
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be9daf68-671a-3695-9104-47fa37c38839.roa
File: be9daf68-671a-3695-9104-47fa37c38839.roa (raw, json)
Hash identifier: xbFmuDsduDQ5EBOpkQMpdnK7tdq+gZAtnFrGncIPtUU=
Subject key identifier: 97:4C:53:C1:E4:77:76:61:26:2F:8A:51:3C:8A:82:C7:0D:43:C5:C9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FE7F1790BC6F5ED90AD00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be9daf68-671a-3695-9104-47fa37c38839.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 98.176.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:e7:f1:79:0b:c6:f5:ed:90:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=9f57d841-09c6-49a7-84a3-db599013ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:2f:10:f8:82:a8:94:3a:9d:95:9c:2e:4a:
3b:cc:c2:7b:fe:d4:66:a7:84:7b:00:c2:da:bb:39:
68:3f:b3:c9:3d:13:6b:7f:1b:34:64:2a:58:1e:5b:
1f:81:22:9a:7b:97:74:27:ad:29:3f:a9:9a:33:0f:
f0:3e:e2:c7:15:7a:9c:d6:6c:26:89:84:40:d7:cc:
c5:ad:83:5e:24:1f:97:2a:11:bf:ae:06:67:7a:e4:
01:ad:c5:61:1c:ee:0d:99:84:3c:67:3e:e7:8a:81:
d4:f7:7e:33:2f:d4:e7:57:c9:15:e9:66:95:3d:f6:
f1:e2:25:03:4d:ea:50:c6:a5:82:0b:5a:7f:39:92:
10:83:eb:bf:37:f5:80:b9:bf:ff:ff:d8:9d:1e:84:
fc:d2:d0:79:e6:b1:be:99:a2:ed:d9:3a:b6:b6:75:
2c:96:2c:08:0c:71:fc:74:bd:c0:5e:af:7e:66:21:
db:2c:b5:8c:7d:2d:79:51:e4:9f:69:51:59:26:56:
c4:72:85:b7:d4:f3:e9:d9:23:99:51:88:99:27:dd:
21:6d:4f:83:5d:6c:42:13:a4:18:7b:f8:6d:8a:06:
4a:2a:4c:af:15:46:49:c9:70:d3:89:3a:d7:b3:6e:
f2:cc:e9:57:10:90:46:7d:d3:ba:e5:32:ff:27:a6:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:53:C1:E4:77:76:61:26:2F:8A:51:3C:8A:82:C7:0D:43:C5:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be9daf68-671a-3695-9104-47fa37c38839.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.176.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:26:aa:82:38:2c:95:0b:35:35:17:94:60:18:7e:35:7a:2e:
f3:92:f6:99:8e:70:7f:ff:08:81:1d:3f:0c:16:f0:52:5c:55:
97:2b:58:55:10:cf:6b:c0:14:b9:e9:fd:25:b4:e1:f8:62:35:
3b:9f:9e:c3:1a:0a:4c:8a:18:fe:a4:ab:65:c4:ba:d2:86:7b:
db:c2:d2:27:67:be:cc:36:f7:22:da:d8:a8:e0:69:b1:d5:2b:
e7:19:aa:30:6a:f4:9d:39:ab:cb:98:fc:43:45:21:17:48:a8:
1a:60:30:b5:77:a7:87:ad:dc:e7:f6:d6:ec:2f:0e:57:e5:dc:
15:8c:13:88:ee:1f:4c:49:a5:be:79:88:c6:35:f6:b5:2e:6f:
70:be:7e:28:b2:51:2e:86:f2:4b:5d:ab:89:11:f0:6b:02:8e:
39:c4:57:bc:dd:6a:b0:9c:a4:30:4d:7a:f0:fe:e6:6c:e8:a9:
b4:17:61:f3:9e:c2:4f:02:89:e6:b1:7c:ab:72:fe:17:9f:8b:
e4:1b:f9:37:c9:3e:6c:4e:6e:a3:72:b9:ee:54:b1:09:c4:16:
ef:db:de:fd:79:dd:f6:f2:ac:9b:7f:bc:f7:04:70:c0:22:c3:
42:7d:92:54:d2:71:d3:44:82:c6:80:56:cd:4a:8d:7a:1f:6d:
57:23:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:44:17 2026 by rpki-client