
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/002ebadc-81b3-3258-8da7-84bbbf668f0c.roa
File: 002ebadc-81b3-3258-8da7-84bbbf668f0c.roa (raw, json)
Hash identifier: xYsl4FmhV1lC8A3slAKsRM5W8HQShtKxZ7kErofNlYQ=
Subject key identifier: 91:F0:9F:18:80:49:9B:F1:CD:D3:44:34:93:8F:84:73:24:0C:87:11
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E15E479EDA01E3E885C55C080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/002ebadc-81b3-3258-8da7-84bbbf668f0c.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 22773
IP address blocks: 70.172.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:79:ed:a0:1e:3e:88:5c:55:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=2f3616c2-3826-4c9b-9174-6ce87a55ba2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:a9:c0:68:c4:71:1a:ac:ed:6f:fd:f2:1c:
c8:aa:2a:b7:58:e0:1f:0d:a0:fe:63:69:b0:b9:9a:
6b:59:93:5b:df:29:8f:a8:23:31:2e:d1:c0:7e:41:
8f:64:11:2d:64:c7:64:83:60:52:49:98:f3:4c:f5:
f4:8c:0a:c2:6e:39:e0:6e:79:5a:27:69:14:3e:00:
80:36:d1:6b:c4:7c:84:53:44:07:5a:ea:52:63:2a:
9e:a7:86:bb:e6:2e:1f:d9:02:9f:cf:ee:c7:70:cc:
69:b9:0e:e1:7f:f5:43:6e:86:74:5f:18:82:c4:a0:
3f:cc:e7:cd:1d:8e:a9:46:2e:54:24:27:c5:c9:2c:
f1:40:85:f3:c1:10:ad:ce:82:7f:69:7c:d2:6f:f4:
80:fa:04:13:ae:ad:79:cf:c7:ab:b5:ef:5f:d3:69:
28:8d:b4:68:c0:c4:8a:54:88:df:9f:43:f9:c5:d1:
25:72:9c:a5:c8:9b:43:7a:9b:d8:db:d1:5d:b3:4d:
48:8e:1b:8b:e8:ce:83:61:96:4a:5c:d2:a8:c6:49:
25:25:ce:be:55:61:f1:fe:01:2e:57:5e:f8:f2:b1:
42:14:d7:a1:40:22:20:d3:13:88:eb:69:90:42:87:
82:64:75:f2:3b:eb:ff:bc:de:16:c7:57:8d:a6:83:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:9F:18:80:49:9B:F1:CD:D3:44:34:93:8F:84:73:24:0C:87:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/002ebadc-81b3-3258-8da7-84bbbf668f0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:d5:50:aa:8a:8e:85:f5:fe:7e:1a:28:bf:63:37:5e:34:78:
d5:f1:22:1f:8c:96:f2:61:ae:a3:e4:0b:11:cf:36:93:4e:9e:
81:f7:09:f1:08:81:0d:ff:89:35:8e:bc:59:ef:e7:ef:dc:45:
bf:1b:c3:77:58:91:49:6b:b9:56:03:70:14:c1:10:32:ad:53:
71:4c:28:9f:1c:1b:60:9c:97:de:bd:43:4f:2a:93:33:6d:6e:
70:3a:61:5d:07:68:6c:18:bd:08:2b:d5:d7:a6:10:fd:a8:1d:
84:5e:53:c6:e3:de:61:f8:8d:5b:64:bf:37:5f:77:c2:62:41:
6e:12:79:04:f8:96:66:80:94:9a:3e:f1:7e:c1:e4:91:6a:48:
cc:61:ae:87:b3:f3:45:4c:6e:b2:79:52:43:09:4a:18:2d:8d:
4f:e2:53:4a:ed:d1:7d:95:03:4e:53:6b:e3:63:e5:92:c1:b5:
15:36:b8:f2:a4:87:75:f1:18:ad:58:35:cf:35:bc:5d:b7:81:
7f:37:a1:8f:eb:7c:06:06:7c:34:d1:ba:af:24:61:ed:3c:9c:
72:d3:c3:79:e3:cc:fd:a3:fb:7f:4b:16:fe:25:33:35:5c:9b:
08:7a:35:ef:85:56:43:be:c2:84:38:73:59:9a:00:9c:d9:95:
1d:58:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:57 2026 by rpki-client