
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8dc31986-fcfa-368d-8407-f7813227d429.roa
File: 8dc31986-fcfa-368d-8407-f7813227d429.roa (raw, json)
Hash identifier: Dy4x7wybzmxnP68MTMeEtmcbWomUdJhigyK9poQI45w=
Subject key identifier: 8B:06:07:E3:02:E5:EA:7C:2D:B5:B1:4C:E1:34:79:FE:EA:B1:4C:4E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FB9E1AD4E7B67122B8640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8dc31986-fcfa-368d-8407-f7813227d429.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 72.221.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:b9:e1:ad:4e:7b:67:12:2b:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=fe4d73b6-f40f-4279-8ecf-2d4012eea873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:aa:e7:bd:64:64:b2:88:f9:0a:30:fe:ef:
ac:ca:49:68:a9:db:f0:2a:38:d3:53:f3:2c:12:07:
dc:0e:a6:32:01:87:49:3a:a5:60:4f:3f:74:ea:b9:
eb:de:fd:70:7f:33:ff:c3:90:56:28:ad:c2:3e:dd:
37:1c:db:22:25:ba:e7:c0:b8:98:e3:f2:c2:1e:9e:
ca:18:7e:f0:a8:58:ff:e2:4b:71:3f:21:05:2e:1d:
a7:24:17:b1:90:ea:b5:41:e2:21:2d:aa:41:df:73:
4f:90:e8:16:4f:63:56:58:76:b4:81:e0:dc:a0:26:
40:07:91:8c:8f:da:96:8d:09:1f:2d:b6:cf:d5:8a:
cf:71:7e:ab:d1:b6:32:1b:be:e9:2a:50:28:62:77:
8c:94:de:7a:66:d0:b9:e7:e8:28:8b:fd:b6:d3:38:
47:02:78:a9:c3:47:21:b9:9c:e1:0f:b4:09:26:b6:
22:74:fb:d9:0e:80:a9:0e:0c:1e:9f:65:4b:f8:49:
25:31:ba:fc:fe:c0:44:86:97:38:96:8b:2d:74:85:
64:23:0a:f7:57:80:9d:73:52:50:aa:c9:11:90:df:
61:4f:2f:2c:f4:e1:03:a0:7e:57:97:c1:26:24:94:
b5:51:12:d7:95:e5:d0:db:5d:a8:d6:5b:06:ea:af:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:07:E3:02:E5:EA:7C:2D:B5:B1:4C:E1:34:79:FE:EA:B1:4C:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8dc31986-fcfa-368d-8407-f7813227d429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.221.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d8:7f:6c:21:60:c3:3b:2e:69:28:0a:91:6d:d5:27:51:75:
a7:aa:4f:86:9d:e0:51:53:7c:8a:39:43:47:25:39:28:e6:6a:
66:26:59:a6:39:af:c0:c1:9b:14:00:4e:ae:27:72:fa:83:91:
f7:71:f1:83:59:aa:f2:f0:45:18:54:f2:9f:c1:3d:71:6d:44:
f9:aa:04:8c:d9:52:df:60:7a:71:7e:6a:46:ee:54:0e:b4:c4:
ca:4c:0d:0d:6f:28:3f:08:c7:a1:11:12:71:87:e6:34:84:d2:
33:46:dc:af:1e:cf:90:bb:5b:13:b5:94:d6:22:35:1d:d6:80:
15:4d:fc:5b:ad:d4:c7:d7:6c:36:af:2f:52:35:e7:9c:c7:4c:
db:1e:d3:4f:99:ac:67:27:5c:09:39:37:58:5f:e3:20:2d:fb:
80:0e:38:71:1d:6e:a7:47:83:d6:18:e3:0a:d7:10:81:38:4a:
15:ce:27:e7:97:cc:ea:84:71:69:65:f3:7e:66:82:5c:ae:a5:
db:10:17:a0:8f:15:a9:5d:6a:52:ea:c3:cf:27:67:26:04:81:
f1:7d:25:99:d3:9a:6d:6e:e2:56:68:ae:07:db:67:1f:9a:ca:
a4:4f:20:74:f0:0a:83:60:41:32:8f:31:fe:e9:b6:72:69:7d:
b4:1c:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:46:21 2026 by rpki-client