
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3676aa15-f309-3d96-854c-d1415a4fb69c.roa
File: 3676aa15-f309-3d96-854c-d1415a4fb69c.roa (raw, json)
Hash identifier: Rn6KNgENfXYVRQTXRIaKDxK6gcEhZVq4qX/P3w1vYeU=
Subject key identifier: 6F:37:27:47:FE:09:C7:C1:8B:38:EF:7B:77:36:84:E7:C2:83:A6:3E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA0152058851D7B3B76D6A3A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3676aa15-f309-3d96-854c-d1415a4fb69c.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 22773
IP address blocks: 72.210.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:20:58:85:1d:7b:3b:76:d6:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=c7b3d28e-9001-495f-be58-7a0b56bf2fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:08:12:35:c5:41:bc:9f:30:71:1a:c5:d6:
98:90:f2:3e:0b:33:0b:77:b4:cc:fe:79:ee:56:fa:
d1:08:79:08:7f:fa:b8:75:f7:4d:1c:17:99:ff:f5:
0d:04:f0:f8:3c:5a:40:bd:96:62:f0:62:84:6d:8e:
73:7f:1e:d1:32:a8:64:fa:6f:94:c9:0c:ce:37:a0:
7c:a0:3d:30:a9:ef:7e:94:45:62:d2:d6:01:d3:bf:
8e:5b:ca:e9:c2:01:96:9c:6e:a4:5b:76:ee:4d:07:
36:2c:e6:db:ec:59:7d:84:20:f3:9d:8d:c5:e6:13:
04:84:7a:56:c9:19:a3:74:eb:8e:d5:20:60:b4:d6:
82:b5:0c:f2:6c:46:51:23:1d:b2:62:ea:8c:03:bf:
c6:f1:68:11:57:75:27:6d:77:56:3a:8d:5e:dc:54:
91:31:44:d7:62:d8:62:e7:1c:1e:04:6b:6d:8f:a6:
8c:6b:ea:6c:28:de:58:e5:0e:16:d0:db:ee:88:28:
b4:7e:89:13:3a:f7:ec:89:27:c4:4f:6b:0f:76:d7:
24:d4:2e:a4:75:da:89:c9:b0:fe:75:67:57:1a:80:
af:1b:3f:0f:42:5d:04:14:14:df:24:d4:b6:20:5b:
e2:18:26:7c:df:45:db:e4:67:5b:95:fc:88:16:5a:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:37:27:47:FE:09:C7:C1:8B:38:EF:7B:77:36:84:E7:C2:83:A6:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3676aa15-f309-3d96-854c-d1415a4fb69c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.210.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:47:c1:d2:d4:8d:c7:1b:b8:26:e1:03:fa:75:0e:2b:9b:c3:
12:a2:f0:85:d2:77:9d:4d:35:2a:d2:91:62:c7:10:6a:bc:11:
fc:7a:a1:f3:4e:93:57:97:c6:9b:cf:30:8b:fa:03:c4:81:ca:
8d:30:d2:86:a6:cc:3f:1a:3c:f1:af:08:71:4c:93:da:aa:24:
4b:ee:f4:16:95:7b:29:88:a5:51:f4:a7:0c:f8:ad:b0:32:8b:
d5:cb:7b:f9:bd:23:67:bc:5b:99:82:93:c1:85:74:a8:bd:b2:
1b:da:78:6d:98:ae:84:95:b0:2a:fc:dc:fb:7a:9c:19:60:bd:
c0:23:31:0a:71:0e:05:cb:dd:e9:54:d7:df:33:21:96:f4:84:
16:fb:75:0e:fa:fd:e4:20:d4:cf:81:36:4e:15:e9:4c:62:59:
6b:a9:b2:ac:84:8c:02:07:a5:61:5e:90:02:00:6f:ad:cd:41:
2a:00:0f:23:77:37:20:c5:aa:d3:5e:65:11:b8:ad:02:c6:b7:
cc:8b:2c:df:0c:e3:0c:f9:6c:16:7e:01:35:3a:36:f5:df:88:
79:93:71:a4:7b:74:d8:38:4f:69:3f:43:da:09:40:e7:1d:f2:
0a:ba:82:c3:0b:eb:3a:b7:82:65:dc:b3:00:8e:10:77:64:15:
06:f0:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:00:24 2026 by rpki-client