
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a86814a8-7d0e-3875-bb81-362e43711ed9.roa
File: a86814a8-7d0e-3875-bb81-362e43711ed9.roa (raw, json)
Hash identifier: j9bNcXKaPnfcEX7xDVPAFXJRFk3XcCi2NOw/ZCBpmeI=
Subject key identifier: 31:AF:8E:2D:9C:6B:6A:0F:56:00:FE:BD:BD:25:E9:3A:D5:4C:83:CE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FC678801598289DC46C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a86814a8-7d0e-3875-bb81-362e43711ed9.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 98.179.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:c6:78:80:15:98:28:9d:c4:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=ba4b3266-b043-4e37-98f9-f4afdb91b12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:d8:a2:00:01:04:c3:9c:2d:ed:a3:1a:46:
a7:26:88:c3:7d:de:9a:de:79:2c:46:1b:41:84:2f:
eb:b6:f1:d3:59:21:03:9f:c9:df:01:36:ff:30:cc:
83:94:14:a0:cc:c2:62:7a:3c:33:41:00:6c:69:07:
7e:33:ce:8d:b7:70:39:71:10:52:d8:41:72:d7:6f:
c9:72:36:2a:7f:82:fa:35:84:ee:5d:ba:27:7a:9c:
76:b3:dd:68:66:4b:2d:b9:0f:6e:63:5e:11:e7:00:
0f:b1:d0:9c:59:84:82:ed:7c:b1:ac:17:e1:33:c3:
7f:0a:09:a9:b9:4b:50:1b:51:b3:74:ab:ba:8c:2d:
f5:53:40:2e:b9:7a:a7:da:3e:81:db:d7:f0:79:34:
0d:ca:7b:37:96:46:aa:bb:e7:00:c6:7b:3f:30:55:
a5:b4:c4:af:42:b9:a1:7b:bd:b1:40:02:e0:4a:81:
84:55:9b:5b:9a:39:ff:18:ac:e6:e0:17:fe:c9:f8:
1d:bc:34:f0:64:fe:fc:40:f0:fd:8a:ff:6f:35:91:
44:9f:69:f0:ad:a2:5d:0e:66:8b:db:5c:dc:83:8a:
f8:fc:0c:4b:1a:d6:01:4d:26:05:69:5d:0e:32:e3:
0c:76:c8:cc:c1:d7:84:78:a3:41:4f:05:bc:ce:bc:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:8E:2D:9C:6B:6A:0F:56:00:FE:BD:BD:25:E9:3A:D5:4C:83:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a86814a8-7d0e-3875-bb81-362e43711ed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.179.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c4:31:71:ec:e6:24:76:01:61:6d:d6:49:c2:b9:7d:80:1e:
86:45:0e:71:85:18:0e:19:2b:07:ac:99:6c:03:87:0d:55:ad:
89:67:cc:63:6e:81:9d:d1:eb:78:bd:53:77:73:20:c2:ef:a7:
2a:7c:27:fd:21:6e:59:40:a3:70:c4:fd:d9:81:dc:b9:bb:62:
d8:64:9c:ea:4f:b3:69:44:5a:31:86:81:1a:17:99:81:7f:17:
13:6a:9f:7d:ba:67:59:c1:ec:92:06:f6:e0:9a:5d:00:c5:01:
fa:c1:f2:92:f7:b6:c5:ae:b8:0b:62:13:d8:4d:1f:f3:4c:46:
a2:df:a2:54:5e:3e:96:51:bc:8b:46:08:18:f0:bc:ef:a4:b1:
3c:35:2e:92:b1:4b:06:60:f6:65:a6:d0:c4:da:d7:5d:04:fe:
d3:d8:21:39:bf:13:63:31:6c:04:b7:16:14:77:c1:63:29:10:
3c:28:78:0b:22:95:da:d5:fc:54:d6:f0:87:11:97:be:d4:91:
b4:1a:dc:99:00:69:10:7f:ec:2c:6b:f0:e5:66:e6:2f:7f:dd:
f3:ae:34:c9:cc:40:9e:83:d5:9b:97:55:20:f3:e8:e7:0b:46:
30:0a:04:10:f7:ad:2f:f2:e7:ad:f0:f9:34:10:09:ea:df:97:
52:b7:dc:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8Z4gBWYKJ3EbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
YmE0YjMyNjYtYjA0My00ZTM3LTk4ZjktZjRhZmRiOTFiMTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokHYogABBMOcLe2jGkanJojDfd6a3nksRhtB
hC/rtvHTWSEDn8nfATb/MMyDlBSgzMJiejwzQQBsaQd+M86Nt3A5cRBS2EFy12/J
cjYqf4L6NYTuXbonepx2s91oZkstuQ9uY14R5wAPsdCcWYSC7XyxrBfhM8N/Cgmp
uUtQG1GzdKu6jC31U0AuuXqn2j6B29fweTQNyns3lkaqu+cAxns/MFWltMSvQrmh
e72xQALgSoGEVZtbmjn/GKzm4Bf+yfgdvDTwZP78QPD9iv9vNZFEn2nwraJdDmaL
21zcg4r4/AxLGtYBTSYFaV0OMuMMdsjMwdeEeKNBTwW8zryXywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGvji2ca2oPVgD+vb0l6TrVTIPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTg2ODE0YTgtN2QwZS0z
ODc1LWJiODEtMzYyZTQzNzExZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrO0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/EMXHs5iR2AWFt1knCuX2AHoZFDnGFGA4ZKwesmWwDhw1VrYlnzGNu
gZ3R63i9U3dzIMLvpyp8J/0hbllAo3DE/dmB3Lm7YthknOpPs2lEWjGGgRoXmYF/
FxNqn326Z1nB7JIG9uCaXQDFAfrB8pL3tsWuuAtiE9hNH/NMRqLfolRePpZRvItG
CBjwvO+ksTw1LpKxSwZg9mWm0MTa110E/tPYITm/E2MxbAS3FhR3wWMpEDwoeAsi
ldrV/FTW8IcRl77UkbQa3JkAaRB/7Cxr8OVm5i9/3fOuNMnMQJ6D1ZuXVSDz6OcL
RjAKBBD3rS/y563w+TQQCerfl1K33CI=
-----END CERTIFICATE-----
Generated at Thu Mar 19 06:58:47 2026 by rpki-client