
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04cd4cb7-c846-3735-8a76-55e0fef5f647.roa
File: 04cd4cb7-c846-3735-8a76-55e0fef5f647.roa (raw, json)
Hash identifier: UJnooO1om+zpjfEnDd9ddZaeBH9aOqpaTZytAsQ6Wts=
Subject key identifier: 63:B2:CE:D5:30:71:47:B5:8E:1E:1F:7A:CC:E3:0E:1A:99:AB:E5:BB
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9EB0171B304F387763C8A909
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04cd4cb7-c846-3735-8a76-55e0fef5f647.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 22773
IP address blocks: 68.108.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:b0:17:1b:30:4f:38:77:63:c8:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=b0350c8b-4e37-43c1-b921-556e939b7a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:2d:e5:15:b9:22:69:6c:e2:fc:0b:29:4d:
cb:c0:0b:80:c5:ba:e6:a0:0b:0a:ae:51:d9:d3:18:
1a:6a:4e:2e:33:a6:28:4f:47:f7:b3:3f:82:59:14:
45:fe:3d:3b:4e:c1:32:15:f5:0b:63:50:be:ba:67:
d2:79:96:9b:9a:f1:0a:60:4d:7b:8a:96:cd:81:5f:
3b:11:f3:e1:30:d2:29:c6:78:4e:79:59:79:46:a3:
da:cd:1c:68:13:e5:18:4f:19:5f:a9:9e:81:f7:14:
cd:80:a9:06:77:29:1d:49:21:19:84:ea:72:09:8c:
8f:46:c9:79:9d:2e:74:d5:19:21:d0:a4:82:a6:1a:
6d:62:10:8e:31:f1:9f:4f:db:1f:12:e1:57:ae:af:
f0:80:5b:6d:1a:2a:69:04:e3:b4:3f:ae:25:36:db:
5e:8f:bd:5c:a7:af:2a:59:9a:bc:4e:f0:d1:ae:2b:
b9:ba:3e:73:9a:d5:d8:2a:e7:de:67:e6:c6:23:b6:
a3:66:6e:0e:d7:7a:ec:49:35:b0:f8:27:e2:2e:29:
22:62:ea:65:a8:e9:df:fb:c8:44:fd:36:7b:53:0b:
46:13:a0:35:cc:79:62:c5:6c:a6:8c:3d:16:ea:a1:
80:e6:ad:ad:b9:50:d5:52:ec:23:b2:18:62:cc:a4:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:CE:D5:30:71:47:B5:8E:1E:1F:7A:CC:E3:0E:1A:99:AB:E5:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04cd4cb7-c846-3735-8a76-55e0fef5f647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:7d:86:50:97:65:97:b9:7d:85:10:3d:61:c1:63:79:64:d7:
a3:4e:ef:aa:18:31:ee:04:06:b1:54:c7:83:21:f6:18:a5:3b:
07:ea:34:29:85:bf:71:b6:83:59:8f:77:04:7c:8c:98:ff:06:
9a:ee:5e:b4:cc:3b:29:5a:21:f9:94:0d:82:70:f2:2b:67:53:
f7:57:ea:d5:f0:68:19:e0:de:bd:aa:6f:80:1b:bc:a1:29:c2:
3e:87:7b:1b:8d:83:b5:61:41:37:07:11:98:51:2f:40:13:eb:
f3:8e:16:f1:4b:de:0e:44:e6:14:41:94:e5:bf:42:27:04:12:
a3:c1:75:bb:ad:ac:e7:f1:21:56:06:34:54:b9:36:25:48:0f:
e9:1c:96:92:56:8d:a7:39:ef:be:86:23:ae:3b:bb:fa:a1:ce:
6f:6e:91:f5:73:89:d4:8a:0c:a7:b4:57:3e:72:5a:74:45:3d:
da:88:32:35:0c:ca:ab:52:c8:1a:29:e6:f3:29:0a:c9:b5:af:
1f:40:0f:c5:7c:42:b9:1b:7f:23:ff:26:80:df:26:1e:ff:29:
59:90:34:01:d1:b5:32:20:a6:20:61:4c:f4:3f:7d:0e:e8:a4:
08:51:f0:37:76:7d:e6:c2:be:23:9e:e9:d6:64:89:ec:eb:2a:
0d:3e:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:36 2026 by rpki-client