
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa
File: 3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa (raw, json)
Hash identifier: nSTWVJqV3FDNaApKPRXAxopjzZwOGM0ewX5zqfnCXQg=
Subject key identifier: 6D:87:CE:30:08:74:8C:5E:5B:F9:9E:07:37:53:A0:F5:E1:B0:53:85
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE0975168194DE2A10BA5C400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 98.167.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:51:68:19:4d:e2:a1:0b:a5:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=4ef22228-6b50-49fa-a4a2-29d1a189306e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:61:ab:52:c1:57:f4:6d:68:05:14:76:ef:
61:ba:62:2b:4f:4a:96:6c:ee:9f:8e:f3:d5:2a:41:
aa:04:4b:73:a8:5d:b4:00:9b:3b:50:fc:4a:19:ec:
d9:ca:5e:0a:d1:f5:71:37:97:74:b5:d1:87:45:df:
18:56:13:c9:23:38:f0:df:27:5f:97:43:99:55:1d:
87:79:8f:23:21:5c:c3:aa:82:06:84:c6:a6:e5:3e:
99:af:c5:18:9c:87:6e:27:85:dc:3c:bd:a0:d7:fd:
7a:33:ca:6b:79:52:ff:10:97:67:15:9f:d2:5f:d8:
cc:19:1e:10:95:0e:3f:3e:57:42:c1:85:dc:de:88:
88:92:65:1e:75:f8:88:e3:ee:47:cc:71:6a:1c:9d:
df:62:bd:75:e1:87:2d:8b:db:6b:06:c6:1c:6b:28:
3e:a0:66:1a:26:bb:cf:7e:f1:90:43:4e:2e:88:11:
ae:23:85:22:1f:f0:cd:52:ed:c3:da:f4:ec:0b:24:
11:3a:8f:e8:fa:9a:39:56:ff:3a:bb:13:4d:37:a6:
54:1f:84:41:89:d7:ca:4d:20:61:0b:9f:8e:e7:1d:
a4:36:85:89:e0:62:1a:ac:34:5c:3f:9c:86:b6:d7:
60:8e:a0:79:79:ae:47:78:8e:57:c7:ee:27:be:0a:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:CE:30:08:74:8C:5E:5B:F9:9E:07:37:53:A0:F5:E1:B0:53:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.167.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:cc:a1:2b:ba:08:12:59:cf:92:89:14:47:49:36:bc:8b:8b:
cd:3b:2d:31:61:ea:e5:2f:9b:ee:27:21:74:95:e2:c0:d0:f0:
ff:e8:33:3f:7a:6b:8a:8c:fc:5a:45:84:03:49:3c:08:8f:b7:
c8:d3:4a:d6:5a:bb:df:1e:50:7f:6d:99:c3:07:6c:0b:b3:42:
d9:a0:3d:7d:cc:8a:13:cd:82:85:b2:49:59:25:99:77:d6:9c:
0f:44:7b:6c:58:fb:11:5e:a3:6a:2f:7f:b8:d3:ec:1e:1b:d6:
0c:f5:9e:9c:7c:57:89:b5:50:c8:76:2f:e6:56:b0:7d:7c:ef:
27:14:e9:a9:a9:fd:be:bf:25:8d:be:09:a9:a1:7a:bb:03:71:
c5:db:eb:ad:dc:64:06:aa:b9:b5:ae:1c:79:8a:b3:ec:ab:8f:
a4:82:26:30:4e:1c:c0:8d:88:7c:92:27:d8:7b:ff:0e:3d:56:
4b:e1:53:e9:4d:df:b0:de:e3:ab:37:99:b0:a0:b1:23:29:c2:
4e:f2:52:51:06:24:21:d0:bc:ca:41:8e:a6:34:dd:aa:72:23:
47:b7:ea:aa:f1:59:47:8d:2a:9d:6b:c1:50:09:48:4f:11:55:
60:83:70:a3:95:17:57:a7:49:4b:e8:22:59:ec:47:64:c0:ee:
b0:50:6f:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl1FoGU3ioQulxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
NGVmMjIyMjgtNmI1MC00OWZhLWE0YTItMjlkMWExODkzMDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSthq1LBV/RtaAUUdu9humIrT0qWbO6fjvPV
KkGqBEtzqF20AJs7UPxKGezZyl4K0fVxN5d0tdGHRd8YVhPJIzjw3ydfl0OZVR2H
eY8jIVzDqoIGhMam5T6Zr8UYnIduJ4XcPL2g1/16M8preVL/EJdnFZ/SX9jMGR4Q
lQ4/PldCwYXc3oiIkmUedfiI4+5HzHFqHJ3fYr114Ycti9trBsYcayg+oGYaJrvP
fvGQQ04uiBGuI4UiH/DNUu3D2vTsCyQROo/o+po5Vv86uxNNN6ZUH4RBidfKTSBh
C5+O5x2kNoWJ4GIarDRcP5yGttdgjqB5ea5HeI5Xx+4nvgpLgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2HzjAIdIxeW/meBzdToPXhsFOFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZjNTBjMmYtNzQyMS0z
ZTBmLTliNTYtOGQzMGM2MTk5NmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqd7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfMoSu6CBJZz5KJFEdJNryLi807LTFh6uUvm+4nIXSV4sDQ8P/oMz96
a4qM/FpFhANJPAiPt8jTStZau98eUH9tmcMHbAuzQtmgPX3MihPNgoWySVklmXfW
nA9Ee2xY+xFeo2ovf7jT7B4b1gz1npx8V4m1UMh2L+ZWsH187ycU6amp/b6/JY2+
CamhersDccXb663cZAaqubWuHHmKs+yrj6SCJjBOHMCNiHySJ9h7/w49VkvhU+lN
37De46s3mbCgsSMpwk7yUlEGJCHQvMpBjqY03apyI0e36qrxWUeNKp1rwVAJSE8R
VWCDcKOVF1enSUvoIlnsR2TA7rBQb50=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:20 2026 by rpki-client