
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/398a437f-c867-3878-8cc9-c06ec74c2ac6.roa
File: 398a437f-c867-3878-8cc9-c06ec74c2ac6.roa (raw, json)
Hash identifier: FleyRuIfKegrzhICdNeJgN1QFj5d5dRFA4OPXVQfFEE=
Subject key identifier: 52:06:C7:CB:78:0B:A2:99:35:7F:8D:E6:05:91:DE:05:D5:44:F4:17
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E15E460A3D1663025D75BA040
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/398a437f-c867-3878-8cc9-c06ec74c2ac6.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 22773
IP address blocks: 70.172.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:60:a3:d1:66:30:25:d7:5b:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=a8a1c83d-161f-43bc-9d45-9600d7ed4e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:a5:76:b0:f7:c1:b0:a2:3e:7a:ef:89:43:
e2:38:0e:a7:df:28:43:89:3d:14:be:cd:7c:83:77:
a4:00:82:56:46:8b:6f:e1:47:6e:1d:35:f3:55:98:
8d:e6:af:d8:3c:dc:b7:86:c9:d2:6a:fd:ad:61:e0:
54:82:79:eb:6e:da:42:6d:96:5b:12:20:24:3f:b6:
f1:da:70:18:bf:e6:3a:15:84:9d:9c:ed:64:94:e2:
6a:72:9a:fe:3f:7c:13:f0:58:e7:bd:96:39:79:0b:
1c:eb:fd:a6:cc:c9:ab:77:38:ae:ef:4c:d1:71:17:
3a:dc:23:be:2c:d8:2d:0d:f0:66:96:52:f6:c1:df:
de:76:24:ff:8d:b2:23:26:dc:23:1b:b3:47:f9:5c:
03:e4:85:7e:03:30:2a:69:5a:62:7e:90:1a:a7:d7:
a6:f7:c0:6d:5f:4b:05:a5:3b:84:b4:cf:47:ec:df:
b5:4d:b8:f2:2e:2f:84:db:3b:e8:3f:1a:36:d9:b6:
4a:74:46:cc:c4:1f:01:84:79:72:db:8a:14:bb:ec:
df:24:10:85:2a:b5:ba:3d:f0:06:69:89:fe:61:e0:
89:0a:cb:07:35:fc:95:86:a3:95:b9:83:79:8a:a7:
a9:55:e4:da:0e:a9:b8:7e:be:8f:fd:7a:e1:48:f0:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:06:C7:CB:78:0B:A2:99:35:7F:8D:E6:05:91:DE:05:D5:44:F4:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/398a437f-c867-3878-8cc9-c06ec74c2ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:7e:30:0d:d4:f1:94:74:5f:64:b0:e6:1e:ec:bc:4c:be:4c:
c3:30:57:42:83:fc:3e:49:56:cb:50:fd:ba:69:a2:3c:ef:3d:
65:6a:89:68:89:79:62:64:71:b3:5b:44:0c:26:2d:1e:ec:06:
63:ff:7e:8e:4b:8f:45:f2:ab:10:9f:58:e4:68:33:82:f3:7e:
a1:71:e9:50:99:c2:62:fd:3d:8e:aa:4a:55:b9:f4:6a:6b:b0:
33:10:5f:21:6e:c7:ac:e9:52:df:c5:f6:0e:bf:c8:68:b6:9e:
b6:08:f6:6a:27:ac:02:e7:e5:e5:54:dd:9f:87:f9:85:96:5d:
b3:0a:5c:da:59:6d:3b:03:81:c0:5b:59:33:11:8b:c4:cb:dc:
54:71:9d:32:c0:22:8e:eb:a6:46:8d:30:17:48:18:02:93:e8:
0f:bb:3e:a0:d0:0f:c2:30:62:c2:f4:89:76:bc:52:d2:60:eb:
73:dd:de:78:02:f4:2b:ce:8b:36:79:98:73:c9:5b:25:05:d3:
84:c5:bf:d3:22:42:48:1c:e0:8c:b3:40:38:30:92:2a:a5:3f:
c8:b6:2a:12:91:54:04:68:b9:65:74:dd:91:9a:41:a6:1d:7c:
45:11:f1:47:f5:9e:ab:34:09:40:67:ab:51:57:a4:c1:b4:88:
05:78:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:39:12 2026 by rpki-client