
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b193a4bb-901a-3675-a95d-1a88782221ab.roa
File: b193a4bb-901a-3675-a95d-1a88782221ab.roa (raw, json)
Hash identifier: MXIMcXPFV/f/aYKMt+WtHgo7up4XBSzilzf9zisT+t4=
Subject key identifier: 04:43:FA:4C:05:96:85:6B:37:87:23:08:23:58:F5:24:63:06:95:7B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FD27F96284BCF9A9A2000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b193a4bb-901a-3675-a95d-1a88782221ab.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 68.8.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:d2:7f:96:28:4b:cf:9a:9a:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=68626c97-b049-4369-ba43-5b7a9789a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:b8:23:30:1a:c8:4b:d3:a5:46:07:bf:2a:
51:9f:57:2d:a0:07:23:03:d9:c3:11:f6:15:73:8c:
6b:d2:ce:a0:c4:17:38:c6:7f:fa:d1:b0:5c:fd:9a:
e7:91:40:5b:f7:a5:83:98:a0:64:4c:63:bf:10:58:
e1:c5:a8:b1:08:f8:ff:e8:0e:de:c0:74:9f:32:69:
54:72:c0:29:8a:d5:c6:91:ca:50:ca:fe:73:ce:1f:
91:14:c6:9e:2d:81:81:b1:1d:75:47:c0:43:10:e6:
48:fe:36:e7:f6:ac:c9:68:43:bf:3c:c6:8f:0e:de:
d3:df:9f:ad:c8:b1:62:15:ea:3f:02:20:7c:54:7e:
f9:7e:f2:e5:7d:0e:32:af:46:a9:cc:b5:19:ff:76:
d9:32:8d:34:69:99:fd:a3:b1:c9:a6:28:e6:1e:f8:
da:fd:d3:e6:a8:d4:95:33:0e:b7:da:e4:33:19:e0:
03:8b:91:8e:4a:ab:b1:67:fe:b0:69:30:05:da:c9:
53:ce:db:9a:e1:f4:33:96:46:81:06:22:b3:30:ba:
82:67:15:32:8f:9e:98:3e:bc:05:a4:df:fa:bb:1d:
7c:31:85:e2:2b:90:ba:fe:51:a7:6e:f3:d8:70:04:
b4:69:b1:97:ba:ab:0e:4e:ed:41:9a:92:5d:82:33:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:FA:4C:05:96:85:6B:37:87:23:08:23:58:F5:24:63:06:95:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b193a4bb-901a-3675-a95d-1a88782221ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.8.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:e9:8f:02:53:53:21:b4:4c:2a:84:80:94:1e:7f:04:59:a1:
36:b3:ae:7e:90:69:ae:1f:90:ed:4f:00:80:29:02:a7:f8:f3:
23:1a:c3:10:24:ae:b6:69:c3:9a:33:6d:18:5d:02:6a:66:f4:
c3:96:42:81:25:0c:8c:77:13:ec:42:28:97:1b:24:3f:03:65:
03:7e:b2:25:f3:6c:ae:f5:c5:cb:97:79:2a:9a:5b:bd:f2:43:
fe:fb:ed:2a:5e:52:7f:3d:d0:7a:38:dc:b1:df:c0:7c:c0:ef:
97:f3:1a:07:8f:12:95:a4:ad:80:40:ff:77:39:b0:7a:56:22:
1e:70:d1:86:f9:c3:21:06:b0:46:a9:e4:96:d4:62:49:8b:44:
7f:6e:3e:9c:84:1e:34:6f:f0:d0:99:8f:71:a6:2c:b0:9f:a9:
15:02:46:c3:0d:3c:fb:a0:28:04:d2:2a:e9:6b:69:1a:26:c9:
2c:bf:45:7a:9b:55:bd:88:2b:86:12:e6:d1:ba:e0:13:5d:39:
08:37:cf:a2:29:fa:b5:87:53:42:ef:69:2d:32:26:48:f2:4d:
c8:36:aa:fe:7e:2a:05:27:0b:7f:42:4e:18:45:60:da:92:b4:
f2:b7:29:1a:7e:3e:52:63:9d:f7:e3:73:33:a5:01:c9:78:3d:
d1:57:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:39:26 2026 by rpki-client