
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c34577f-cda0-3099-822d-9ae9f740203c.roa
File: 2c34577f-cda0-3099-822d-9ae9f740203c.roa (raw, json)
Hash identifier: HpZiuLcbKwsC25jr23g+lZNZo9cFkzBOS+Tc8grt8e0=
Subject key identifier: 3E:23:B9:B6:A4:2E:DC:89:65:63:58:00:CF:67:3B:A6:CE:FF:8A:B3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA17A9B5AC70FF0A35239FB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c34577f-cda0-3099-822d-9ae9f740203c.roa
Signing time: Sun 26 Jul 2026 21:00:11 +0000
ROA not before: Sun 26 Jul 2026 21:00:11 +0000
ROA not after: Sat 24 Oct 2026 21:00:11 +0000
asID: 22773
IP address blocks: 72.193.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a1:7a:9b:5a:c7:0f:f0:a3:52:39:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 21:00:11 2026 GMT
Not After : Oct 24 21:00:11 2026 GMT
Subject: CN=2168263e-4f72-4663-ae81-9fd2518b4501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:47:66:f6:9b:0f:69:3c:d8:df:c3:5a:df:
ed:e4:8f:20:90:2d:90:67:51:36:b6:36:44:8d:39:
5d:4e:87:35:e5:4b:ae:75:e0:69:44:9c:d1:24:31:
7d:ff:a1:3e:fa:10:6f:fe:be:b3:59:ad:bc:fc:1a:
f7:55:bf:60:16:88:12:c1:94:c9:92:1b:a4:4a:ec:
40:11:33:c9:6f:3f:4c:25:4d:97:3d:54:ce:ec:af:
f1:64:ac:70:e9:7c:77:df:7e:ff:4d:32:be:51:55:
ec:49:6b:03:68:ef:15:12:86:3e:ed:c6:4b:df:d9:
f1:d9:06:03:63:30:9c:a0:c3:14:e1:86:a9:3f:3d:
94:cc:79:68:88:ff:e0:3b:80:ee:4f:5c:78:99:76:
a3:8f:a3:d0:7b:27:96:ff:38:86:e4:78:9a:69:8e:
3a:61:a2:14:f8:50:e1:81:ec:91:67:b1:ca:31:ab:
7d:36:45:5c:b5:9c:56:ff:a8:cb:6a:d9:db:01:bd:
44:c7:64:06:9e:3c:38:c1:fd:7f:db:88:fe:34:ae:
e0:e3:07:cd:a3:4c:16:69:bc:49:77:13:d5:9f:c5:
f0:f5:a7:15:b1:a2:04:1f:b5:f5:cf:29:36:f5:e9:
cf:81:d7:d7:1f:9c:b0:bd:bf:46:f4:3e:0b:ca:32:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:23:B9:B6:A4:2E:DC:89:65:63:58:00:CF:67:3B:A6:CE:FF:8A:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c34577f-cda0-3099-822d-9ae9f740203c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.193.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:7b:66:20:ce:2c:11:32:96:84:e9:df:df:89:61:48:b3:a8:
30:43:75:af:4b:4b:c5:d2:c2:b6:70:ac:28:c1:67:5e:66:81:
de:b5:54:36:a8:d4:45:7d:7e:d1:c1:4f:07:5f:22:a0:e1:54:
cb:00:0e:37:4d:4d:c1:5b:98:0e:29:89:c1:91:c8:0f:22:e6:
9d:9b:05:f6:7e:48:e0:33:81:9f:e0:e6:f5:cd:c6:de:6b:5f:
57:ad:4d:1c:66:2d:a0:a2:68:eb:88:11:f7:3f:ec:95:26:a8:
3b:b6:94:26:2b:ad:50:75:44:db:24:95:33:d0:53:b2:bc:8a:
2a:84:83:c1:87:92:65:93:c0:47:70:d2:ca:a7:f3:93:9d:9b:
7e:29:e8:d2:5b:0e:c7:f0:98:34:e0:01:f9:20:e4:43:5b:18:
3e:d1:81:5d:99:6f:21:d2:18:d3:1e:26:45:6d:78:f1:ac:e5:
03:fa:9b:7a:d9:db:01:47:48:92:e1:85:0b:a0:42:41:5e:da:
bd:a4:d1:53:27:0b:08:c7:c4:cd:d7:66:a9:4e:5b:7c:a0:32:
09:5e:23:00:d1:0c:c8:5f:ba:84:4e:2d:b6:6b:2b:19:04:16:
57:90:51:23:1c:a7:7c:cd:8b:74:77:f5:ac:1b:4b:bf:9f:63:
d1:37:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:08 2026 by rpki-client