
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2518ec95-7af4-3365-aeb0-97105e42c5c3.roa
File: 2518ec95-7af4-3365-aeb0-97105e42c5c3.roa (raw, json)
Hash identifier: R2W/ccIecFYCXXp49jLBBBabc2VlqLVXwe7lMY2DQpU=
Subject key identifier: D4:0F:A9:0D:1D:86:AC:D4:33:81:81:3B:D0:6D:53:B2:1E:67:A4:4B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDF329B7175495B75D1549340
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2518ec95-7af4-3365-aeb0-97105e42c5c3.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 2600:8800:8684::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:9b:71:75:49:5b:75:d1:54:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=93ac9560-ce15-4fe9-97a9-bde88d5a0c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:65:10:9b:d2:a6:41:24:3b:a6:ed:5a:fc:
fc:6a:32:fe:0a:9f:47:f3:df:4f:2d:84:1d:84:ee:
01:23:7f:58:35:48:bc:ed:74:16:ff:42:a0:34:8b:
27:72:a7:d0:10:6d:9b:21:f1:08:9c:55:29:d2:17:
97:48:aa:31:56:c5:df:93:8b:62:49:91:71:cb:aa:
a6:ef:c4:cf:91:f0:c7:40:40:fc:39:8b:86:a1:89:
61:d2:91:78:05:52:2f:a5:77:c3:4b:d0:56:99:9c:
7a:19:0c:75:dc:54:17:d7:4d:ca:77:fd:84:d5:fd:
7f:9c:08:f4:73:a3:85:07:30:87:ad:a6:dc:39:b3:
18:71:11:2f:91:40:d5:b9:cc:ee:1e:f2:45:5f:94:
70:98:c6:02:24:b1:fd:3c:7e:9e:57:a8:9d:dc:8c:
31:c4:db:ac:c0:c5:bd:3b:d6:be:c1:2a:df:88:d0:
f5:01:63:ed:f3:16:95:9a:61:c2:41:bb:1b:86:47:
5c:67:5d:5d:96:1d:b1:e8:67:f8:df:ef:90:c6:63:
03:b9:fc:dd:0d:f7:e0:e9:75:7f:25:b0:d5:b2:b9:
7c:cd:37:a8:65:17:f7:a2:6d:04:1b:e4:01:9b:cd:
f3:64:3b:6b:f4:64:92:ca:33:33:8e:74:40:0c:27:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:A9:0D:1D:86:AC:D4:33:81:81:3B:D0:6D:53:B2:1E:67:A4:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2518ec95-7af4-3365-aeb0-97105e42c5c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:8684::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:f7:c7:f0:c6:d5:94:a4:7a:e4:81:61:27:b5:bd:6f:d4:bf:
db:0e:29:e2:34:80:5b:86:b5:ad:2a:63:c7:2e:8c:5b:4c:9a:
68:13:db:1c:df:b9:cb:43:68:e0:1e:bd:1f:eb:37:19:1a:2a:
6a:fd:70:3c:10:18:21:26:99:be:f6:c5:c7:b5:f0:ad:9d:64:
fa:b2:f1:88:e4:ef:37:3d:cd:10:78:d6:63:0f:21:c5:af:61:
a1:be:d9:bb:84:71:95:ab:57:97:f3:d3:8d:2d:2a:ad:b6:d3:
5f:24:98:96:6a:d4:df:14:68:3a:a4:8a:52:1a:a4:84:7f:55:
d3:b7:1d:40:7f:7a:4c:a4:a0:51:c4:5d:f2:a2:22:a7:00:02:
71:bd:f6:70:4b:97:67:17:5f:26:3d:ef:be:a0:ec:33:51:40:
97:83:dd:49:b6:f9:ba:59:a7:cc:85:8d:31:e2:69:3c:12:2c:
59:b1:43:81:2d:47:36:75:53:1f:1e:42:7b:3d:9a:5e:4f:b2:
88:2b:12:25:67:0f:69:9b:73:7c:d8:88:11:bc:bd:be:e5:3a:
31:6f:9b:00:05:58:ab:97:d5:24:a3:b5:f5:15:bf:7a:04:43:
d1:de:d0:2e:f1:31:f8:d6:e4:ce:c6:2d:a4:3d:5d:94:a0:0b:
12:9b:6d:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzfMptxdUlbddFUk0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
OTNhYzk1NjAtY2UxNS00ZmU5LTk3YTktYmRlODhkNWEwYzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3BlEJvSpkEkO6btWvz8ajL+Cp9H899PLYQd
hO4BI39YNUi87XQW/0KgNIsncqfQEG2bIfEInFUp0heXSKoxVsXfk4tiSZFxy6qm
78TPkfDHQED8OYuGoYlh0pF4BVIvpXfDS9BWmZx6GQx13FQX103Kd/2E1f1/nAj0
c6OFBzCHrabcObMYcREvkUDVuczuHvJFX5RwmMYCJLH9PH6eV6id3IwxxNuswMW9
O9a+wSrfiND1AWPt8xaVmmHCQbsbhkdcZ11dlh2x6Gf43++QxmMDufzdDffg6XV/
JbDVsrl8zTeoZRf3om0EG+QBm83zZDtr9GSSyjMzjnRADCcSGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNQPqQ0dhqzUM4GBO9BtU7IeZ6RLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUxOGVjOTUtN2FmNC0z
MzY1LWFlYjAtOTcxMDVlNDJjNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAIaE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABL3x/DG1ZSkeuSBYSe1vW/Uv9sOKeI0gFuGta0qY8cujFtMmmgT
2xzfuctDaOAevR/rNxkaKmr9cDwQGCEmmb72xce18K2dZPqy8Yjk7zc9zRB41mMP
IcWvYaG+2buEcZWrV5fz040tKq22018kmJZq1N8UaDqkilIapIR/VdO3HUB/ekyk
oFHEXfKiIqcAAnG99nBLl2cXXyY9776g7DNRQJeD3Um2+bpZp8yFjTHiaTwSLFmx
Q4EtRzZ1Ux8eQns9ml5PsogrEiVnD2mbc3zYiBG8vb7lOjFvmwAFWKuX1SSjtfUV
v3oEQ9He0C7xMfjW5M7GLaQ9XZSgCxKbbSA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:12 2026 by rpki-client