
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fcf5b7c-cd57-3481-bc7b-67293b783634.roa
File: 8fcf5b7c-cd57-3481-bc7b-67293b783634.roa (raw, json)
Hash identifier: SM7Ej8EeJqvfZpIf4BtpZ7iCea+k0lkFyIApQrnAvqE=
Subject key identifier: 57:16:D4:80:4A:37:0D:5D:BB:7A:50:A5:89:FE:0D:50:35:E0:1F:59
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D35A0180210C4FEA390AB4E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fcf5b7c-cd57-3481-bc7b-67293b783634.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.14.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:a0:18:02:10:c4:fe:a3:90:ab:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=4ca433a4-39a7-4e10-af67-a5b866728613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:a0:3c:12:6d:6f:1d:52:8e:d3:73:5a:22:
f6:0c:e8:d1:4a:d2:ae:a8:df:1d:92:7c:87:11:ad:
6c:79:18:c0:64:ca:55:b2:7d:c8:5c:9a:bf:f1:57:
60:8c:d6:c7:9f:07:57:8f:6b:78:20:5f:ba:2e:44:
4e:84:5d:24:2e:4e:5e:9a:ab:ba:00:79:f0:8e:32:
04:5e:b4:b6:d3:a4:69:09:b9:6a:c7:21:72:7f:1e:
34:4a:55:ce:9a:f1:a6:b5:2b:9c:a8:e1:52:9b:93:
e4:a7:9f:e0:e6:84:94:31:fb:13:8e:ff:6e:26:4b:
5c:13:0f:c0:e0:bd:18:9b:ec:52:3e:fa:11:f2:3b:
66:94:58:6c:6c:da:aa:4e:bc:f2:6e:7d:06:06:2c:
48:23:90:35:c8:04:9c:df:03:f8:e3:df:50:88:42:
e7:c1:51:ec:c9:fb:91:77:bd:04:dd:e5:3e:eb:06:
7d:56:5f:6f:28:fa:17:4c:11:ff:ac:f9:56:09:0c:
5c:6c:52:50:9f:e8:86:a0:b1:e1:a0:b8:30:d0:9c:
2e:04:15:04:22:a9:72:cb:04:62:9b:4c:6e:67:d6:
64:c3:f6:8e:72:9c:36:22:27:ba:66:3b:da:05:5d:
ab:05:79:bc:c5:7d:fb:7d:16:c9:36:ad:3b:44:6e:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:D4:80:4A:37:0D:5D:BB:7A:50:A5:89:FE:0D:50:35:E0:1F:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fcf5b7c-cd57-3481-bc7b-67293b783634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.14.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:16:65:12:f3:7c:84:60:97:2d:3a:e3:b9:23:cd:05:2b:b4:
ed:ff:5e:9c:cd:a2:d5:fe:60:57:99:77:26:a7:7c:52:04:41:
db:de:74:d7:0e:97:43:ba:2c:cc:12:5a:69:98:56:2c:1e:c9:
19:55:03:9e:21:fe:4a:e5:58:67:91:34:c1:ae:c4:39:5d:16:
a7:f2:61:0d:0a:9d:36:95:d9:ae:e8:c9:18:76:94:f2:02:a2:
10:50:03:44:3a:ad:fa:3c:d1:83:51:33:02:c2:bb:dd:37:66:
43:20:a8:92:7a:97:14:bd:71:b3:13:3e:73:cc:52:f4:e9:bb:
b7:64:e5:ff:ab:7d:64:9a:45:3d:0e:9c:3e:2b:3a:58:55:22:
6d:26:0b:7b:b1:d6:0f:7a:51:6f:2c:cb:c2:a9:37:07:f7:e8:
c2:10:f8:f7:01:62:87:bb:b9:b8:a6:19:5c:a0:bc:0c:f0:02:
1b:44:4c:f3:cf:73:4f:8a:3a:c7:9a:22:b3:0c:45:39:91:b9:
55:80:19:3b:53:a8:61:75:c4:8b:78:88:62:d6:32:f6:64:36:
c7:73:a1:3b:53:3a:20:e8:bc:52:a4:62:a4:25:71:4e:35:b9:
3f:d7:2e:33:49:c2:00:b9:1e:84:87:e6:19:25:70:d3:6e:b5:
88:00:1b:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBgCEMT+o5CrTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
NGNhNDMzYTQtMzlhNy00ZTEwLWFmNjctYTViODY2NzI4NjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho6gPBJtbx1SjtNzWiL2DOjRStKuqN8dknyH
Ea1seRjAZMpVsn3IXJq/8VdgjNbHnwdXj2t4IF+6LkROhF0kLk5emqu6AHnwjjIE
XrS206RpCblqxyFyfx40SlXOmvGmtSucqOFSm5Pkp5/g5oSUMfsTjv9uJktcEw/A
4L0Ym+xSPvoR8jtmlFhsbNqqTrzybn0GBixII5A1yASc3wP4499QiELnwVHsyfuR
d70E3eU+6wZ9Vl9vKPoXTBH/rPlWCQxcbFJQn+iGoLHhoLgw0JwuBBUEIqlyywRi
m0xuZ9Zkw/aOcpw2Iie6ZjvaBV2rBXm8xX37fRbJNq07RG6t6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcW1IBKNw1du3pQpYn+DVA14B9ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGZjZjViN2MtY2Q1Ny0z
NDgxLWJjN2ItNjcyOTNiNzgzNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA5qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYWZRLzfIRgly0647kjzQUrtO3/XpzNotX+YFeZdyanfFIEQdvedNcO
l0O6LMwSWmmYViweyRlVA54h/krlWGeRNMGuxDldFqfyYQ0KnTaV2a7oyRh2lPIC
ohBQA0Q6rfo80YNRMwLCu903ZkMgqJJ6lxS9cbMTPnPMUvTpu7dk5f+rfWSaRT0O
nD4rOlhVIm0mC3ux1g96UW8sy8KpNwf36MIQ+PcBYoe7ubimGVygvAzwAhtETPPP
c0+KOseaIrMMRTmRuVWAGTtTqGF1xIt4iGLWMvZkNsdzoTtTOiDovFKkYqQlcU41
uT/XLjNJwgC5HoSH5hklcNNutYgAG1s=
-----END CERTIFICATE-----
Generated at Sun Mar 22 06:59:37 2026 by rpki-client