
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43a08e73-90bf-3553-a34f-e666cb259267.roa
File: 43a08e73-90bf-3553-a34f-e666cb259267.roa (raw, json)
Hash identifier: kngcm0oOb1ypwv87ySj7UCOfJTSP7/QYPTzhpTKtqBo=
Subject key identifier: 28:26:96:F4:56:A3:B4:88:51:12:82:71:B7:5C:B7:80:4B:AD:B4:13
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE097A69505E2273D56A4AAC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43a08e73-90bf-3553-a34f-e666cb259267.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 70.191.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:a6:95:05:e2:27:3d:56:a4:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=40e02f4b-a536-4ff0-8540-2e41134107cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e7:20:e6:3a:14:0c:0e:59:e8:fb:20:26:aa:
2b:a7:af:dd:c5:15:ff:79:aa:1e:c4:6f:05:fe:dd:
55:18:e9:92:52:02:f0:49:ee:a6:8f:5d:be:33:53:
6c:aa:e7:ff:18:88:dd:78:df:58:6a:17:3e:14:fe:
df:3c:5b:d9:a1:ce:9e:9a:32:53:6c:aa:3b:74:5e:
f7:e4:de:16:cd:3b:e3:78:19:8a:ff:d2:26:15:64:
c0:d0:5e:56:f4:cf:da:ce:98:94:c5:9c:45:4e:9d:
aa:75:4b:68:7c:d2:4e:15:50:d3:2c:d1:61:c5:5f:
f4:df:f8:26:f2:3e:2f:10:32:f3:15:d3:0d:1f:18:
75:56:6f:00:67:a5:8c:aa:fb:b9:c9:1d:f1:67:62:
fd:79:9e:3f:f2:5b:6b:40:34:e5:40:e3:44:82:0f:
c5:3b:c0:e2:a2:f9:4e:09:6d:f2:37:22:0a:00:f5:
d1:e7:74:7e:a0:ca:a0:b4:f6:66:e4:6a:1e:67:dc:
39:7f:13:bd:64:7d:a9:2d:90:cd:6e:6f:b8:b7:ef:
9d:ab:96:87:64:24:0d:ab:5e:b2:3d:f5:32:d2:71:
e4:f3:72:89:8c:b1:79:3d:b8:b7:b1:f7:2f:59:01:
87:25:37:b4:59:10:c5:a0:c7:ad:6c:44:f9:c0:26:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:26:96:F4:56:A3:B4:88:51:12:82:71:B7:5C:B7:80:4B:AD:B4:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43a08e73-90bf-3553-a34f-e666cb259267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.191.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ae:35:14:41:f1:3e:19:c9:44:f2:9a:16:b8:d2:f1:4c:ec:
f6:e3:8e:a2:16:ca:27:fe:43:11:3d:6e:b9:98:95:a1:4b:30:
d4:ef:cc:03:80:94:e8:e1:44:43:fc:2f:75:35:22:5f:46:c7:
6f:09:c5:10:99:96:e3:9e:9f:a7:dd:69:a8:8a:74:1c:90:08:
54:96:66:2d:a4:5a:c1:d5:23:9e:67:88:e0:c5:fb:f3:37:29:
74:b8:ff:25:da:d0:4c:15:2a:4e:51:a9:40:4a:81:85:5d:d3:
95:e5:a2:fc:e6:e9:6d:22:c2:5d:1c:3d:5d:e5:e1:c0:4c:e0:
e7:dd:41:f9:de:0d:dc:81:cd:a0:db:5b:e8:51:d1:02:be:b3:
ba:f3:22:05:6c:31:5a:82:cf:8b:51:9c:47:7f:1d:ca:83:5c:
34:58:d8:c0:de:a9:c5:64:65:28:18:a9:ab:8a:eb:81:d5:3e:
0a:45:a7:80:c3:fc:0a:3b:03:74:04:64:b2:95:23:f3:b4:fa:
bc:68:3a:ca:ff:c6:10:ef:b6:70:89:6e:31:5d:dd:4a:2d:66:
59:69:02:ce:c4:ee:12:c1:91:50:d5:98:e6:57:93:79:23:f7:
67:68:a1:92:da:d9:95:e3:de:d6:90:76:e1:a1:83:98:26:86:
3c:28:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:46:48 2026 by rpki-client