
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa
File: 8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa (raw, json)
Hash identifier: EMNldHe9LrfaqmwqqbM+zuZCGnWbyJ2x9pN7w2mWQjw=
Subject key identifier: 88:17:78:B7:BA:54:54:CD:F7:35:B5:C2:67:18:87:42:A5:07:47:5D
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FC3EF053D30E3357DD260
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.14.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:c3:ef:05:3d:30:e3:35:7d:d2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=dec2b10c-f0d7-47e0-8a0a-6895c7fa3916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:03:32:f2:32:92:47:dc:3a:78:e3:9a:97:
cf:85:8b:ac:55:ea:9d:db:30:5a:27:14:15:da:49:
dd:2e:2a:eb:35:2a:05:f6:c4:98:d2:19:c5:1a:12:
2c:40:26:df:fe:94:1e:f0:b5:2e:bb:e7:89:42:5d:
07:2e:e5:0b:ef:37:8f:97:79:c3:2a:b4:29:46:2e:
14:9f:51:03:1d:d1:72:b1:bb:fe:db:45:bd:f1:a9:
53:16:90:98:62:5c:e1:ac:7d:46:0a:19:0f:99:a6:
60:24:b0:32:5c:e5:05:09:58:39:75:93:06:a4:c9:
80:e9:6b:f0:0a:40:6d:4a:33:ef:5a:c6:7c:8b:7c:
64:93:9e:0b:24:f4:34:71:80:c1:ae:ff:df:ff:d2:
21:59:37:1d:b4:e0:5a:8b:c4:a5:9b:91:12:74:60:
12:20:56:05:06:38:b8:06:4c:a3:b4:84:e2:f9:72:
23:98:18:bb:4c:cd:d1:92:57:7f:68:8a:b5:88:54:
00:9e:b5:a5:54:90:b1:e9:5a:ab:c6:33:23:be:86:
34:61:39:5f:30:91:90:30:95:aa:e0:ee:08:ee:be:
4f:63:a4:98:37:17:8e:39:b2:54:d1:c0:77:d7:5f:
fb:bf:1c:02:61:5f:cf:e6:6c:ff:f4:94:02:35:f4:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:78:B7:BA:54:54:CD:F7:35:B5:C2:67:18:87:42:A5:07:47:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8353ecd3-4ce4-38c0-b253-546f9fcfb463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.14.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c9:3d:10:8b:0b:52:5c:a6:e6:c9:e0:0f:41:f6:a1:79:99:
c1:8b:a6:b9:22:75:f4:36:e5:e9:1c:90:c6:8c:fb:64:5d:8d:
74:83:ba:62:92:f1:07:9a:18:b9:2d:94:27:13:c5:4c:eb:6d:
2f:63:1c:bf:f4:6a:4d:5b:1d:11:3b:31:80:55:56:22:20:a0:
0f:1f:f6:f8:0c:b0:59:fc:50:9b:9b:93:8d:00:37:00:83:92:
6e:fd:93:ca:1b:a1:3c:36:b1:4d:00:a8:4a:3a:08:b0:2c:32:
5a:1c:36:87:c6:7c:e7:b3:f2:1a:ac:8e:e3:3f:22:ec:34:59:
fc:02:69:5f:8d:15:55:da:0d:dd:fb:de:c3:0e:10:98:c3:0d:
f5:e6:c8:33:c2:55:e2:45:17:a5:6c:84:aa:7e:5e:46:bb:6f:
c1:ee:bd:94:40:ca:1b:a7:ab:62:1d:81:fc:cd:09:5f:bb:9d:
34:df:74:f6:8d:13:54:b7:f8:27:bc:89:aa:a0:58:11:42:b8:
ff:55:f0:bf:86:54:be:2f:00:56:2e:36:19:70:c1:aa:82:ef:
ab:b3:28:47:19:1f:7e:65:33:a6:e2:56:aa:9e:c0:c9:bd:92:
39:a3:c4:44:85:6b:5e:4e:26:0a:b9:a7:fb:1b:7f:71:b2:70:
ff:8f:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:41:15 2026 by rpki-client