
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c01e866-84d1-3df8-9b64-5c39dd95c639.roa
File: 0c01e866-84d1-3df8-9b64-5c39dd95c639.roa (raw, json)
Hash identifier: nD98M16XRBs7+NzCuzhajJ1ziVt7rJuEd9Mp3IzSseI=
Subject key identifier: 99:F5:5C:E4:57:94:C1:B0:41:26:33:44:D1:3F:EF:5C:A3:8B:05:93
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F42781327EFF3563D6690D200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c01e866-84d1-3df8-9b64-5c39dd95c639.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 72.201.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:13:27:ef:f3:56:3d:66:90:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=9df60881-144d-4098-a5d0-15e68ab9b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:70:48:26:9c:8b:75:dc:dd:24:cb:48:96:
46:21:84:e2:02:54:59:53:79:78:d2:79:8c:ec:ce:
57:d4:2a:1d:31:71:17:b4:ac:73:29:82:e5:54:1c:
a2:cf:81:c5:5b:e1:0f:04:ed:40:05:8b:07:7b:47:
07:d1:18:17:21:2d:43:5e:65:5f:03:cc:22:90:3d:
7f:6d:8d:03:dd:32:32:aa:10:0d:55:f8:98:f1:5c:
2b:fc:6d:a1:87:39:7b:ed:1e:15:11:4a:88:d0:1a:
f4:1d:e9:67:ef:3c:0f:35:81:20:d0:79:0f:7c:a0:
55:84:99:54:11:b1:b0:b8:71:06:99:2c:3e:87:15:
90:e6:0f:4b:58:f7:6a:77:cc:73:ec:c0:dd:64:ef:
fd:29:5f:e7:bb:6c:70:83:da:b2:b7:13:c4:2c:7c:
7d:1a:63:6e:43:3e:4f:cd:4a:b3:05:74:6f:4e:f4:
88:d9:43:10:d1:76:0d:82:30:a7:70:52:6a:31:30:
0e:0e:61:b3:43:56:de:31:6b:37:cb:67:10:c9:e0:
60:7c:8e:97:01:cd:d0:46:78:61:94:d2:21:39:ff:
20:60:37:54:7e:77:a1:14:3b:d1:c6:65:3e:49:43:
ac:d8:bf:d1:5c:13:ae:78:4b:87:ae:88:d8:fe:26:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:5C:E4:57:94:C1:B0:41:26:33:44:D1:3F:EF:5C:A3:8B:05:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c01e866-84d1-3df8-9b64-5c39dd95c639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.201.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:76:45:5e:ba:ab:49:c5:45:d7:00:ea:11:82:45:48:b0:ca:
34:69:66:d7:28:24:fc:98:b4:9c:a0:18:0d:f0:37:51:32:a5:
94:39:d3:82:28:a5:a1:93:20:03:a0:87:25:d8:d2:52:2b:56:
78:36:73:04:5b:eb:16:50:2a:fc:0b:02:13:f1:12:3e:e6:61:
84:3a:7f:8c:14:ab:d7:0d:9c:3a:72:f2:43:68:92:60:57:47:
5b:68:ef:c6:6a:2d:da:cc:b3:cc:0b:6b:15:f3:ca:1e:0f:2f:
de:1c:ad:17:71:ba:56:46:2e:f1:e1:4c:15:4b:a8:ce:5b:32:
a8:e3:44:a5:0c:41:09:a6:e9:20:02:85:37:b8:ae:4a:10:ad:
94:6b:c2:14:c0:44:7c:87:78:5b:ab:37:51:87:65:54:f4:12:
27:cd:55:25:b1:2a:c0:53:88:e7:c2:eb:c1:c5:29:93:5d:de:
84:48:72:f9:ad:e5:c8:74:59:05:c0:f3:f1:c9:db:ad:a1:71:
c7:03:d6:5f:e7:74:f3:dd:75:6d:56:85:bd:33:04:37:d3:51:
80:78:c8:b0:93:04:f8:80:23:28:0f:4d:27:21:0b:ba:68:ea:
d7:42:58:0a:f9:54:0c:e4:bf:df:de:ad:61:6a:f6:61:2e:8e:
d5:25:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:16:22 2026 by rpki-client