
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa
File: 828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa (raw, json)
Hash identifier: MoGW1d/eqlL8Ojlv9BRLVBybFjkrdgC5t2x2LIxwxXY=
Subject key identifier: BE:AD:C0:DD:C2:ED:AB:8B:82:C3:6B:24:C7:E5:41:91:CF:4A:DB:F4
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E15E4897AD14C22FB11B5D600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 22773
IP address blocks: 68.6.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 06 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:89:7a:d1:4c:22:fb:11:b5:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=ea602d3d-02c8-4063-93fa-d7169133c87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:bc:92:4e:fa:49:bb:60:62:ed:07:dd:69:
88:f4:c6:ff:75:da:12:d9:1c:54:c5:a8:3a:d7:85:
01:35:39:5a:08:5c:c3:0b:b4:e1:50:0c:b2:a2:7f:
b7:50:ee:ef:bf:31:04:03:4c:14:00:19:fa:03:db:
71:f0:f3:ad:a0:29:14:ba:be:41:0e:c1:08:d1:73:
eb:f7:50:ac:4b:30:d6:02:b8:ed:99:bc:47:0d:f5:
1a:b2:6e:a1:11:e0:86:2f:a1:90:44:66:c9:64:d4:
f3:81:31:0a:1b:05:3a:cc:08:94:cd:33:13:c7:d9:
0a:56:5b:6b:74:70:80:af:2d:c3:62:82:5f:6a:7a:
c6:4d:cd:92:02:93:34:91:53:95:12:9f:a3:89:0a:
31:57:94:20:75:d2:74:8f:9a:8e:98:03:b6:de:57:
72:ed:a4:f8:04:17:60:3f:dd:50:be:16:8f:32:3c:
79:0f:f6:55:7c:df:cb:ff:c5:7b:cf:7a:cc:58:13:
bf:b5:1d:b2:24:14:29:3b:fb:44:fe:0f:a8:11:da:
dd:4a:f3:e0:5a:b6:dd:20:36:ca:46:b9:3b:31:8d:
e2:0d:40:7a:48:0a:82:81:de:65:ee:5f:3c:3f:4a:
d2:30:3c:e8:06:47:02:6d:45:c1:db:d2:ca:4e:14:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:C0:DD:C2:ED:AB:8B:82:C3:6B:24:C7:E5:41:91:CF:4A:DB:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.6.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ad:70:20:66:ff:a8:d4:cf:c6:be:0f:bb:ee:95:0a:d8:3f:
67:85:87:a3:91:f4:f6:30:5d:29:0d:49:4b:c9:be:df:cc:5d:
f4:03:f1:29:df:33:a1:1f:6e:33:01:62:9a:5f:ab:2a:60:60:
e4:30:51:ac:97:70:7b:da:f3:e5:41:da:06:86:6b:9e:bc:bc:
9b:a2:d5:6a:04:d1:7f:c6:80:60:2b:9b:7f:03:9c:15:d5:3a:
c1:da:7a:bb:1e:e9:36:6b:f4:95:64:b7:d2:97:11:46:af:24:
c4:45:89:33:77:27:3a:ae:41:48:92:e9:23:e1:13:14:ff:da:
1e:3f:08:7e:95:2f:b5:78:b1:a7:bd:5b:11:9e:74:3f:7f:5c:
33:f4:fe:1c:61:d2:06:23:52:7b:56:e6:6a:5c:e8:41:3b:bf:
5a:18:05:f1:03:02:8d:6b:fa:67:ec:3e:28:d8:0a:cb:42:0e:
51:23:25:97:0e:a8:c7:aa:18:11:33:95:54:c0:c2:be:36:ee:
5f:d3:c9:55:d3:fb:0d:c9:05:36:5a:7b:ac:f6:5a:b9:85:26:
5a:9b:02:fc:5f:2f:9c:58:b3:76:79:c2:49:9c:27:51:9c:ca:
2f:c4:f9:38:49:ff:56:ff:32:31:17:33:26:a0:36:98:a7:48:
75:11:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 23:53:25 2026 by rpki-client