
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa
File: 237965a8-6421-3801-962f-f8d0e3a18681.roa (raw, json)
Hash identifier: 09ZON2UkP7dOI3AvTLUwbYeNROwUgKGet8XZ8480fZE=
Subject key identifier: 59:96:43:E1:66:05:72:B6:1C:6A:77:F0:14:71:10:B9:B7:B8:76:D5
Certificate issuer: /CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
Certificate serial: 010D0C9F4328584ED861D947336E10B17D0CB380
Authority key identifier: 84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 26239
IP address blocks: 208.90.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:d9:47:33:6e:10:b1:7d:0c:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=100ed277-97ab-4b04-92ee-0ca19c66c85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:a0:8e:59:a8:cd:e3:70:da:8d:94:55:1e:
ce:18:83:22:21:dd:eb:55:22:2f:88:f9:fd:51:e1:
e2:5b:ea:b6:79:a1:5d:4c:02:3b:dd:5a:33:05:f9:
47:25:b2:2f:64:67:8f:a8:96:85:42:33:f6:d9:de:
b7:8f:fe:29:bb:d1:07:a4:c8:f0:5d:6b:bc:4d:ed:
c1:37:17:d2:c4:99:31:45:ed:31:9b:41:60:e5:9e:
df:4a:79:73:ae:6e:e0:de:fc:09:00:a8:c1:97:56:
d8:40:6a:46:58:af:38:33:72:fa:c3:5e:71:78:81:
f3:88:e9:2f:7b:7c:2a:8d:06:1b:25:1c:39:57:ed:
4c:80:7a:3a:28:69:94:cc:78:1e:78:0e:66:0c:ef:
2d:27:e7:44:b2:5a:37:6c:2c:21:fe:18:36:53:96:
8e:9d:7c:87:05:b3:3e:a6:11:9c:7f:3e:7f:c0:e1:
18:68:14:b9:9f:f6:84:88:37:96:30:c1:5f:ac:33:
e8:a1:b5:f1:8d:da:88:e9:89:2f:1c:a2:5a:2d:e3:
3a:28:02:b9:03:f3:58:4f:11:66:8f:89:86:33:82:
fc:ab:d9:38:d6:6e:c8:74:74:17:9f:37:c1:e1:e6:
0d:e4:a4:b1:c7:70:e8:2e:a9:c0:1b:f7:22:cd:31:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:43:E1:66:05:72:B6:1C:6A:77:F0:14:71:10:B9:B7:B8:76:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl
X509v3 Authority Key Identifier:
keyid:84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.90.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:98:f6:42:2a:84:ca:41:da:9b:87:7e:0b:bf:5e:0a:c7:93:
07:80:cd:a8:96:e9:20:1c:97:8d:bb:6a:33:a3:4a:b4:1b:6f:
f1:43:5b:01:a7:b3:68:87:e3:a8:bd:5a:8b:20:58:38:0c:f8:
60:22:9b:14:75:b1:09:67:8b:86:46:85:f9:c5:63:ea:dd:3d:
69:20:ff:ee:8a:cf:26:de:a8:21:7e:ac:9d:7b:0a:4f:5f:f0:
36:43:16:3c:8c:46:15:5d:1d:3c:0b:4f:89:e7:f6:f7:3e:98:
39:83:22:c7:8b:58:44:5f:a3:7c:67:cf:28:80:ec:39:d1:ed:
6d:54:93:99:f8:06:5a:f5:8a:3a:28:4b:6a:31:3b:1c:36:0b:
42:f8:77:7c:36:f4:7a:45:4b:55:bc:07:c5:63:07:1f:10:30:
62:69:8d:12:09:90:da:6c:ad:a3:08:80:cd:a1:cf:15:a9:7c:
15:31:0e:62:70:03:da:33:60:85:40:ba:38:8f:6b:82:b5:b3:
70:9f:96:72:21:de:84:b2:1c:a1:95:17:35:b7:31:9f:cb:00:
a1:3b:18:f2:e7:5b:eb:af:dd:c7:70:a6:56:9c:71:a9:40:9b:
0c:19:09:e4:8f:81:1f:c6:00:95:de:09:31:3a:66:74:64:7c:
bd:cb:d1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:47 2026 by rpki-client