
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa
File: 2de2634b-2e04-3bac-8266-57a1e9be14d7.roa (raw, json)
Hash identifier: aFW59x4L1bxYIi2xKRnMrjlKqzs8lEEFSUlR6YDydBM=
Subject key identifier: 74:1B:39:20:42:C7:52:14:28:7E:06:09:95:1D:DE:EE:77:05:A9:67
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDC67E8260CAB68052DB84340
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 68.98.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:e8:26:0c:ab:68:05:2d:b8:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=b8593862-5dd2-4219-9d85-8d09f331fedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:75:93:51:bf:58:2d:a1:44:8a:b4:df:e8:
65:07:38:4c:28:8e:da:66:2f:b4:aa:52:0d:0a:dc:
28:33:94:03:fa:b5:e8:4f:68:52:83:40:ee:25:0f:
65:f2:be:ba:a1:92:76:d1:ad:95:c8:41:ea:8e:9d:
f0:01:d3:9a:e4:aa:4d:81:80:02:f7:d9:fd:db:52:
1e:b8:d8:dd:8f:93:73:7b:dc:17:ad:36:f7:d5:35:
e2:2f:2a:fe:28:ef:2e:05:db:ec:7b:06:82:30:c9:
44:12:1d:db:df:e9:90:a2:87:1b:32:6b:70:d1:36:
df:b3:e5:dd:71:4c:29:88:2f:4c:43:fb:77:9e:a5:
bf:43:40:fc:29:41:66:71:e7:16:31:ee:cd:62:6c:
27:dd:ab:c5:0c:76:b6:29:98:26:49:f9:8a:07:88:
e6:22:f0:97:23:ef:15:d9:83:6b:83:59:c4:97:f2:
4d:5f:3a:6a:94:12:66:5d:05:b2:69:26:36:10:a1:
0b:25:32:21:a7:ce:e4:d1:d6:c5:a4:4f:f8:48:78:
58:87:65:71:ed:f2:99:c5:f3:78:2e:3c:b1:5f:f4:
94:d1:32:99:37:ed:e8:5f:fe:72:de:de:2a:f9:5a:
b8:07:dd:63:b1:ad:a1:3d:b4:33:72:1a:c2:f2:ef:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1B:39:20:42:C7:52:14:28:7E:06:09:95:1D:DE:EE:77:05:A9:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de2634b-2e04-3bac-8266-57a1e9be14d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.98.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:04:c5:2b:6c:4e:57:41:cd:93:d7:e6:94:8a:14:76:ce:f1:
39:aa:7a:3a:b6:12:3b:2d:db:12:76:c4:bc:63:92:a6:35:39:
2d:12:ca:a5:71:ad:86:31:37:f9:b4:06:0d:a9:ea:dc:3f:e9:
9b:9a:35:a2:26:ee:87:47:65:e2:7d:c9:3f:9b:ea:04:3e:40:
fc:ae:14:cc:e9:81:e1:0b:34:17:5c:c5:cd:15:0b:2b:3c:15:
8c:17:dc:05:53:7b:2d:ea:c8:ae:bc:4f:76:85:47:5f:a8:d1:
a5:f9:49:09:d1:fa:10:ff:b0:a1:64:f5:4f:47:f7:6e:73:49:
fa:ff:7c:ae:45:9f:82:fd:2c:ee:a7:ae:56:95:40:07:7d:25:
b7:0b:d4:52:da:e9:54:71:d5:34:14:88:8d:c3:d8:1e:9b:38:
9f:cc:da:d5:d6:29:5f:15:1b:f1:f1:57:b1:97:c2:b3:80:6f:
26:a5:00:43:aa:2f:74:5a:5b:12:cb:b1:c5:6c:60:cf:40:98:
03:5f:65:34:81:00:fe:ad:1d:10:1c:31:42:68:c8:5c:6f:8e:
46:1a:41:b3:ab:7b:99:27:ae:3c:ef:7a:ae:fa:d9:c7:06:3e:
20:09:16:da:ef:4f:a5:99:71:6e:21:62:11:87:d4:fa:74:88:
41:f2:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:47 2026 by rpki-client