
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573efba0-0b73-36c8-9ea3-20ed5acd611b.roa
File: 573efba0-0b73-36c8-9ea3-20ed5acd611b.roa (raw, json)
Hash identifier: xmBTlDg2K53iXiXnYBix4LJYfo7qQhoSO35BtGS/qqM=
Subject key identifier: E3:7C:8B:B1:28:42:6E:3F:72:1B:1F:A8:1D:85:76:70:55:25:DF:80
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FE6A49F68F31170F21600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573efba0-0b73-36c8-9ea3-20ed5acd611b.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.228.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:e6:a4:9f:68:f3:11:70:f2:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=af073ac7-3cac-4a00-9638-13dce599e6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:a5:3a:68:46:ee:0d:d5:a5:63:e9:9d:eb:
fa:cf:c1:f1:ac:2f:19:de:14:f5:1f:02:37:93:5d:
76:6d:6c:56:9d:61:c1:c2:ef:7d:86:3f:6f:20:67:
14:1c:ee:95:dc:6b:32:ea:23:61:d9:d8:c8:02:66:
c8:8a:24:16:f7:97:3e:b1:0d:19:42:78:11:70:18:
3e:71:8d:fb:f9:9b:82:19:db:c8:da:76:77:ad:8a:
34:b9:02:d7:23:f9:57:fd:0c:4c:42:b3:c8:03:52:
f5:a2:93:ff:78:e0:c4:08:b0:87:52:98:02:8d:c3:
ec:2f:53:f6:92:47:e7:b4:9d:17:40:73:6e:75:94:
bc:ee:0a:32:ed:f3:6e:10:d7:6b:c0:1b:d5:79:97:
47:27:08:bb:24:01:a7:3f:c2:56:75:04:d1:b0:cd:
53:1a:1f:27:a5:79:e0:cb:a5:7b:ad:12:77:27:c8:
f4:41:30:3c:be:42:bf:87:f2:4f:ba:5c:de:8b:14:
02:e2:8a:65:4d:86:ae:ad:d9:20:d4:13:3d:f6:f5:
5c:aa:7e:4c:0a:2d:cd:68:29:5a:a3:92:62:3b:80:
af:ba:d4:04:b1:7b:8d:40:c0:07:44:c6:87:f1:c3:
06:f0:c2:6e:cf:db:37:d2:8a:32:06:2f:74:3d:47:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7C:8B:B1:28:42:6E:3F:72:1B:1F:A8:1D:85:76:70:55:25:DF:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573efba0-0b73-36c8-9ea3-20ed5acd611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.228.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:df:08:c3:b8:e7:3c:c6:c6:1d:c9:0e:b4:73:d5:35:2c:1a:
f2:67:9c:d4:52:c1:7f:b0:08:aa:24:3f:fb:2d:20:c6:36:e2:
1a:8a:23:b6:32:24:82:02:b5:85:ce:d9:51:1d:26:22:f3:d0:
20:1e:d9:5b:d6:60:8a:58:6c:e5:5b:24:68:01:77:18:74:9b:
51:c8:65:54:91:3b:1e:b0:b8:df:e9:2e:49:f1:d5:38:03:54:
f9:23:e4:0f:bb:fd:47:6a:eb:b8:be:8f:97:5d:2d:b6:ac:43:
08:26:8c:47:f4:ce:76:9b:69:7d:71:c1:b1:a7:8f:b6:92:d0:
48:84:9b:ec:e1:2f:37:0e:12:88:e4:f4:c5:be:7b:23:4c:b0:
5a:b0:32:2a:d3:bb:05:3b:42:20:93:27:2f:e3:c4:5e:ed:56:
83:85:b9:01:b9:d8:31:8d:5c:5f:5c:98:6e:21:8e:ee:48:1f:
2e:42:e1:63:ed:0d:9d:2c:22:e6:5e:bf:6b:e3:33:52:bc:0b:
f5:9d:e3:cc:dd:f3:2c:e1:4e:f1:90:5a:8e:e6:58:c1:8c:80:
59:58:fe:b4:be:57:45:30:f7:f2:8d:9f:cc:c4:dc:16:5d:7b:
13:0b:5c:17:bb:d5:af:1f:09:23:d1:36:ad:61:28:dc:9a:17:
b3:e0:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 06:58:41 2026 by rpki-client