
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06aa6977-cf9e-38d1-881b-cf380f2ce818.roa
File: 06aa6977-cf9e-38d1-881b-cf380f2ce818.roa (raw, json)
Hash identifier: gFgyJO/wv9PjSnTOEI3+V7FQ+wbsyEFMJsOMygXp138=
Subject key identifier: B4:C8:57:2D:1B:41:13:72:9F:66:36:EB:73:AC:60:7E:EE:D6:FF:75
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E15E483643AC48FD59802A220
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06aa6977-cf9e-38d1-881b-cf380f2ce818.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 22773
IP address blocks: 68.107.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:83:64:3a:c4:8f:d5:98:02:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=2bfd2df7-ec19-476b-96e5-d81929fdd006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:dd:c9:a0:51:83:be:21:48:35:ea:70:fd:
17:03:69:5b:b0:e5:ef:7f:34:c5:4f:b1:9f:a1:de:
d9:6f:b7:1c:af:8c:4c:70:d9:f1:fc:90:96:b7:1c:
19:9f:07:a3:6e:68:5d:6f:64:a7:44:1b:0b:d8:45:
f7:d1:d6:1a:ac:e4:68:f0:21:2b:82:2c:3b:b8:84:
7a:42:47:f3:ef:81:01:1b:4d:74:0f:9a:f7:c7:b7:
7f:e1:c1:54:38:c5:ed:bd:95:16:51:21:88:03:11:
9d:8b:16:b2:82:1c:ad:f2:b5:45:35:f6:0e:b4:51:
ee:d4:35:34:93:06:c1:f2:c4:ff:76:c9:90:50:c7:
e9:84:69:91:ce:a1:9a:f3:2d:10:f6:42:11:7c:c0:
ae:98:de:2c:ab:08:9b:22:e8:78:0e:9a:d6:46:52:
b5:d4:36:37:6e:e3:a2:6c:55:fd:7c:d7:b4:c8:11:
8a:7e:06:52:8b:0e:63:2a:13:fb:7b:16:b6:e0:a0:
a9:83:11:65:b9:50:fe:dd:06:32:d1:12:f5:6e:9f:
06:e3:c0:6c:31:4b:39:81:b4:e8:ea:be:35:47:b3:
46:1a:f1:b3:ef:c8:fb:c7:89:a4:98:e7:17:09:25:
9f:7e:be:cd:05:16:ea:e9:6f:c3:a1:d6:d4:7d:ed:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:57:2D:1B:41:13:72:9F:66:36:EB:73:AC:60:7E:EE:D6:FF:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06aa6977-cf9e-38d1-881b-cf380f2ce818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.107.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:60:50:38:9b:95:3e:7b:42:8f:fe:36:8b:5e:4b:6a:0d:f7:
49:ef:be:f2:c0:c3:3f:76:91:f9:d1:90:0a:21:69:12:e9:01:
11:df:38:ec:08:03:7c:fa:ba:58:ec:92:13:4d:94:bb:b6:89:
df:a2:26:e3:6e:52:e3:18:a6:db:ca:cb:39:82:f9:7c:8c:ab:
72:7a:9e:38:b4:c0:8b:90:05:02:e1:14:c0:bc:dc:38:fb:5a:
bd:0a:d7:aa:98:4d:77:07:bf:85:73:f3:23:a2:64:be:94:2c:
6b:80:c2:6b:b2:e4:97:63:8e:b2:23:53:b7:64:a1:a4:c7:73:
d2:b2:3a:63:cb:1a:ac:f4:dc:0c:7f:10:dd:2f:d3:47:23:6a:
ab:7e:2c:01:f1:af:fa:73:64:18:c6:d2:b0:b1:40:1a:53:97:
eb:62:00:84:0e:41:0c:3f:c0:e3:a2:34:95:d2:19:02:22:c5:
84:0f:0f:2e:39:10:37:2c:fc:35:60:b0:ff:5b:66:b5:0d:8c:
46:9f:98:83:cb:5f:91:9b:3e:7c:28:4d:d4:9c:38:27:9f:65:
5c:5a:72:e6:bd:c5:90:b6:46:0f:df:81:7f:d1:9f:fb:35:81:
9a:08:69:5c:8a:44:be:d7:be:4a:4b:59:3b:a1:6b:2d:2c:1a:
0d:ff:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:21 2026 by rpki-client