
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa
File: 2fef5e88-c658-32c2-aa02-a9f8997aae15.roa (raw, json)
Hash identifier: htM1aI8nURNJIvqGDEPq1lwuyYu3BH0NTGKpbnSfHn0=
Subject key identifier: 77:A1:A2:51:10:67:E0:47:74:8F:3C:86:42:58:99:64:8E:C7:6D:52
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9D4A6DE44E42B694FF713C20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 22773
IP address blocks: 68.0.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:6d:e4:4e:42:b6:94:ff:71:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=95f8258f-44c5-4070-9aa1-1a72d12c546f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:c6:82:11:4c:2a:85:2a:1f:3e:ff:b9:b5:
a5:55:ef:36:70:01:fb:0d:6a:85:ac:e4:7e:2b:18:
d5:55:1d:0a:b2:0c:77:75:6c:bc:10:03:5f:ce:a9:
df:17:45:cb:5e:08:ad:e9:db:ac:7a:09:ff:b2:8c:
0f:17:07:09:05:1b:50:4e:40:71:fe:ff:1f:a6:e3:
e0:b6:b6:2f:73:4d:67:11:88:ac:63:bf:a1:40:fe:
d0:95:4f:b2:43:30:3d:1e:b3:c2:53:13:88:21:ca:
05:87:32:2c:85:1e:c5:32:39:db:0a:4f:2f:55:62:
07:67:55:a8:b4:23:9b:ff:6e:f9:2b:16:a2:98:c6:
30:12:77:e0:f2:93:76:6e:18:bb:b8:3f:60:c4:60:
57:a3:da:78:a3:21:9d:14:29:51:f9:8d:18:80:16:
91:29:8a:8a:70:92:2d:d0:64:d4:7f:dc:37:20:f7:
4f:20:c3:d0:bb:e9:54:54:53:98:76:07:40:57:02:
0b:d3:09:c5:9c:ca:22:ee:0d:9e:32:67:2e:71:27:
5b:42:c1:2e:70:ba:69:23:85:a3:27:a6:d5:9c:49:
63:ef:37:8b:06:95:97:a9:82:a2:b4:71:d1:74:1e:
29:f6:c0:e2:71:6b:15:af:ad:27:1f:2f:10:f3:6b:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:A2:51:10:67:E0:47:74:8F:3C:86:42:58:99:64:8E:C7:6D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2fef5e88-c658-32c2-aa02-a9f8997aae15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.0.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ac:6e:d3:d8:3b:ea:e3:d4:f5:e9:44:9e:f2:0f:d5:b7:0f:
92:a5:48:69:0f:a3:49:4c:d7:90:0b:d0:53:f3:0c:e9:9f:68:
d5:ec:50:a9:29:26:82:ad:f6:f3:b1:4d:2a:43:21:9c:68:e3:
b5:04:9f:f4:27:93:3e:53:ef:09:0f:00:c4:d1:82:ce:62:17:
aa:46:4d:fb:a7:91:6c:be:ea:11:2c:18:ee:2d:eb:bc:6a:43:
f4:12:9a:68:6e:b9:d5:bc:13:c5:84:38:c5:f7:79:0b:58:c2:
56:b4:47:46:59:43:95:0d:8f:d6:00:a5:71:62:c4:ee:88:56:
39:06:7d:2e:cb:33:48:1c:3d:74:89:d0:18:cf:b0:5c:c6:2f:
59:a8:83:38:36:cf:e2:5e:be:a5:9d:6a:33:ae:0c:97:c6:cc:
1c:e5:94:6c:60:be:20:38:3e:b5:26:40:35:18:98:ac:5d:72:
61:8f:c8:19:54:0c:f6:2e:ce:fc:1a:5e:7e:3c:0b:37:a2:6a:
91:b8:38:b1:e0:9f:b2:9a:10:04:bc:59:4e:21:32:8b:e3:e8:
e9:96:34:a1:28:7f:91:f6:ee:e6:48:6c:72:c0:62:5d:65:f6:
76:d0:63:d4:69:97:3a:1e:8c:5f:23:dd:c7:bc:ca:ea:1f:8b:
fc:e1:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:10 2026 by rpki-client