
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4058e942-c9cc-3e4e-82b1-5c2e00d17a62.roa
File: 4058e942-c9cc-3e4e-82b1-5c2e00d17a62.roa (raw, json)
Hash identifier: EGTgo0DuIXIYvlbVW08dHvAEgtxaejKop06GDHZlg/0=
Subject key identifier: 4F:1B:E0:C7:48:66:37:3D:31:CC:54:CD:07:C6:6A:75:08:AE:A4:04
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA01566265F8194F6CE9A7880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4058e942-c9cc-3e4e-82b1-5c2e00d17a62.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 22773
IP address blocks: 72.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:66:26:5f:81:94:f6:ce:9a:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=6922eefa-8194-4744-bd3d-ecdcbdc922a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:bb:49:11:3d:1a:1d:bc:6a:c7:86:35:d9:
93:7b:1a:f5:b5:8c:62:e5:c9:25:ff:e2:fb:52:35:
9e:ae:58:44:8a:ed:e2:ea:4d:0c:8c:e5:c0:82:57:
96:5d:97:41:70:89:12:3b:26:bd:65:0c:50:77:8d:
d2:54:ae:1c:aa:38:36:4c:7c:0d:71:d3:05:5f:13:
ff:b8:25:3b:c0:c2:83:92:90:7c:52:f0:62:dc:c4:
21:ba:6c:96:89:54:b6:80:a8:de:ba:15:8a:de:8e:
a2:d1:1b:7b:19:58:af:d0:4f:bb:3c:76:7c:d8:98:
ef:76:eb:c0:29:dc:61:59:b2:2d:6f:5a:38:0d:41:
28:55:73:09:ff:4a:2e:08:df:48:c6:33:dd:91:48:
81:62:f7:82:52:e3:56:29:99:50:c2:69:85:81:82:
96:c6:7a:bf:44:14:df:35:ed:4e:a8:14:35:96:81:
05:19:9b:62:74:62:f2:12:1d:d6:f8:a5:27:66:2f:
10:8c:76:6f:3b:e2:50:b8:73:f1:42:30:6f:3e:4a:
01:46:1d:8d:ac:0a:0e:6f:69:ca:a2:58:48:fa:fc:
b8:1a:ec:ef:ca:de:ac:47:56:e7:03:9a:38:7a:d6:
7d:53:5c:6a:d5:c1:07:2d:b3:ed:dc:4c:71:47:db:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:E0:C7:48:66:37:3D:31:CC:54:CD:07:C6:6A:75:08:AE:A4:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4058e942-c9cc-3e4e-82b1-5c2e00d17a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.212.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:cc:e3:99:46:f9:9e:95:70:4c:26:bc:cb:a8:58:66:59:96:
4f:5f:79:a1:10:8a:08:b4:f2:e5:b9:05:56:cb:af:a8:1f:c0:
33:e9:41:30:43:e4:53:e5:d5:b5:fd:e3:d7:34:5c:60:27:ad:
e5:f8:ec:e9:99:48:88:10:d3:3f:67:47:76:9b:86:f6:a7:42:
b1:b4:1b:9f:17:4d:04:29:c3:8d:87:10:97:87:25:9a:35:51:
88:11:c3:ed:eb:30:f3:29:a8:15:2d:1c:50:85:c2:67:a7:05:
85:1f:3a:56:22:5f:f1:21:5e:fb:e8:09:eb:9a:c3:9e:b7:88:
b4:d6:03:4a:1a:f0:ab:94:76:db:d0:b0:b4:a2:80:2e:da:6a:
01:9c:21:32:2d:21:a0:5e:a3:91:23:c6:c8:ea:13:fb:59:07:
31:53:2f:3f:4b:4e:28:b8:c4:dd:86:1a:cd:54:e6:fc:13:0f:
ff:1d:20:b5:40:0d:7c:4d:d0:83:2b:5b:81:e0:c7:02:89:87:
f6:1a:dc:15:7a:e3:99:79:19:e3:81:aa:7b:ce:a3:aa:65:7a:
e6:d6:bf:f3:1c:3a:9d:69:cd:de:98:47:d4:44:c9:ec:ab:33:
a0:6c:69:a8:12:df:7c:ad:42:f6:4a:5d:7d:e6:33:a7:33:f3:
4f:00:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:38 2026 by rpki-client