
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18be4e06-f486-36b4-8db4-0dee7ef667e1.roa
File: 18be4e06-f486-36b4-8db4-0dee7ef667e1.roa (raw, json)
Hash identifier: W6yYESAwZGkUrWYisLPbSgLRna2TeMh6Z5T+z20RdRM=
Subject key identifier: E4:07:6A:7C:4E:F2:D8:37:D4:58:E2:F1:84:87:6E:4F:EC:38:A3:CA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9EAFDF555C60EC3C4D890780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18be4e06-f486-36b4-8db4-0dee7ef667e1.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 22773
IP address blocks: 68.225.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:af:df:55:5c:60:ec:3c:4d:89:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=1c0b0c76-0a2e-4d4f-aa12-239404b40aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:3b:e7:3c:5e:f3:e0:40:82:13:f3:75:ea:
cc:33:36:82:22:ef:0f:24:9f:eb:26:f5:1a:3f:7b:
0d:d9:20:55:a6:f2:ba:dd:5a:f6:9e:76:36:27:00:
80:92:2c:c7:9c:fa:20:95:ac:5d:e7:b2:ce:d4:b8:
51:32:7f:9f:46:f7:51:01:c7:34:27:e5:14:c7:ad:
0c:3b:8c:a0:ea:e0:c7:2c:4a:0f:99:9b:00:96:b6:
05:23:83:83:82:92:60:3b:89:9b:c6:97:da:bb:14:
c8:3f:d5:c5:ea:41:58:2d:9b:51:57:31:7f:7f:2b:
35:e9:41:99:ea:74:f3:90:ba:9a:46:b0:56:10:ec:
4a:f9:83:97:41:28:3b:67:a7:03:63:b3:73:9c:4c:
52:9e:b5:9d:e1:20:67:15:49:86:82:75:c4:0a:9c:
1a:2d:5c:ed:61:6e:10:4b:8e:64:ac:24:a8:87:52:
f7:4d:ec:42:b7:83:ec:c9:3a:6d:13:e6:7a:b2:6b:
7e:8a:c8:1b:ec:4c:28:80:cd:03:76:58:f3:b7:97:
cb:e7:62:45:b2:44:40:8a:f9:28:98:18:c7:1b:e2:
8a:ec:70:42:cc:16:dc:b0:8d:4a:7c:04:8d:3c:8b:
45:61:ff:7c:4b:aa:3d:c1:b8:e2:37:5d:91:ae:93:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:07:6A:7C:4E:F2:D8:37:D4:58:E2:F1:84:87:6E:4F:EC:38:A3:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18be4e06-f486-36b4-8db4-0dee7ef667e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.225.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d8:6d:05:3c:41:d6:65:69:b5:f7:61:54:25:09:ec:3b:93:
a3:76:37:93:b9:37:01:62:b9:10:a2:e2:1d:74:91:98:32:4d:
48:19:64:27:77:b2:55:c1:67:8d:d5:dd:4b:2a:3e:2c:30:96:
d6:0f:45:ac:fc:9d:13:95:79:d6:e5:fd:88:02:24:5d:29:c7:
14:95:05:80:8e:f7:2c:3a:a1:82:7c:26:d3:6f:77:fc:41:bf:
a0:80:d8:af:14:3d:3b:87:8b:0b:3c:9c:05:a8:5d:9e:5d:33:
dd:98:c4:3c:e9:eb:98:1e:a4:60:6e:09:60:cc:48:1a:cf:f7:
f5:48:83:75:30:d4:df:d0:51:c3:56:5e:e7:7e:3c:f2:e1:b1:
f9:4a:b5:2c:a6:87:20:6d:4a:d6:31:f6:bb:0d:81:d7:9c:f7:
c1:a8:4c:81:af:aa:5f:68:04:49:8d:72:04:62:b8:8f:25:86:
b6:6d:6a:3a:06:a4:1c:b7:1b:5a:fe:53:55:a7:3d:07:90:66:
56:d4:ce:e6:34:7b:9b:ca:a2:e4:55:bf:18:52:c2:5c:1e:19:
bf:d0:df:ba:7a:0f:ee:09:8f:a0:24:2a:c4:38:4a:97:58:45:
a4:b6:9a:82:de:eb:e8:28:a8:d3:e1:ba:8e:78:b5:21:dc:97:
3b:b8:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:33 2026 by rpki-client