
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab0022c-c71c-30b2-a22e-6a5f081cbc64.roa
File: 3ab0022c-c71c-30b2-a22e-6a5f081cbc64.roa (raw, json)
Hash identifier: A780EN3+Yq4p1d4xAQ2izDgvZPfalUA0pxCguwWRA3I=
Subject key identifier: 45:86:E1:36:A0:AB:02:B1:57:FE:52:E4:BF:08:2D:37:08:55:FD:86
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CD99D12C69862E91DDEF4E5C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab0022c-c71c-30b2-a22e-6a5f081cbc64.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 68.2.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9d:12:c6:98:62:e9:1d:de:f4:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=2539a2f1-f348-4c13-bf53-6b23d858d9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:0b:94:59:64:87:06:97:5d:df:f9:d0:3e:
b7:73:4a:36:39:11:8d:99:96:82:92:a9:b5:bb:7c:
6c:e0:d4:3f:54:82:96:3a:e1:3d:57:f5:9f:ca:e3:
65:10:9b:28:c9:cc:de:ea:d1:2a:6b:d5:8e:d1:2b:
03:78:4a:0b:13:c3:33:15:d0:0a:16:ea:bd:0e:33:
13:b7:c0:af:26:c5:dc:a1:43:0f:e9:01:61:ff:1c:
7c:7e:e7:40:1e:7a:4a:39:eb:89:83:bd:58:ed:c6:
a6:c8:1f:43:b9:34:67:ad:3b:a8:a4:ff:7b:a7:98:
ea:9e:1f:93:20:58:89:e8:97:32:82:69:49:0d:4f:
1f:46:9d:34:ae:07:d0:7a:82:94:85:c2:ce:54:82:
ed:e4:4d:09:fe:28:25:79:c6:fa:1b:dd:03:31:8b:
21:53:0e:16:c9:f1:35:eb:95:71:bc:66:6d:66:bc:
9a:eb:d5:8d:a9:2a:37:f2:5d:2c:39:c8:77:06:3d:
0d:a4:77:8a:0b:b6:59:3c:1f:28:b5:fa:ab:90:f0:
03:c4:98:71:9f:ee:ff:9e:7c:d1:7e:9a:6d:8e:ed:
5e:91:0a:76:3c:b4:f9:1b:9d:2f:3a:0f:62:0e:33:
b1:2c:12:6f:3f:df:3e:61:1b:bd:9b:ac:11:c6:d4:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:E1:36:A0:AB:02:B1:57:FE:52:E4:BF:08:2D:37:08:55:FD:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ab0022c-c71c-30b2-a22e-6a5f081cbc64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:40:9a:dc:0c:f4:b9:d0:2b:f3:33:c6:95:44:a8:04:f6:16:
15:c8:39:c9:ee:d5:48:ac:e5:9b:cf:c8:ed:ce:5e:70:29:4f:
70:20:0e:94:fb:07:c9:3e:7d:0b:f3:9b:5c:e3:4c:01:af:f1:
37:c6:c7:98:40:5d:41:d1:2e:48:c7:53:4c:64:5b:a2:27:19:
b1:bc:04:2d:14:a2:ca:6d:7a:0e:2b:ce:8f:d9:ea:de:e4:20:
29:99:3f:6c:a4:a9:39:06:1c:79:e4:7d:0d:84:68:0e:37:10:
0c:c7:4c:ee:41:d1:76:4d:4d:13:62:c6:b1:5b:76:35:24:0a:
0f:05:85:dc:57:00:d8:04:7d:5f:6f:5a:57:c8:67:59:38:cd:
43:f7:9c:52:ab:5c:ca:89:20:3c:f6:4c:0a:9a:fb:65:93:c8:
11:17:e1:3d:5b:33:87:1c:e5:e7:a5:f2:a8:c9:c7:f4:fb:25:
6d:23:6c:bd:97:ca:30:b7:da:75:77:20:32:84:77:10:ad:26:
7a:9a:09:32:47:fa:cc:ee:31:88:2d:78:1a:1b:6f:5b:f6:a1:
d1:8f:93:ce:53:c3:79:f1:36:66:d6:d9:86:e4:cb:92:66:c7:
0b:14:06:4e:f4:2c:39:f3:a0:d7:f7:0a:3a:a6:52:44:32:46:
96:84:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:42 2026 by rpki-client