
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa
File: 28f0a707-e669-336f-addb-ee06fbd6ad78.roa (raw, json)
Hash identifier: tnN54lH1CZuUoJa8vHjduA105izN/bhZQLWYXIs2HS4=
Subject key identifier: 76:E4:61:6C:17:A1:4B:78:EB:94:63:18:7B:09:18:40:97:1D:E7:03
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D6EDA8B5F571E272736C364C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 22773
IP address blocks: 2600:880b:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:8b:5f:57:1e:27:27:36:c3:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=2589f5a9-a0c2-4865-af06-6f705b7c315e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:bb:2e:a7:42:01:85:b8:90:67:fd:4f:5a:
93:cc:9f:16:1c:fa:e3:10:c2:90:ea:45:87:28:35:
d5:d8:4a:0f:9c:7e:09:f0:56:35:7b:2a:e0:61:e7:
38:54:ec:2a:77:16:83:9b:02:6a:bb:1c:6b:5f:76:
4c:ad:5e:e6:c3:c6:e8:44:68:a8:d4:fe:91:73:e9:
ad:c7:d9:f2:25:0f:e1:94:ac:93:3a:0b:b2:e7:50:
83:ed:b0:ef:83:81:09:92:5c:1c:7d:e0:9c:74:78:
92:9b:57:8a:3c:cf:ba:f3:7c:d4:f2:f1:1a:56:46:
6a:16:71:d3:94:ce:c0:60:66:09:74:30:85:f5:b1:
4f:30:4d:de:8d:bd:2e:d6:49:74:60:af:d1:0d:19:
3c:43:cc:54:95:58:32:2f:95:b7:5d:e2:e3:3b:8b:
94:d0:ac:68:70:43:39:5c:7b:9f:ce:c7:8c:6b:c2:
2a:b3:2a:c5:f2:e8:2c:e3:fe:8c:fa:65:90:7e:9a:
a3:87:e8:0b:6b:31:4f:fa:27:2e:a1:5c:b3:03:bb:
c9:df:01:f8:5f:a1:7c:b9:3e:ec:47:fa:ed:b2:cb:
b2:5d:72:f8:9a:7a:8a:7b:50:77:ff:00:d2:51:35:
0e:1f:64:86:3a:8e:a9:80:28:42:5d:79:20:0e:f3:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:61:6C:17:A1:4B:78:EB:94:63:18:7B:09:18:40:97:1D:E7:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f0a707-e669-336f-addb-ee06fbd6ad78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:880b:2000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c9:62:8e:81:71:fb:49:82:95:c3:62:2a:2e:65:95:7c:7c:
92:36:fd:4a:80:fa:8e:7c:5e:61:84:a5:14:da:b5:57:b1:73:
9e:ef:63:07:5f:ab:93:d8:91:f1:03:c0:5a:04:34:58:19:6a:
02:c4:27:82:c3:ee:89:99:09:c1:ab:3f:a0:3b:0f:ae:07:32:
3d:81:28:e3:83:89:5e:68:be:c5:da:e7:2b:81:96:0a:52:2f:
2a:fe:54:83:2e:ab:e9:a4:21:ac:35:c8:64:e8:cf:06:a1:20:
65:72:e1:5e:a7:9e:78:38:59:4d:c9:85:e5:19:59:97:f4:51:
8c:4f:c2:6d:99:a3:eb:b6:d0:b4:98:32:e1:83:37:db:87:36:
b6:4d:99:3f:4a:ea:34:4d:62:a1:15:57:42:34:f1:bd:6b:85:
b5:e7:80:c0:a9:53:31:a3:c9:94:9e:fc:c2:1e:d8:a6:1a:1a:
2a:2f:e0:23:d0:37:3e:70:8e:4d:27:36:aa:9c:c6:76:21:0a:
17:c2:3a:45:37:5f:bc:13:ff:95:ac:46:0e:1b:43:7a:5c:e3:
7b:0a:77:e9:66:53:e1:aa:10:6b:2e:36:be:75:48:b2:f4:3f:
4e:ce:25:3b:6a:73:70:ad:35:02:5d:5b:83:fc:65:75:9a:77:
e4:68:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:43 2026 by rpki-client