
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d663879-2b83-351f-9414-0cc452740f58.roa
File: 2d663879-2b83-351f-9414-0cc452740f58.roa (raw, json)
Hash identifier: uJTpP2pP1UU7JaV6bfJntGXyqZRXcYDuitmPaXMAk9I=
Subject key identifier: 84:41:84:9A:44:E8:07:E5:91:BB:97:09:ED:C7:46:04:37:8E:B2:A5
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA01570296D6F3D148D27CE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d663879-2b83-351f-9414-0cc452740f58.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 22773
IP address blocks: 72.208.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:70:29:6d:6f:3d:14:8d:27:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=461296aa-fc9f-493a-a7c3-58a008b643ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:a5:11:d5:95:45:ba:00:74:30:6b:d1:bc:
c8:9c:bc:54:d1:91:5b:f6:e8:6d:22:84:97:76:d7:
28:db:79:61:52:c6:c7:86:58:9a:33:d7:06:18:fb:
f1:57:62:82:99:d9:40:38:71:9c:50:b5:de:5d:63:
7c:b3:3f:c0:d5:d4:5f:9c:88:a6:64:1c:98:a0:22:
a8:4b:0e:fd:18:ac:c6:dd:e4:32:e6:c2:e0:c4:f3:
0f:70:c6:4d:24:35:e1:c8:98:d4:11:0f:f8:25:1d:
1a:d9:13:c3:a6:1a:4c:a5:5d:02:14:b5:0d:ea:4c:
17:9a:e6:0e:39:29:f4:77:63:05:84:1c:42:58:59:
4d:05:66:99:9e:f7:81:d5:7f:b8:13:97:84:96:70:
b6:a5:ee:68:5c:2b:a4:d8:1d:51:72:6a:ad:bb:53:
c1:61:fd:4c:fe:da:ff:e7:06:ac:a7:df:09:3e:63:
74:e4:8c:9f:cb:dc:5c:ab:27:40:d2:39:28:9c:32:
ef:a1:53:d8:07:33:ff:b1:b9:bc:59:1c:ca:bf:c0:
37:30:2e:48:a6:82:db:4a:2e:a1:cf:72:74:91:d7:
ef:4c:04:bd:78:82:9d:01:3d:10:bc:76:ca:2c:1d:
ef:a6:43:4b:08:21:43:4c:e3:cf:ea:bd:7a:55:e8:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:84:9A:44:E8:07:E5:91:BB:97:09:ED:C7:46:04:37:8E:B2:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d663879-2b83-351f-9414-0cc452740f58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:e3:b4:a8:48:1f:c8:74:2f:5b:c8:1b:9a:17:90:42:db:a8:
e2:7e:bc:f4:0e:2f:e3:68:63:c1:2b:97:86:6b:f1:36:48:ca:
48:a1:b2:56:f1:dc:b0:c3:69:ca:d0:95:7b:04:cb:b8:8d:e5:
af:bb:3a:90:6c:85:09:27:f1:57:31:26:24:20:79:98:5e:c8:
ad:fd:8e:f9:9d:05:6b:5c:e2:21:73:71:d0:a9:0f:cc:4e:5a:
5b:b3:ed:4e:dd:b4:d6:40:82:38:87:d1:fa:08:b5:2a:44:1c:
c8:bb:c5:68:97:e9:66:60:75:8b:58:ca:34:c9:c2:e2:5f:29:
88:5f:de:3c:4c:1f:08:70:c7:de:da:d0:63:25:4d:34:4c:27:
a3:2a:4d:af:73:cb:60:44:90:04:0f:18:72:36:78:9e:f9:10:
53:37:2b:5d:c3:a6:42:29:cb:00:49:3d:0d:24:8b:ea:50:81:
c8:ea:01:99:8d:c2:8f:14:1f:30:e3:09:56:ec:ef:37:6a:dd:
27:04:5e:9c:ce:a4:68:8a:40:1b:dd:ca:11:f2:ef:c0:57:09:
fb:d2:f2:65:30:75:08:be:91:1a:c6:68:c6:aa:01:bb:5b:8b:
8f:ab:e3:95:5d:89:cb:18:d4:93:8f:f9:51:55:f0:40:07:7e:
ce:16:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:47 2026 by rpki-client