
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a15658-e621-337f-9020-560fddd1fa0b.roa
File: 08a15658-e621-337f-9020-560fddd1fa0b.roa (raw, json)
Hash identifier: g73nBxnLOyqYwfNUHPs+/FIB/Upr2/n4Mx+VdwAi04w=
Subject key identifier: 68:A1:64:4A:83:4B:B7:C0:F4:EC:5C:0F:A3:EC:CA:89:2B:33:43:91
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E15E48242382D5795E21AD880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a15658-e621-337f-9020-560fddd1fa0b.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 22773
IP address blocks: 72.199.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:82:42:38:2d:57:95:e2:1a:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=356d9931-f9ce-4df8-90bf-1ed3d3a91bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:3e:28:c5:a5:e8:d0:ad:e6:09:05:d2:25:
59:9e:11:10:b9:52:1b:95:1e:03:ed:65:5d:2d:b2:
18:62:12:e8:8d:f3:52:30:b8:b3:a9:54:58:90:9c:
a9:04:62:76:0e:ca:21:6a:6c:fd:34:a5:b2:76:e3:
9a:1d:49:d9:b9:64:ce:64:f5:f5:01:79:a1:60:65:
e5:bd:39:23:f4:01:f1:a8:25:68:03:2b:cf:6c:8c:
54:b7:18:ca:85:2d:b2:2a:59:78:59:82:ac:fb:b8:
df:49:7a:b2:4c:d6:18:5e:d2:8f:67:9e:36:6a:10:
db:2f:77:02:c8:16:39:98:11:5c:1a:b0:da:cc:94:
66:c5:dc:33:b2:86:b3:da:66:8e:c1:71:04:f8:9f:
2b:f4:8f:d7:b1:1e:72:ec:a8:7f:00:0c:e2:ea:8b:
8a:65:5b:b0:03:6a:31:86:c1:66:31:26:94:a3:b4:
3b:5c:44:94:13:b7:df:24:cd:1e:24:39:f0:61:54:
4a:5f:bf:70:c1:14:e6:6c:71:36:30:6f:05:87:8f:
85:dd:d6:96:12:9c:82:2e:30:37:f9:98:fc:c0:07:
bc:2b:a6:c9:8a:b5:35:c1:4c:1a:ca:ef:32:1f:bc:
51:a5:3a:f3:f1:06:ef:6e:fe:a1:c0:05:45:46:a5:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:64:4A:83:4B:B7:C0:F4:EC:5C:0F:A3:EC:CA:89:2B:33:43:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a15658-e621-337f-9020-560fddd1fa0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.199.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:60:f0:a8:a7:9f:8b:24:4b:a6:21:ec:1c:c1:36:3a:b6:e1:
64:3d:30:de:9c:95:fa:83:f3:8c:7d:a7:45:44:6e:8d:ab:9c:
b1:f7:1b:bc:e5:c2:49:35:31:cc:49:29:ac:bb:6c:f6:cd:94:
29:fb:93:c3:4f:93:fe:af:55:e0:6b:b0:33:84:eb:7c:f0:90:
23:10:de:a5:18:9f:29:77:5a:b0:4b:80:a9:67:45:76:e1:a1:
45:ad:5b:c0:46:3c:5b:ee:71:78:90:78:5a:82:a9:c7:4b:6f:
68:30:91:16:0f:9d:b4:df:e8:fe:c8:52:18:4e:01:75:39:91:
61:4d:ae:56:7f:60:fe:1e:6d:01:63:9c:77:90:bf:11:4a:de:
66:a3:b9:aa:1a:b2:64:97:20:44:de:32:b5:fd:db:1e:fe:bb:
10:6c:39:cd:b7:17:79:fa:0a:85:1e:2b:16:71:93:0e:07:39:
9a:a3:69:eb:99:8f:cb:dd:06:29:d5:87:a2:61:c9:01:dd:26:
ff:f8:72:9b:23:b1:db:0c:ee:e1:dd:c9:3e:3c:ca:ff:84:16:
b1:b3:fe:eb:f8:90:8c:f3:5c:1a:15:42:b1:2b:fd:70:ef:7e:
21:9c:29:81:e0:43:3d:c8:bf:51:89:87:b2:ff:16:1e:22:a0:
16:20:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:03 2026 by rpki-client