
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/423746ae-6820-35b3-bcbf-ff01fb1d1ea2.roa
File: 423746ae-6820-35b3-bcbf-ff01fb1d1ea2.roa (raw, json)
Hash identifier: Km3cc8ErKtqAPG0qWd7ow6g8BvKgLBd+3i3sSIZtYyE=
Subject key identifier: 7D:65:3D:4F:5F:B3:35:45:42:8F:DD:BE:F2:86:56:25:36:79:F2:18
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE09754A94EEA00990BCBCA40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/423746ae-6820-35b3-bcbf-ff01fb1d1ea2.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.104.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:54:a9:4e:ea:00:99:0b:cb:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=afd354e8-96de-457f-b60c-efe7752aa715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:56:24:b0:fc:de:b3:36:49:93:67:63:65:
4f:82:ef:33:6e:80:53:cc:93:7e:60:5d:d1:b5:09:
73:7d:de:05:a1:29:1f:cb:c8:a6:7d:b1:51:81:3a:
1f:3c:c9:9e:bf:6e:f3:fc:b3:80:75:cd:f6:41:a3:
a6:27:4b:b9:1a:99:aa:63:33:62:2a:0b:f0:e3:eb:
73:51:59:56:5f:a2:82:81:bd:5e:90:c8:5e:e3:14:
09:79:de:85:ff:b1:76:98:fd:b7:6b:da:7f:c3:1b:
95:c2:7a:81:51:70:e1:8f:bf:ff:e4:72:e0:c6:c8:
e8:29:42:08:72:4d:07:6a:3d:93:28:27:f5:83:28:
dd:2e:cd:c0:25:ab:01:23:93:97:93:2d:61:fb:5f:
14:44:01:12:41:15:53:90:92:dd:d5:27:a3:94:c9:
8d:84:53:88:24:11:a0:91:e9:a0:5c:a2:d6:98:c6:
88:b5:12:43:d2:24:5c:f4:24:7b:79:28:94:9c:58:
1d:ce:5f:28:31:63:a4:74:32:30:d9:71:27:bb:73:
39:ed:d8:57:68:69:9a:39:38:21:d7:bd:f2:64:8b:
3f:3b:35:58:dd:72:c4:26:40:f5:d4:aa:ee:9b:8a:
ec:b6:d7:2b:e9:d5:0e:2b:4d:73:b4:9c:37:c2:aa:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:3D:4F:5F:B3:35:45:42:8F:DD:BE:F2:86:56:25:36:79:F2:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/423746ae-6820-35b3-bcbf-ff01fb1d1ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.104.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:b5:42:aa:cd:71:60:2c:76:9e:b0:74:9f:1b:39:52:bd:2b:
c3:8e:20:3f:b1:16:40:97:52:e6:8e:9f:c2:20:1d:f6:f4:17:
89:61:78:4c:6e:22:17:14:e0:db:e9:d1:74:cc:e3:b9:3a:ef:
dc:ed:bc:8f:e3:61:2a:1c:8f:60:bc:cb:4a:b0:e0:59:86:e2:
f6:d3:db:2c:40:02:04:23:9a:f8:2b:78:0e:98:96:9e:95:9c:
d9:76:b1:4f:2f:b6:26:66:00:a4:79:a0:91:eb:98:b6:d7:9e:
cc:4c:09:6c:ee:00:a1:f6:ea:13:21:7d:61:22:4d:14:67:6a:
54:3d:e2:e0:1c:2e:03:34:70:3b:d9:7b:43:05:85:52:5e:72:
15:78:fe:00:f2:3a:a8:f1:b0:0d:53:53:a8:e9:15:56:69:39:
6a:1d:5e:c6:70:9f:29:87:06:53:eb:99:60:81:0f:90:01:c8:
14:20:cc:77:bd:7d:d8:c3:0a:a6:87:bf:db:70:a1:3b:39:22:
2d:14:5d:3d:c8:2a:70:ce:9a:05:ef:21:a6:ba:be:53:b3:13:
3b:12:ef:00:ee:d6:45:3a:45:98:0f:53:e9:7d:a7:27:58:46:
58:fc:e5:ef:1c:87:8b:21:78:d0:64:43:dd:3b:a7:83:27:34:
13:19:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:45 2026 by rpki-client