
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1be4d7be-9c7b-38c6-bcdb-d9e012dbcf20.roa
File: 1be4d7be-9c7b-38c6-bcdb-d9e012dbcf20.roa (raw, json)
Hash identifier: Q9CMtDvSLIrc79q1kJnyCcNALhOkKQVyIqt++jvxzuw=
Subject key identifier: A8:6E:18:F2:F2:24:71:15:A3:05:9D:7E:C5:2D:1C:3D:78:74:1F:F9
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9EAFFE6EA1FA5F1C42BA20C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1be4d7be-9c7b-38c6-bcdb-d9e012dbcf20.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 22773
IP address blocks: 70.176.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:af:fe:6e:a1:fa:5f:1c:42:ba:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=dd9e976c-e041-4cc3-93e4-fda3ca57edbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:ac:44:96:d9:1c:66:04:97:72:66:ea:bb:
bc:c9:87:03:a8:70:02:3c:68:bd:08:b4:fa:57:b2:
59:3f:2f:48:4b:0e:44:69:86:7d:88:c7:5c:d2:0d:
63:c9:a8:c3:81:bd:df:07:1b:55:88:2b:ba:1d:e7:
1b:a0:af:90:c4:ed:2d:0d:f4:ec:b0:0a:22:8b:d1:
59:06:aa:02:54:e2:1b:d4:09:22:8e:00:0f:3a:14:
20:f2:3a:26:1e:8f:9d:4f:af:31:ec:73:94:61:73:
0f:55:0a:bb:e1:02:7f:28:42:6c:8d:f4:51:10:73:
ea:c4:8e:5e:ed:71:18:40:50:4c:03:72:f5:9e:14:
a5:64:23:ad:df:b7:28:9e:ad:b1:9d:71:e1:be:f4:
a6:da:4b:99:1f:80:ff:d9:2b:fd:f8:68:f0:5a:21:
1f:d0:67:fd:07:6b:a4:24:26:51:22:d8:e3:67:d2:
c1:47:d3:5b:30:b5:16:10:2a:3b:46:ef:f6:55:17:
af:70:64:d9:eb:49:c4:6f:f8:c0:13:bc:b8:1f:57:
b5:85:17:ed:e4:4c:6d:8a:b7:e9:de:4b:57:43:ca:
d7:11:4e:25:e7:e9:cf:b4:6e:1e:19:45:bf:b1:9c:
0d:13:df:40:16:82:fa:5f:dc:03:79:e8:67:70:e8:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:18:F2:F2:24:71:15:A3:05:9D:7E:C5:2D:1C:3D:78:74:1F:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1be4d7be-9c7b-38c6-bcdb-d9e012dbcf20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.176.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:2a:4b:e8:7f:6b:c7:80:e0:a2:5d:ee:52:54:d2:95:a3:20:
63:5d:e8:11:78:10:05:43:29:41:68:0b:ba:cc:13:6d:78:c0:
ec:d9:e4:65:0d:19:37:15:47:54:34:f3:a7:de:cd:86:86:11:
f5:e2:f5:8a:ee:18:ae:d0:b1:a8:df:00:7f:e3:17:44:20:27:
86:80:c1:75:42:ab:b7:de:d5:6d:65:5e:ec:c9:05:df:87:81:
31:e2:72:ab:e4:ee:25:0f:f0:7a:a7:3f:d1:80:10:bb:38:5a:
9c:85:99:72:70:eb:a6:d9:5d:1c:05:d7:d1:c9:50:64:72:9e:
a2:8d:9f:50:3a:8e:4a:9b:c4:03:91:c8:dc:e3:71:fc:3b:3b:
cf:8e:6c:01:78:6a:e1:5a:6b:74:22:39:be:2a:da:7e:49:68:
c6:22:49:fb:f8:a2:b8:62:1b:99:c1:01:89:1a:e9:e5:59:0a:
cb:38:5f:ef:ec:bb:bc:4f:44:35:fb:96:b9:04:a7:3d:2b:e7:
3f:32:8f:fe:6d:8f:cf:c8:d6:1e:45:aa:66:81:1d:d0:16:b3:
34:92:a9:68:23:f9:29:be:c8:19:f3:1a:56:74:04:fd:1c:90:
6c:1a:1f:1b:c6:a5:8d:7e:aa:72:e5:52:a7:92:48:42:3c:c1:
49:d1:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:52 2026 by rpki-client