
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c64ed17a-816e-3d1c-8ef4-27735264d328.roa
File: c64ed17a-816e-3d1c-8ef4-27735264d328.roa (raw, json)
Hash identifier: DI0st6SCr4FR7IBqv4I7e3uaxADp+scftnMA90fSU5U=
Subject key identifier: 41:52:D3:60:CC:C1:76:64:00:6A:CC:40:45:76:91:35:DB:D5:9B:E0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FA6BB72A974779DFC6FE0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c64ed17a-816e-3d1c-8ef4-27735264d328.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 24.253.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:a6:bb:72:a9:74:77:9d:fc:6f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=752aa729-4ca7-4f09-8135-aa3e67f87ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:a9:db:e2:83:b0:16:62:0a:9f:64:5e:e8:
5f:b3:c6:72:49:45:cb:55:fd:16:d5:43:8e:d8:e7:
19:f9:88:cb:5f:49:bb:78:81:09:54:67:91:7a:47:
88:a2:d8:ee:64:b9:c7:6c:2b:ea:df:3c:44:62:04:
45:60:55:dd:be:e4:d0:ef:c3:df:30:36:7e:41:ac:
be:bb:eb:22:20:7b:fd:6c:21:2e:46:0c:14:11:8f:
95:91:ba:a9:eb:a2:35:f3:9b:38:67:ba:57:18:26:
9c:36:6f:19:c3:c5:07:7f:01:00:e9:f1:58:75:7a:
dd:0a:58:bf:2e:9d:9f:c0:c1:a7:cf:01:e6:37:0f:
1f:8b:f0:22:69:cd:b3:bd:83:74:25:9f:a9:45:8f:
58:cd:5c:15:fe:a9:fc:31:61:ad:2a:5e:46:e2:2e:
f8:2d:9d:10:f3:76:84:19:04:f1:42:a5:ac:24:71:
3a:11:89:98:38:34:a2:7d:c2:79:f1:f1:9b:8d:17:
2a:8f:48:66:e7:60:f1:da:d9:03:b6:65:70:96:92:
c6:5b:d7:6f:d1:1c:06:f9:9b:c5:9e:92:ed:55:f9:
f5:40:f2:65:54:58:e4:e7:aa:80:64:f6:b8:ce:a3:
e7:bf:c0:cd:cb:83:01:d7:b8:81:48:df:66:5f:71:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:52:D3:60:CC:C1:76:64:00:6A:CC:40:45:76:91:35:DB:D5:9B:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c64ed17a-816e-3d1c-8ef4-27735264d328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.253.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c6:25:1b:1a:1f:19:a2:71:0c:d4:e5:47:03:dd:a2:57:45:
c4:2c:54:ce:e7:80:ab:a7:f3:ed:9b:70:9b:43:6b:31:d7:f5:
44:eb:2e:25:f1:66:bd:64:a9:21:a5:f8:10:4f:6a:96:d4:0c:
76:59:eb:a4:be:55:85:af:a7:96:d7:87:47:20:69:28:17:98:
9e:f0:bb:52:f1:5b:b1:8c:80:2b:38:b6:da:20:74:82:8a:67:
32:6d:64:e1:16:f6:19:f5:e2:69:80:e2:ac:58:32:94:1e:4a:
35:2b:66:b4:98:f9:60:d9:39:f5:47:79:25:8f:cd:47:e3:c2:
57:15:a4:76:e3:a6:29:f8:c0:c4:aa:f7:cb:0f:28:95:d1:8b:
7d:9b:bb:b6:71:97:fe:be:49:ba:bc:44:ac:0d:4d:bc:b7:7c:
a8:80:46:90:99:f1:23:8f:50:db:da:b7:d9:af:01:38:f8:88:
5e:06:d9:87:0e:f1:fb:a6:65:e8:4e:df:8b:f4:25:9a:23:89:
87:1d:da:b6:9e:64:7c:91:a3:37:16:31:0d:1c:ca:12:81:59:
bc:f5:7e:63:c7:bb:40:45:76:6f:26:a8:f3:71:19:77:34:50:
62:10:bd:ea:69:8c:36:2e:1f:61:0e:55:b4:a5:0c:8f:ac:54:
09:cd:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:15:37 2026 by rpki-client