
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb08e577-0b8e-3ecd-9144-1b574be1067b.roa
File: eb08e577-0b8e-3ecd-9144-1b574be1067b.roa (raw, json)
Hash identifier: nRVWYPXEsVrFUvWhzpH8G0wKxwjMPKCia3Kf/u3pEBc=
Subject key identifier: F7:44:79:F3:41:73:52:82:62:77:00:87:98:87:0B:35:85:7B:4E:62
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D359FE9466C734FC090F71740
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb08e577-0b8e-3ecd-9144-1b574be1067b.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 22773
IP address blocks: 72.197.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:e9:46:6c:73:4f:c0:90:f7:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=0da30ac7-4030-4848-9cb7-80f976c77dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:94:5c:4b:2b:a0:45:13:d4:eb:6d:8d:14:
ce:85:4b:bc:28:f0:a8:b1:fc:f8:6e:a2:f2:d8:e7:
d5:9d:56:e3:b2:ca:2a:5b:b9:18:dd:68:9b:6a:fc:
d6:d0:8d:81:31:39:51:a8:db:3d:81:43:a5:18:07:
19:31:87:e7:54:1c:07:5b:94:ba:d6:bc:4f:72:b5:
b4:56:ad:6a:7c:bd:41:a5:c8:f2:29:68:38:1a:b1:
83:37:5d:f9:91:17:cf:3d:ea:5f:b2:f9:57:52:5a:
a6:0c:c5:8c:4d:a5:3f:50:44:ce:ee:45:e4:a5:52:
d3:b8:da:12:b6:89:c9:7f:f2:97:da:a4:f2:9d:3e:
e9:74:c0:4b:01:c4:96:28:ce:4c:24:46:55:0f:f5:
71:04:40:48:14:88:d7:31:e9:84:09:f3:ed:0e:3d:
a7:dc:e1:8f:f1:03:ea:33:69:55:fd:f7:32:24:74:
4a:0e:20:0a:b3:79:c7:7f:97:28:9d:4f:60:4a:83:
84:87:df:b2:4c:f1:0c:3d:4e:b0:e1:f2:c3:75:9f:
24:36:f0:4d:04:5f:8d:ae:87:4f:51:11:65:8b:7e:
04:5d:13:4a:ad:02:97:be:88:70:22:11:f0:f9:a9:
b6:94:d2:4f:a8:84:a6:b9:61:f2:32:87:39:d0:a8:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:79:F3:41:73:52:82:62:77:00:87:98:87:0B:35:85:7B:4E:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb08e577-0b8e-3ecd-9144-1b574be1067b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.197.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:6c:54:fc:7f:3e:79:59:09:b8:df:98:57:6f:53:a0:db:24:
39:54:07:06:9d:98:86:76:e7:81:8b:19:8e:3b:6b:41:d0:c6:
28:0f:83:2c:14:f3:7b:0d:af:a5:b6:0d:fd:d1:8a:eb:9b:dd:
f8:eb:eb:0f:5f:a2:65:96:27:c5:af:b7:4e:f2:fc:32:39:c4:
a9:07:89:6e:d6:f7:c8:03:ab:42:2b:53:6f:7b:27:5a:6b:e2:
03:6e:4c:d3:bf:ac:86:d7:f0:d0:3a:15:3c:19:f8:97:87:fb:
c1:ac:00:27:ab:64:c0:63:b5:a3:38:7c:63:fd:95:75:f4:69:
0b:59:c2:ae:25:7d:90:36:60:60:51:51:e9:93:17:56:09:fd:
84:38:73:ab:35:1f:05:f7:44:a2:d6:ed:26:05:da:d9:6f:68:
a5:d0:71:15:92:38:f2:b3:12:76:90:81:41:e0:b6:b6:6a:0e:
bd:ea:cb:d7:88:9b:21:74:3d:d0:77:0f:20:31:79:55:07:c0:
48:52:9c:38:e1:92:60:49:1d:ae:4a:ca:42:6e:c5:6d:a6:11:
a4:b2:d7:51:22:92:ee:6d:3e:30:1e:d2:50:8b:0a:d8:92:d7:
19:86:1d:6d:9d:54:02:89:48:f2:aa:89:92:71:bf:cd:dc:22:
88:17:5c:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+lGbHNPwJD3F0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
MGRhMzBhYzctNDAzMC00ODQ4LTljYjctODBmOTc2Yzc3ZGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRWUXEsroEUT1OttjRTOhUu8KPCosfz4bqLy
2OfVnVbjssoqW7kY3WibavzW0I2BMTlRqNs9gUOlGAcZMYfnVBwHW5S61rxPcrW0
Vq1qfL1BpcjyKWg4GrGDN135kRfPPepfsvlXUlqmDMWMTaU/UETO7kXkpVLTuNoS
tonJf/KX2qTynT7pdMBLAcSWKM5MJEZVD/VxBEBIFIjXMemECfPtDj2n3OGP8QPq
M2lV/fcyJHRKDiAKs3nHf5conU9gSoOEh9+yTPEMPU6w4fLDdZ8kNvBNBF+NrodP
URFli34EXRNKrQKXvohwIhHw+am2lNJPqISmuWHyMoc50Kj0EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdEefNBc1KCYncAh5iHCzWFe05iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWIwOGU1NzctMGI4ZS0z
ZWNkLTkxNDQtMWI1NzRiZTEwNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMWUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1sVPx/PnlZCbjfmFdvU6DbJDlUBwadmIZ254GLGY47a0HQxigPgywU
83sNr6W2Df3Riuub3fjr6w9fomWWJ8Wvt07y/DI5xKkHiW7W98gDq0IrU297J1pr
4gNuTNO/rIbX8NA6FTwZ+JeH+8GsACerZMBjtaM4fGP9lXX0aQtZwq4lfZA2YGBR
UemTF1YJ/YQ4c6s1HwX3RKLW7SYF2tlvaKXQcRWSOPKzEnaQgUHgtrZqDr3qy9eI
myF0PdB3DyAxeVUHwEhSnDjhkmBJHa5KykJuxW2mEaSy11Eiku5tPjAe0lCLCtiS
1xmGHW2dVAKJSPKqiZJxv83cIogXXMM=
-----END CERTIFICATE-----
Generated at Thu Mar 19 06:56:40 2026 by rpki-client