
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa
File: 3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa (raw, json)
Hash identifier: RxMoMbgFBg6qrcN76hmj2X6slCch7S+H0WDGmzbyPc4=
Subject key identifier: FB:C7:0E:32:BA:ED:DB:E7:0F:04:9B:08:CB:A0:EC:D6:9B:29:08:55
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9EB000A63889BBA93507E500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 22773
IP address blocks: 70.172.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:b0:00:a6:38:89:bb:a9:35:07:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=f72afcd4-2775-4897-9209-36b542c513e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:65:ae:a5:10:1a:f3:fc:54:71:e3:e4:ff:
be:cd:a3:c5:55:bc:42:20:7f:f1:74:7a:07:3c:ed:
5e:a2:bf:d9:57:3d:ec:49:f9:9a:f2:4c:38:a7:bb:
f1:fa:83:fe:cd:19:9d:be:2a:10:5d:39:a4:97:a2:
ee:df:b3:2e:4f:17:10:3d:cf:a1:ac:73:e7:9d:75:
d0:7b:8f:fb:26:41:52:8f:57:79:fd:86:66:8b:67:
42:d0:31:dc:54:df:23:45:1e:fa:fa:d4:73:02:af:
c2:a4:0d:40:6a:ff:50:72:bb:59:df:18:74:d7:e2:
9c:a3:32:5f:e0:74:43:3f:51:42:6c:da:01:ec:75:
55:60:52:a9:f5:ab:6f:6b:f5:43:be:0d:e3:7e:11:
37:a5:97:7a:3b:70:99:e8:0b:58:9a:01:89:7f:b1:
d5:08:ee:88:9c:45:98:ad:83:5d:b3:65:0d:1f:dc:
b3:ce:40:20:d7:24:5f:07:91:4a:df:ec:8a:88:8b:
e8:85:43:c1:e5:09:32:02:a7:33:66:44:b8:3c:de:
a3:34:19:2a:3c:35:5f:4c:8d:65:2b:67:97:32:d6:
f3:bf:fa:1b:42:95:81:80:f9:4c:63:4c:cb:78:3d:
31:c8:87:76:5e:2d:61:e7:e4:69:27:2f:be:28:4e:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:0E:32:BA:ED:DB:E7:0F:04:9B:08:CB:A0:EC:D6:9B:29:08:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3867adae-3a5f-3a9b-b86f-4eedc8ef0880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:80:cf:36:3c:85:6c:06:42:c7:e9:1a:1e:24:67:6f:c7:35:
77:63:c2:83:9c:d1:fa:24:0e:7f:2f:2d:0f:81:38:50:69:c4:
68:9f:f8:c2:ee:08:4c:20:41:62:d5:57:a4:82:dc:0f:16:bb:
db:af:4a:68:13:69:e0:73:b3:65:c6:6f:38:2c:6c:56:2e:bf:
60:86:56:fa:45:43:b1:2a:66:06:9a:a0:3a:ab:a0:c5:b3:2a:
70:58:5a:a7:24:b0:55:56:29:7a:4b:a4:5c:5b:a3:69:9b:1f:
ce:c5:dd:b1:94:2a:db:fb:a2:2f:a3:69:29:6c:08:ad:53:f4:
02:c9:09:fe:5a:cf:d0:65:11:27:80:3b:f2:55:99:b4:71:a8:
94:2a:07:a6:7b:d5:e1:2a:39:ed:04:8e:87:7d:42:96:8d:1a:
14:8a:64:b6:d1:6d:4f:5e:45:39:fc:3f:a9:01:85:e5:bf:b4:
db:fe:8f:40:79:31:c8:c8:08:36:35:62:68:d8:cf:67:d1:56:
63:e3:2d:6b:ef:47:86:6d:23:0a:4d:32:50:cf:5f:dc:30:b7:
ea:ee:2d:42:db:5b:21:43:e5:76:4e:c8:d9:29:01:52:6f:05:
3a:2f:fa:67:8e:2e:24:ec:9c:ee:b2:94:b2:20:37:c4:8e:44:
69:e8:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:34 2026 by rpki-client