
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0caffb6a-b781-3374-93cb-a6d2acc7cb27.roa
File: 0caffb6a-b781-3374-93cb-a6d2acc7cb27.roa (raw, json)
Hash identifier: /M5r498qEcxl7eMw+iXuLDRGK0UBBYdcvxvIabQG9XA=
Subject key identifier: 28:66:1F:80:21:BF:F6:88:2E:C5:22:3E:DB:C2:31:7F:AC:26:DA:4F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F3FAD273EE354448B3E1DB300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0caffb6a-b781-3374-93cb-a6d2acc7cb27.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 68.3.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:27:3e:e3:54:44:8b:3e:1d:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=4c16e973-de27-4642-b2b8-f8c9be62b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:c4:1f:f3:57:e7:85:fc:f1:c3:a0:01:5a:
dd:4f:7e:a0:22:ce:71:57:df:15:fa:e3:af:be:a5:
07:ba:34:4a:dd:26:1c:03:7f:ec:02:99:64:0a:95:
48:1d:4c:80:08:7c:77:61:f4:2d:b1:a3:41:c7:ad:
4f:69:19:e6:17:26:0b:20:0a:a2:ab:e3:d3:96:06:
6f:ae:b7:59:11:17:ee:02:8d:f3:11:c1:4e:0f:41:
5f:84:03:bb:5e:a9:4d:39:ec:8d:eb:d5:2a:b7:87:
0f:17:b1:57:83:7c:33:db:c5:e1:58:fd:77:7b:4e:
b4:70:0d:b4:90:c0:8c:80:0f:fc:70:a4:f3:bc:17:
29:31:5d:79:84:24:e4:04:ae:0f:22:a7:4d:73:20:
26:7f:84:98:aa:32:36:b1:ea:76:cf:3b:da:1b:0f:
5c:7e:d3:68:40:8a:70:e0:5b:94:6d:65:bc:1f:08:
a5:19:ba:c4:5e:8d:56:cc:44:bc:43:ca:e2:0a:e4:
4c:ca:f6:39:9b:45:3d:19:93:ec:e2:28:24:61:dd:
c5:55:53:43:75:ca:0e:9d:a9:28:16:47:ed:48:7b:
00:a7:e7:d1:57:6c:67:e2:04:b4:18:22:dc:b9:82:
3f:25:38:e2:d5:57:44:3a:dc:95:94:93:81:9a:40:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:66:1F:80:21:BF:F6:88:2E:C5:22:3E:DB:C2:31:7F:AC:26:DA:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0caffb6a-b781-3374-93cb-a6d2acc7cb27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.3.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:32:fb:05:e6:1f:d1:18:40:bd:0a:7e:1e:35:19:28:19:1d:
b3:d4:43:e6:04:83:b4:64:3b:0d:a0:b7:03:4c:d9:7f:2f:97:
ea:89:b1:e9:12:06:76:99:87:f8:78:73:44:a2:e1:42:1b:30:
a9:73:c9:6a:70:93:cb:c4:ca:51:73:17:b6:a2:98:30:12:ac:
17:8d:68:5d:87:e3:45:cb:2e:ad:1f:a2:e4:e4:15:e3:4f:ee:
d3:55:b9:f6:1e:50:03:76:22:97:07:ee:47:07:18:85:b6:3d:
84:85:b8:93:c0:7a:9b:98:58:ff:0b:d6:3f:cf:ea:d1:0e:c8:
18:96:5f:0b:76:42:e5:28:70:c1:fc:f1:0f:b2:16:80:74:27:
ea:a4:83:6b:3e:cd:2a:0c:56:4f:e1:ef:76:a5:3a:de:0c:dd:
32:a6:02:18:dd:fd:e4:62:8d:06:4d:27:b3:0f:39:2d:55:26:
77:c8:d2:41:dd:ea:4d:7f:ac:ba:ab:4d:30:0c:17:f9:9c:6b:
ca:5e:1d:ad:2d:64:04:19:d9:d7:fe:c8:ba:a8:6e:e1:09:2a:
77:9d:a0:76:b4:44:77:97:6b:d0:92:7c:70:4e:a1:e4:06:7a:
07:91:19:ec:06:5c:91:9a:ad:ec:6f:f6:c6:94:05:84:48:10:
d1:34:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:04:52 2026 by rpki-client