27:cc:f7:7c:7b:
d1:70:6d:b8:80:88:78:36:3d:42:d6:08:b2:2f:ad:07:96:77:
ec:76:d4:f7:a0:e4:86:f5:b9:f2:71:50:46:a0:56:34:6b:60:
3f:8d:bd:87:cd:81:52:a5:d8:eb:20:c7:34:3f:4f:1b:77:13:
f8:1d:6c:0e:30:2f:90:38:94:ce:ba:bc:96:8c:37:19:a2:2a:
cb:14:88:ba:7d:57:f1:1b:88:41:c2:de:53:56:11:86:06:01:
fe:6d:24:7f:b7:74:e9:43:08:0f:98:86:1c:dc:9f:61:88:65:
c1:74:3e:b1:73:5f:8b:2d:1c:97:35:38:82:46:e2:34:ab:55:
82:bb:ca:dc:e9:81:66:42:04:32:51:d6:e5:a4:7e:07:50:9a:
0d:62:91:10:60:54:4a:1b:02:b1:71:26:fb:1b:e7:9d:90:20:
5c:2a:67:c7:43:59:b4:ce:9a:90:56:97:b6:82:23:cb:b5:11:
b6:fd:70:a7:82:af:8b:d2:0d:e8:c0:cd:2f:54:ca:95:ff:5d:
2d:62:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 06:59:35 2026 by rpki-client