
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3248e6fc-e32d-31a1-972c-f2023d2ef848.roa
File: 3248e6fc-e32d-31a1-972c-f2023d2ef848.roa (raw, json)
Hash identifier: XHJGWushPFABkjHljGsgaQBbJfVZG4fsAffXOj6D8Z8=
Subject key identifier: ED:DF:65:46:35:01:E4:21:9A:B4:2F:F4:98:1C:3C:7D:6B:85:62:01
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE097B3D7B0D0F14FDB092680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3248e6fc-e32d-31a1-972c-f2023d2ef848.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 72.203.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:b3:d7:b0:d0:f1:4f:db:09:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=62aa1146-08ba-4588-84a4-dc72df06d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:ba:f1:f8:b9:85:21:51:98:7a:84:61:29:
49:51:c6:56:b3:e3:3b:f9:82:1f:1b:7a:3f:e0:4a:
97:dc:e2:77:98:66:34:2e:93:77:9d:50:d6:4c:d7:
92:bc:39:32:81:87:fa:51:06:27:27:ce:39:8b:6e:
af:87:2e:86:30:45:fd:8d:40:61:22:1b:b0:d2:89:
04:c3:4f:3f:54:0b:c4:34:f4:2f:c4:97:0d:3d:18:
52:c3:a3:15:79:8f:06:50:8c:91:11:0f:69:d8:58:
6d:13:08:53:46:af:a9:aa:26:04:99:50:bd:18:6d:
80:7d:f5:d2:b3:d3:ac:0e:ce:0a:2a:b3:31:f5:aa:
62:74:40:ac:ea:01:d6:fc:c2:44:a9:b5:57:4b:00:
f3:d6:81:dd:37:8f:cc:05:75:4f:23:ae:7b:93:f0:
84:07:c6:7c:64:92:d0:85:d5:2f:c2:49:c5:19:f1:
7d:4e:38:27:43:a9:ba:1e:57:bf:19:41:bc:7e:40:
bc:fe:44:ec:67:0c:28:e5:ee:80:e5:5c:45:6f:e3:
d5:46:80:44:5c:30:73:d8:60:ab:ac:d5:73:53:a8:
df:42:26:94:77:28:2f:ce:66:9c:f6:e2:5b:66:24:
1a:b9:90:59:2d:a0:19:ca:24:d2:a0:2e:ee:0e:3c:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:65:46:35:01:E4:21:9A:B4:2F:F4:98:1C:3C:7D:6B:85:62:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3248e6fc-e32d-31a1-972c-f2023d2ef848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.203.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:37:11:bb:33:83:09:22:87:8b:2d:33:df:e0:e7:f0:5e:c8:
80:e3:9b:3b:d9:0b:87:b7:56:6c:e6:52:75:d7:ac:3b:36:ee:
38:cf:8d:6d:2b:09:d4:5c:0b:76:9b:f9:c0:7f:91:00:9d:f1:
5c:ec:04:68:c3:04:72:b7:81:a4:96:e6:19:12:e8:59:38:70:
a6:30:34:4b:b2:06:c3:c4:c0:0b:f6:85:a8:06:64:28:31:dd:
63:59:13:b0:ea:a1:67:e1:e8:1c:a2:e0:87:42:21:72:fe:62:
82:b7:fd:1f:38:d2:cb:79:57:35:53:6b:ed:04:b6:24:c9:ae:
05:d1:29:ba:b2:69:31:e5:24:49:3a:91:e4:58:cd:5c:ba:bf:
5e:99:77:50:eb:38:12:90:3d:37:3a:b4:90:86:b5:cf:36:5e:
fb:18:e0:d2:f0:f9:02:31:4d:c3:cf:9d:2e:f4:95:9a:b3:a7:
0e:aa:52:2e:74:bd:20:61:a1:ed:da:5a:0c:96:8f:63:8e:4a:
f1:a0:e2:9b:f6:05:8f:b8:81:fa:a7:94:7d:93:23:40:e7:26:
24:a0:8c:ed:aa:97:c0:e1:45:d5:51:a4:a3:08:b6:98:23:33:
12:f1:0a:ae:3f:b2:f4:73:9e:ef:80:57:92:39:6a:5b:9b:3a:
af:7c:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:56 2026 by rpki-client