
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa
File: 3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa (raw, json)
Hash identifier: kRHHD1suRHvv9WHxgHzzN32HFMueHX/52jaCulNwHTU=
Subject key identifier: 66:B6:69:39:28:1B:BC:C2:09:0F:EB:BA:F5:7B:7F:9B:78:D6:22:AC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDDCD3562CBC5141BD25DDB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa
Signing time: Sun 15 Feb 2026 02:00:32 +0000
ROA not before: Sun 15 Feb 2026 02:00:32 +0000
ROA not after: Sat 16 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.109.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dd:cd:35:62:cb:c5:14:1b:d2:5d:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 15 02:00:32 2026 GMT
Not After : May 16 01:00:32 2026 GMT
Subject: CN=2e58c87e-8929-4f56-8330-25c25898d64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:74:1f:91:1d:52:7f:9c:1c:22:d3:29:6d:
d5:36:1e:58:59:80:46:e8:74:56:a0:ad:1a:37:3d:
f7:d8:a5:d8:04:be:62:e8:9c:f4:da:79:f7:dc:70:
a6:1c:60:2e:bb:60:49:17:be:c5:30:74:90:a9:c5:
27:6c:6f:fd:3f:ae:2c:0f:a8:32:c0:62:6e:6e:a3:
8b:4b:54:9e:48:f1:e0:19:d7:73:91:0d:d6:78:b1:
ab:cb:1e:da:5b:fb:8a:3b:6f:bd:e2:c0:c3:d1:fc:
03:3d:14:d2:86:5a:d3:3e:a1:16:a6:6b:f0:bd:a7:
51:a2:83:c2:ba:43:82:1f:5d:c1:3c:08:80:97:2e:
78:4b:5c:fc:5b:5a:51:b6:b5:93:5b:16:7c:53:b3:
d2:aa:8c:88:bc:61:72:f8:cb:e6:94:9c:e1:01:4c:
b7:36:b7:f7:65:5c:63:bf:ad:ee:52:00:f9:1a:1f:
be:fa:15:49:10:a1:f5:35:c2:ad:79:20:c7:c0:4c:
76:97:94:3c:d0:ca:0e:90:a3:85:ee:b0:89:ba:cf:
17:8f:47:7b:f4:25:1d:70:59:dd:b9:81:f6:d7:e8:
7c:3d:2f:46:b4:13:4f:8e:09:6e:e2:bd:48:e1:ea:
6c:fd:6f:dc:66:9d:97:d0:1f:84:ab:55:ba:2f:be:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:69:39:28:1B:BC:C2:09:0F:EB:BA:F5:7B:7F:9B:78:D6:22:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.109.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:15:7b:46:0c:7a:13:ed:e1:23:84:f1:11:12:84:82:80:e0:
c4:bd:ae:1a:9f:0d:e9:ed:54:fa:23:f8:53:17:1f:1a:3a:71:
6c:51:25:04:14:04:78:80:57:6c:09:f2:75:e9:53:db:ba:75:
68:ec:51:f6:5a:77:85:d0:bc:8c:a9:74:da:cc:00:b6:43:a0:
bd:14:53:7b:f5:e0:84:54:87:1b:2a:c3:ed:b5:00:57:14:38:
45:4b:26:52:a5:fa:ca:fa:d7:2f:55:08:58:83:b8:0e:ff:55:
d6:6f:36:4d:7c:b8:3d:7e:b7:31:38:0d:97:45:49:f6:8f:5c:
0b:a5:80:d0:2c:f4:87:5f:30:26:8f:56:2c:fa:81:ca:c9:a8:
51:48:04:4f:95:34:45:29:ae:fe:18:ff:70:55:3f:ad:20:b4:
75:68:9c:06:a9:02:b9:4b:ac:55:a0:f8:42:e9:e3:c1:c6:2e:
a7:80:64:a4:f1:6d:ac:f6:9b:47:68:41:55:b1:5f:7c:cf:82:
e9:58:f2:13:bf:ef:e7:d3:5d:92:05:81:02:92:20:e0:17:a7:
4a:db:f9:4d:5d:5c:00:0c:fb:37:b4:e3:74:e5:c5:8d:20:1d:
eb:61:55:16:61:17:96:9e:86:4f:59:e3:4b:ba:e9:2d:7e:be:
51:3e:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:44 2026 by rpki-client