
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2016ed9d-5bb1-3f94-8991-96624acde404.roa
File: 2016ed9d-5bb1-3f94-8991-96624acde404.roa (raw, json)
Hash identifier: 6ia2kXaVGptSAtf7mv6V7mjQBYr3YZQqdDhkY2LkBjs=
Subject key identifier: 1D:0C:B6:F6:BE:95:3C:6C:7D:F8:58:3B:D9:33:05:A5:1D:41:D1:EF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9D4A60EA57D30C55EB595700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2016ed9d-5bb1-3f94-8991-96624acde404.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 22773
IP address blocks: 68.0.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:60:ea:57:d3:0c:55:eb:59:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=053a2aa7-d10c-4279-88db-c31ca45d43e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:82:27:09:a2:7f:73:29:bd:aa:90:7e:23:
21:78:8e:cf:f9:ee:64:92:b9:27:a9:37:e2:db:61:
23:dc:db:64:84:35:cb:9f:01:85:84:95:46:87:48:
bc:dd:f3:d0:1b:1f:a5:8b:d7:51:83:7e:b3:ab:76:
79:ac:d1:b2:20:69:9e:c4:87:46:34:44:f6:15:bf:
c8:5f:7c:1c:4e:9d:dc:1a:4b:44:b9:4d:a2:65:06:
a9:41:72:89:3f:69:b2:8d:c6:73:0c:9f:4a:45:eb:
07:d5:d6:d8:c2:ac:50:9a:8b:5d:07:6c:2e:48:b5:
a5:6a:5e:d6:2a:c7:06:6c:54:0d:6a:20:55:d8:c3:
fb:77:01:23:90:c6:cd:e6:35:41:20:14:d8:fd:e1:
79:ca:b0:ad:87:b4:8d:a5:c5:fc:7e:af:10:73:07:
21:c7:df:e5:e6:4c:0c:4d:7e:91:d1:35:c5:7a:4a:
5f:8e:a1:3c:18:fa:ad:eb:b0:79:1a:14:49:3b:c4:
3b:ee:75:38:92:52:b0:4e:da:8a:3f:2b:8d:ea:e7:
0c:a0:2c:02:79:ed:36:ad:af:d0:2b:fa:dc:b4:aa:
9b:c1:09:e8:75:e4:72:31:a9:19:24:84:f4:29:72:
06:e4:68:34:9e:34:5d:52:64:f3:5d:e3:ac:5b:e9:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:B6:F6:BE:95:3C:6C:7D:F8:58:3B:D9:33:05:A5:1D:41:D1:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2016ed9d-5bb1-3f94-8991-96624acde404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.0.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:ee:95:00:9b:e6:11:6b:6f:74:ce:9f:7e:35:f0:7b:8a:0b:
b1:2a:79:2f:f7:fd:be:84:e1:a7:a6:41:d2:be:05:57:4c:84:
5f:20:4b:3b:ff:ed:49:90:71:23:25:5d:c9:72:1f:dd:79:3e:
1b:71:e5:90:c5:39:a8:be:8f:60:81:ac:89:32:6b:3a:d6:4f:
bc:b9:f2:47:46:ea:25:53:0b:c6:e7:ce:1a:e1:37:3d:cb:f3:
c0:c0:ac:10:7f:54:e2:be:ee:a0:be:9b:a5:34:30:b6:77:cf:
02:22:a3:bc:04:ed:4f:55:4b:18:ca:52:0b:49:a6:28:ec:68:
9f:05:8e:1c:97:0d:d9:80:8d:62:42:bc:ff:47:f0:16:cf:da:
11:80:cd:0a:4e:3b:03:7d:65:59:fd:39:34:ef:85:73:1a:63:
15:d4:4d:85:aa:4e:9a:13:e7:e9:bf:dc:2c:4f:2e:24:de:5c:
f7:93:21:23:e5:d5:74:85:b7:1f:0e:b8:b3:41:0c:f9:9d:2b:
84:79:37:c3:f7:75:e0:7f:7a:3c:81:28:49:f6:22:76:5a:bf:
e0:45:ca:82:3a:16:6a:05:15:11:4b:51:a8:7b:6a:93:98:d6:
4f:05:9e:5f:6d:01:32:e5:95:67:d2:8d:aa:e4:8b:9b:29:27:
fa:aa:fc:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmDqV9MMVetZVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
MDUzYTJhYTctZDEwYy00Mjc5LTg4ZGItYzMxY2E0NWQ0M2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVuCJwmif3MpvaqQfiMheI7P+e5kkrknqTfi
22Ej3NtkhDXLnwGFhJVGh0i83fPQGx+li9dRg36zq3Z5rNGyIGmexIdGNET2Fb/I
X3wcTp3cGktEuU2iZQapQXKJP2myjcZzDJ9KResH1dbYwqxQmotdB2wuSLWlal7W
KscGbFQNaiBV2MP7dwEjkMbN5jVBIBTY/eF5yrCth7SNpcX8fq8Qcwchx9/l5kwM
TX6R0TXFekpfjqE8GPqt67B5GhRJO8Q77nU4klKwTtqKPyuN6ucMoCwCee02ra/Q
K/rctKqbwQnodeRyMakZJIT0KXIG5Gg0njRdUmTzXeOsW+lHsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0Mtva+lTxsffhYO9kzBaUdQdHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjAxNmVkOWQtNWJiMS0z
Zjk0LTg5OTEtOTY2MjRhY2RlNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfulQCb5hFrb3TOn3418HuKC7EqeS/3/b6E4aemQdK+BVdMhF8gSzv/
7UmQcSMlXclyH915Phtx5ZDFOai+j2CBrIkyazrWT7y58kdG6iVTC8bnzhrhNz3L
88DArBB/VOK+7qC+m6U0MLZ3zwIio7wE7U9VSxjKUgtJpijsaJ8FjhyXDdmAjWJC
vP9H8BbP2hGAzQpOOwN9ZVn9OTTvhXMaYxXUTYWqTpoT5+m/3CxPLiTeXPeTISPl
1XSFtx8OuLNBDPmdK4R5N8P3deB/ejyBKEn2InZav+BFyoI6FmoFFRFLUah7apOY
1k8Fnl9tATLllWfSjarki5spJ/qq/JA=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:16 2026 by rpki-client