
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0308e272-df49-333d-8286-d1287f431a38.roa
File: 0308e272-df49-333d-8286-d1287f431a38.roa (raw, json)
Hash identifier: FEzwsCreMAsbrR7AXQEGV3XGTiLKJEawRogyxvkuO9g=
Subject key identifier: 79:BF:43:ED:38:26:82:B3:F3:66:F9:2D:64:E9:4C:AE:AB:6F:C1:42
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA01583725400FC1DDD4A2480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0308e272-df49-333d-8286-d1287f431a38.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 22773
IP address blocks: 2600:8800:565c::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:83:72:54:00:fc:1d:dd:4a:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=71c5ae57-1c72-444f-9938-668554035d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:72:20:2a:83:a1:87:be:17:52:1f:b3:22:
d6:2c:4a:61:49:70:23:08:be:6e:3e:dc:23:f1:c0:
9b:29:a6:b4:49:c9:67:64:90:77:97:5f:0c:58:a7:
a0:26:ba:57:bf:96:7c:de:7b:93:c6:0f:88:ab:64:
4e:9d:bc:65:0d:5a:06:ab:31:73:29:35:26:70:9c:
07:bc:a7:62:74:41:b5:82:f1:4f:1d:e4:38:2f:43:
94:68:6f:34:0a:22:c7:6d:d6:16:47:59:41:0a:7f:
50:85:24:d3:66:c0:7e:42:34:c3:fd:32:2d:55:6c:
ca:5a:39:d2:3a:4e:cb:34:cd:79:c7:e8:34:16:d7:
a8:24:9c:29:af:ca:df:8f:8c:e6:08:a1:b1:b9:0a:
89:ef:20:34:d2:5d:52:1c:44:8f:7a:dd:4d:76:10:
e3:b7:c7:20:f2:95:5e:25:40:10:ea:8c:fa:4e:0e:
4e:30:38:a6:bd:e1:61:3e:b0:03:d1:c6:ca:76:cf:
79:ab:7b:13:d8:b2:6d:c3:53:e6:09:2a:e6:43:6b:
be:2a:41:45:37:21:cd:a5:50:84:75:a6:d4:3f:71:
cc:79:da:22:df:81:b7:89:f4:19:03:6c:7d:71:1e:
ba:6b:e2:51:7e:b4:12:52:f5:da:e5:32:fe:f3:e1:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:43:ED:38:26:82:B3:F3:66:F9:2D:64:E9:4C:AE:AB:6F:C1:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0308e272-df49-333d-8286-d1287f431a38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:565c::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:07:81:68:12:ee:e6:f0:32:16:00:f0:4c:89:ce:f0:0e:49:
99:74:6f:49:9a:e8:47:82:52:d9:43:ef:5c:08:e2:72:5a:2a:
3d:17:98:62:e7:8f:e9:7a:8f:88:e2:1e:08:73:c9:d2:9b:5b:
3a:43:8d:d9:17:11:85:41:55:92:e0:00:23:a9:5b:09:8f:95:
62:92:d3:ae:5b:bb:70:1c:60:3f:1f:78:e8:5b:6c:47:7f:5e:
de:f3:78:6f:dd:e5:94:90:3b:4d:e6:e2:a8:a0:7b:9a:ae:6c:
ae:60:3c:df:fa:a6:87:09:f5:aa:14:0b:6b:3e:d2:9b:c9:b5:
96:41:12:0f:06:d0:63:17:d0:6d:aa:d4:e8:22:e1:09:c1:01:
d3:9c:0a:a6:fc:58:32:ce:fd:e3:11:bd:46:27:a5:7a:ca:7d:
3f:13:67:8a:f0:c9:dd:e0:e5:19:81:53:e3:75:b4:eb:4d:84:
8f:d1:7c:0d:03:6a:70:af:46:5b:f2:0f:39:e4:ae:01:ab:5b:
15:fb:b5:97:e2:fb:17:af:e4:e9:88:6f:7a:f8:e8:b5:47:64:
48:39:4e:ae:ff:db:3c:63:08:0d:79:e5:6d:91:63:41:9d:a9:
90:a9:29:a8:aa:9e:e0:64:72:f4:ab:f4:9a:01:b7:6c:c8:5c:
97:48:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:23 2026 by rpki-client