
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c9564ac-2d81-306e-8179-854a78fe2c10.roa
File: 5c9564ac-2d81-306e-8179-854a78fe2c10.roa (raw, json)
Hash identifier: n2c3zwPgCdWeXFfqjKpg0ATPqafBet17k1ZZvt0J7FI=
Subject key identifier: 7F:B1:3D:AC:20:50:DA:41:BC:1A:97:0E:C0:D2:1D:93:3F:9E:F4:70
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D35A017E186038E870D0419E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c9564ac-2d81-306e-8179-854a78fe2c10.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.101.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:a0:17:e1:86:03:8e:87:0d:04:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=6f78dcdc-83f4-48c8-a9ac-e7dcbabf35a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:4f:26:62:3f:6e:cb:f1:82:22:a1:91:25:
b0:a5:f5:3f:5b:1a:b5:49:3b:51:90:a4:94:eb:30:
0d:03:57:20:ed:1f:55:b0:c9:0c:6c:0d:0f:fa:59:
98:97:b5:11:3e:71:83:92:08:11:88:81:31:2f:36:
8b:4b:a6:00:c6:78:15:93:9e:66:5a:35:ce:8f:2c:
45:5f:43:44:56:f8:3c:6a:a0:51:d3:2a:3a:3e:81:
2d:dc:2d:e7:7e:67:7d:7f:53:f4:c0:7c:b8:8c:6c:
e7:98:8e:d4:93:72:77:2d:79:ad:87:f3:a5:11:12:
e2:07:d5:62:bf:b2:9b:c7:82:9b:90:30:11:82:36:
20:1f:f2:91:f8:76:d8:ba:3f:a8:23:06:71:af:32:
ca:47:82:89:a5:a7:6f:1f:25:6b:75:1f:3c:51:f1:
65:0e:d7:bc:2f:8d:ca:fb:ac:e2:b9:74:15:eb:bc:
4f:b4:39:67:d5:75:a7:35:01:45:a0:a0:58:e1:15:
20:ea:57:d2:5c:34:76:be:40:fc:29:5c:6c:6d:ef:
3f:4d:03:a9:b3:cd:34:e3:8d:2a:9c:f0:bf:44:18:
c8:0e:b6:97:ad:d8:32:8a:58:d0:76:9b:a8:e0:8a:
b5:ed:87:4e:23:ff:2b:f5:0c:dd:f3:3b:21:e4:f0:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:3D:AC:20:50:DA:41:BC:1A:97:0E:C0:D2:1D:93:3F:9E:F4:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c9564ac-2d81-306e-8179-854a78fe2c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.101.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ca:b2:96:8e:20:20:31:15:6a:d5:ff:65:10:40:49:c2:dc:
3b:72:8b:54:53:1e:84:dd:66:04:4a:b8:9f:05:e5:f3:62:49:
9a:03:4f:58:2b:f2:3c:94:99:a1:c3:e4:2f:59:15:9a:ab:99:
8c:c4:ba:03:56:12:d5:b7:f4:b6:cd:7d:50:0c:67:6d:f0:dc:
bf:70:64:ec:c7:ba:4b:d3:fb:5b:d9:56:08:ad:7a:bb:0a:38:
ae:b4:2e:19:01:23:27:88:c7:cc:25:90:10:41:29:67:c0:6d:
d4:a8:ba:a8:be:d8:dc:64:0b:7b:b9:5c:cf:2c:93:6d:ff:d7:
9c:30:b6:c6:41:2b:73:4d:d2:90:33:8d:e6:2a:78:65:d5:82:
28:a0:8c:86:52:b9:d0:75:5c:af:f7:60:b9:c7:41:7c:32:18:
27:f6:51:96:10:94:97:f9:5a:08:0d:a3:fd:7d:fb:0e:a0:98:
47:67:9f:79:93:45:e8:f7:89:05:5f:2a:bd:3e:7d:ea:6a:05:
d9:d0:99:20:a9:80:74:9e:ba:ed:ef:b6:d3:a7:02:d9:df:ec:
74:a3:91:d1:77:1d:d4:46:7f:03:37:92:24:56:0a:bc:c1:a6:
aa:47:8b:00:41:93:8d:c4:27:7e:a5:64:0b:c3:97:8f:0a:36:
31:24:8b:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBfhhgOOhw0EGeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
NmY3OGRjZGMtODNmNC00OGM4LWE5YWMtZTdkY2JhYmYzNWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLdPJmI/bsvxgiKhkSWwpfU/Wxq1STtRkKSU
6zANA1cg7R9VsMkMbA0P+lmYl7URPnGDkggRiIExLzaLS6YAxngVk55mWjXOjyxF
X0NEVvg8aqBR0yo6PoEt3C3nfmd9f1P0wHy4jGznmI7Uk3J3LXmth/OlERLiB9Vi
v7Kbx4KbkDARgjYgH/KR+HbYuj+oIwZxrzLKR4KJpadvHyVrdR88UfFlDte8L43K
+6ziuXQV67xPtDln1XWnNQFFoKBY4RUg6lfSXDR2vkD8KVxsbe8/TQOps800440q
nPC/RBjIDraXrdgyiljQdpuo4Iq17YdOI/8r9Qzd8zsh5PAlKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+xPawgUNpBvBqXDsDSHZM/nvRwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWM5NTY0YWMtMmQ4MS0z
MDZlLTgxNzktODU0YTc4ZmUyYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7KspaOICAxFWrV/2UQQEnC3Dtyi1RTHoTdZgRKuJ8F5fNiSZoDT1gr
8jyUmaHD5C9ZFZqrmYzEugNWEtW39LbNfVAMZ23w3L9wZOzHukvT+1vZVgitersK
OK60LhkBIyeIx8wlkBBBKWfAbdSouqi+2NxkC3u5XM8sk23/15wwtsZBK3NN0pAz
jeYqeGXVgiigjIZSudB1XK/3YLnHQXwyGCf2UZYQlJf5WggNo/19+w6gmEdnn3mT
Rej3iQVfKr0+fepqBdnQmSCpgHSeuu3vttOnAtnf7HSjkdF3HdRGfwM3kiRWCrzB
pqpHiwBBk43EJ36lZAvDl48KNjEkiyc=
-----END CERTIFICATE-----
Generated at Thu Mar 19 05:45:15 2026 by rpki-client