
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dff74a9-9aa6-3263-bd3a-3262946bfb27.roa
File: 3dff74a9-9aa6-3263-bd3a-3262946bfb27.roa (raw, json)
Hash identifier: usTM/WDIvaiAm+d2MQF3kVY/DkVwzRsaSKNOr23iDjI=
Subject key identifier: CF:71:D8:8D:86:4C:2E:6F:AA:AE:95:69:6B:80:79:C7:04:0B:16:49
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA0155FA1C37754E18F4A7DC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dff74a9-9aa6-3263-bd3a-3262946bfb27.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 22773
IP address blocks: 72.210.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:5f:a1:c3:77:54:e1:8f:4a:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=113e1aca-80fb-47ab-b497-455283150e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:68:b5:05:98:61:cc:ef:3c:b7:50:bc:85:
61:16:0f:a6:57:9b:98:93:9d:e4:7c:32:c1:c2:32:
be:09:de:04:be:55:e1:44:cc:21:29:8b:59:72:12:
d0:ab:c4:48:82:ec:fd:08:7d:58:9c:3d:39:04:e6:
59:ce:37:85:63:60:74:60:08:e4:ae:5e:ea:8c:05:
b5:3a:d6:a4:ce:37:64:e1:69:be:76:e1:79:34:2b:
8c:7f:12:aa:fe:75:7f:65:8e:19:da:f4:8b:2c:6f:
9f:0f:9e:28:c0:97:5c:b5:ee:cc:52:1e:9f:09:12:
02:f7:8e:97:c0:d8:7c:a8:72:a6:d3:cf:2e:98:3f:
95:27:dc:5f:3d:ab:c4:af:ad:69:b0:16:76:d6:e3:
34:f1:88:54:86:1d:50:7e:85:8f:8f:d8:52:3e:4f:
4f:0a:f3:de:d9:44:25:c3:06:a9:75:e1:2f:16:49:
6d:77:a8:39:e3:d4:7e:e2:81:6a:21:4a:03:e2:83:
64:46:5e:18:14:d1:60:75:fe:07:cc:95:36:20:9d:
29:62:a6:11:ef:0c:28:26:c9:36:28:9c:f6:44:aa:
6c:9c:52:a5:44:c6:24:0a:f0:37:ea:f5:b7:78:cd:
0c:75:89:66:6a:e1:04:39:53:fc:cf:b3:2d:20:59:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:D8:8D:86:4C:2E:6F:AA:AE:95:69:6B:80:79:C7:04:0B:16:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dff74a9-9aa6-3263-bd3a-3262946bfb27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.210.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:9d:85:9f:f0:1b:9b:ba:f6:68:3e:50:36:5a:55:3f:18:88:
28:a4:73:b6:ab:f3:71:a9:97:2e:2e:88:1a:99:11:e7:5f:f3:
4f:c0:24:43:e5:09:53:35:ed:e8:c8:dc:aa:8c:06:ab:12:89:
be:30:d0:29:94:6c:a0:47:a6:0f:2b:ba:37:cd:0f:17:b1:e3:
bc:3f:f0:7b:b6:9f:5f:c0:5a:de:bf:d9:7f:5e:e6:01:78:25:
11:37:4d:82:d7:a6:f7:b1:1c:6e:51:46:51:a3:fa:f2:30:63:
04:80:0a:91:99:e9:01:5a:b2:11:73:52:0e:23:52:74:30:5e:
f8:c2:31:d0:f2:98:42:38:3d:35:70:22:bf:5a:1b:a3:0d:c3:
02:62:f8:cc:a2:19:81:5b:07:4e:2d:65:a3:19:85:a5:ef:a7:
4c:5c:18:4f:17:5c:c7:cf:74:b8:d8:b5:ba:b8:4e:30:84:c1:
3e:97:d2:8e:69:da:ce:db:3a:7f:75:e3:40:92:0f:03:e5:9c:
61:66:49:f7:6c:e4:57:f1:c1:e9:18:24:84:ed:55:a4:fe:38:
8e:3f:34:b4:77:36:e1:a5:f1:2a:8f:1a:80:1c:9b:e2:97:d6:
b2:36:8b:1f:e1:d2:f4:30:42:f3:8f:06:32:ca:8d:e9:88:73:
7d:ed:71:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:30 2026 by rpki-client