
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa
File: 2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa (raw, json)
Hash identifier: O4cOU/gqAzx1pG8PQw2PRF7vFhRRl3gVTyoEj3TvgTA=
Subject key identifier: 67:45:37:14:1D:D8:BA:CC:78:30:B2:97:8E:50:1D:1D:75:6A:FD:AA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4277E45844C34F3A3D56E380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 72.208.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:77:e4:58:44:c3:4f:3a:3d:56:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=2605729a-cffb-4247-a328-5e3c4e4ffacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:fd:91:33:04:e3:c7:66:32:a5:79:f7:ef:
92:14:1e:6d:05:d1:b4:fe:ba:04:ee:59:66:26:b2:
13:7f:fa:64:5b:87:31:88:2a:bf:e3:76:12:a7:ba:
1f:45:2e:91:86:3d:95:fc:48:3f:0d:71:df:4c:fd:
78:44:69:eb:3f:39:f3:4c:2c:49:bf:c6:fd:dc:09:
fd:79:ee:4a:8d:4b:c9:ba:25:ee:71:7f:ba:0b:34:
3c:0f:4d:33:af:36:46:e3:1e:37:c1:dd:e7:c5:0f:
9b:16:fe:3c:a4:35:03:e6:a8:48:b7:5e:a0:8a:a2:
5e:e2:32:e0:c0:40:6b:90:39:eb:ea:7d:f2:f5:51:
b4:f4:a2:47:9a:e0:bc:97:e5:b8:00:a6:89:a2:ca:
50:c2:97:21:24:7f:b8:ca:77:97:82:d6:15:83:ff:
24:1f:15:29:b7:0e:2a:b2:62:90:eb:59:84:85:40:
1a:c8:82:30:4d:f9:9a:b6:c8:d1:a7:c9:c7:d1:54:
ac:63:28:f6:61:d5:67:b3:ff:19:7c:e8:54:d4:57:
62:07:b8:e0:49:ee:d8:dc:e6:89:d7:e6:cc:cc:3c:
6d:8c:a9:80:9d:fe:17:07:cb:84:6a:b5:2d:95:82:
d2:c2:63:f4:64:81:a0:2b:f9:3b:92:c0:77:5e:61:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:37:14:1D:D8:BA:CC:78:30:B2:97:8E:50:1D:1D:75:6A:FD:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f022a87-34c4-3da2-ad98-0ec61c466d5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:8e:0a:59:f2:32:45:5f:9a:e7:d3:b1:3c:3a:b2:dc:80:15:
35:24:f7:75:7e:a3:0c:95:53:ff:89:a9:67:70:ad:9f:f7:7d:
09:e4:15:7d:af:28:6a:10:de:e0:20:78:24:42:48:a7:6b:e3:
2f:99:01:f0:41:73:c5:58:f6:07:01:bd:3c:93:38:8c:f7:ff:
0b:87:2c:31:8e:85:f4:85:84:58:ac:e6:5b:e6:17:4f:83:30:
6d:4d:1a:b8:3f:c3:34:dc:2f:37:c9:13:5c:0d:3e:e2:9d:cc:
e0:2a:4e:40:1c:68:e9:41:28:1d:c3:a5:26:a3:8a:80:92:94:
2a:90:fd:50:69:99:b3:ab:f9:30:d1:79:07:1b:d0:fb:5d:79:
12:e4:fe:c7:ce:77:dc:56:9e:b4:ce:1a:69:ff:96:69:1f:6d:
8d:a7:7a:3c:0a:15:ae:97:90:49:89:8e:fb:83:3f:d7:27:eb:
2e:5e:37:3c:e5:ce:6d:ff:72:17:a5:12:63:98:de:e1:15:95:
b2:5a:f7:1d:d0:8f:e9:aa:c9:30:7e:17:e7:16:be:df:74:44:
ca:24:7e:df:51:6c:d5:3b:e6:8b:16:3e:38:44:7e:5e:bc:04:
1e:f4:1b:09:56:17:ee:38:2e:bb:a3:b1:bf:4b:5c:65:42:e3:
15:7d:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:40:33 2026 by rpki-client