
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa
File: 42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa (raw, json)
Hash identifier: GQTLPPapm6IXMHq+Fy2pUq+x13zLWHv2/qaKsq093dc=
Subject key identifier: 33:31:50:7B:BE:76:84:B3:4F:88:A7:97:D7:54:3D:76:9A:B8:2C:00
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9EAFDDD69D146006F0C5D220
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 22773
IP address blocks: 70.172.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:af:dd:d6:9d:14:60:06:f0:c5:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=aa1feb99-0afe-4d37-a657-2f8e803ffeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:78:c9:3a:2c:cd:9e:7c:a4:ca:55:62:d1:
63:6b:d7:66:91:2e:6d:6b:1c:8e:09:6b:c5:82:f8:
58:94:91:44:ef:ee:43:bd:4b:0e:f2:34:67:2d:f2:
a5:ea:68:26:f9:77:9c:46:37:22:f0:61:4a:c2:a5:
ee:ca:c2:4a:cc:ab:a5:43:8e:ee:7b:a3:62:2d:50:
d6:5f:1e:67:76:3c:5b:af:1a:37:89:c4:fc:46:56:
ed:52:9e:e4:d1:88:1e:92:df:15:14:f6:36:32:5a:
d8:3c:a9:46:0b:2b:12:3b:7c:57:14:34:e1:5a:78:
8d:02:c7:77:08:ca:c8:ec:b9:58:17:0c:6e:66:46:
07:3f:69:1c:6b:4e:13:42:3f:f9:ae:78:a3:8b:66:
97:40:9b:c9:76:53:56:31:02:33:d9:0b:cf:d6:58:
c3:97:7d:da:3f:62:31:d9:58:a6:56:3c:bc:1f:9c:
66:3b:14:88:e5:33:af:2b:0c:e9:aa:90:98:cd:db:
07:33:9f:fe:ba:c9:d0:fe:c6:7c:a2:d6:3f:f4:f7:
ae:9f:5b:53:e4:f0:a2:10:30:9d:16:f2:59:b7:7b:
a3:3d:81:2e:f8:b8:31:08:52:1b:b9:c7:c2:6a:c7:
ae:6b:0f:f7:af:55:17:5e:58:6d:76:85:13:aa:d5:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:50:7B:BE:76:84:B3:4F:88:A7:97:D7:54:3D:76:9A:B8:2C:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:f6:46:d6:e4:bc:1a:ed:5d:99:5a:be:f6:b4:50:ff:8f:c7:
73:43:29:a0:5e:19:33:30:8f:24:f9:2d:8d:ac:62:4c:f0:30:
6a:6a:10:07:86:dc:8b:6c:86:42:93:00:ec:b8:fa:a3:21:3c:
d1:33:21:af:b3:07:ff:28:e3:ba:1f:32:14:da:65:98:6a:a6:
f0:66:5c:e7:15:3e:4b:39:65:49:b7:73:f0:db:fe:9a:e6:c3:
16:aa:de:96:30:10:95:1d:c6:9e:03:cb:71:ef:9e:1f:f8:e8:
02:98:ed:49:e0:41:5c:7a:cc:2b:86:cb:4f:cc:e6:11:9b:f8:
f3:af:cd:5f:09:4d:b1:5d:9d:72:a7:76:55:81:0e:19:ce:01:
e3:10:42:59:79:84:03:44:c2:0b:cd:09:eb:b2:0b:9a:a8:b7:
ab:83:a3:76:f7:f8:b1:46:42:6d:99:79:17:e3:81:cc:90:5e:
32:56:c7:ff:69:36:ec:97:61:23:9c:42:eb:40:82:5a:e0:93:
59:31:1d:de:ae:a6:9a:c7:32:59:bf:47:24:1c:3a:cd:7f:c2:
e8:49:04:2c:7c:02:46:c1:85:b4:49:f7:58:28:d7:1b:d4:d6:
3f:24:ef:12:ad:01:1e:0c:6b:03:7e:52:87:a8:64:fb:a4:6c:
f7:eb:3f:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er93WnRRgBvDF0iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
YWExZmViOTktMGFmZS00ZDM3LWE2NTctMmY4ZTgwM2ZmZWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopl4yToszZ58pMpVYtFja9dmkS5taxyOCWvF
gvhYlJFE7+5DvUsO8jRnLfKl6mgm+XecRjci8GFKwqXuysJKzKulQ47ue6NiLVDW
Xx5ndjxbrxo3icT8RlbtUp7k0Ygekt8VFPY2MlrYPKlGCysSO3xXFDThWniNAsd3
CMrI7LlYFwxuZkYHP2kca04TQj/5rniji2aXQJvJdlNWMQIz2QvP1ljDl33aP2Ix
2VimVjy8H5xmOxSI5TOvKwzpqpCYzdsHM5/+usnQ/sZ8otY/9Peun1tT5PCiEDCd
FvJZt3ujPYEu+LgxCFIbucfCaseuaw/3r1UXXlhtdoUTqtVeRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMxUHu+doSzT4inl9dUPXaauCwAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDJjMDY3MWItYmM5ZS0z
Y2U2LTljMzEtZmVkZGQyNGNmNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIH2RtbkvBrtXZlavva0UP+Px3NDKaBeGTMwjyT5LY2sYkzwMGpqEAeG
3ItshkKTAOy4+qMhPNEzIa+zB/8o47ofMhTaZZhqpvBmXOcVPks5ZUm3c/Db/prm
wxaq3pYwEJUdxp4Dy3Hvnh/46AKY7UngQVx6zCuGy0/M5hGb+POvzV8JTbFdnXKn
dlWBDhnOAeMQQll5hANEwgvNCeuyC5qot6uDo3b3+LFGQm2ZeRfjgcyQXjJWx/9p
NuyXYSOcQutAglrgk1kxHd6upprHMlm/RyQcOs1/wuhJBCx8AkbBhbRJ91go1xvU
1j8k7xKtAR4MawN+UoeoZPukbPfrP50=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:35 2026 by rpki-client