
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4451251c-603e-3445-949e-4d3d563db245.roa
File: 4451251c-603e-3445-949e-4d3d563db245.roa (raw, json)
Hash identifier: LFRSyGj9SbLmkmMELaz5cWAnBaaHWd8ZSvm77dHwl04=
Subject key identifier: 9A:5E:A9:C3:C4:E1:93:FB:71:7A:D3:5A:6A:48:2E:88:C3:70:86:94
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA17AA4F3979415E0835A3680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4451251c-603e-3445-949e-4d3d563db245.roa
Signing time: Sun 26 Jul 2026 21:00:11 +0000
ROA not before: Sun 26 Jul 2026 21:00:11 +0000
ROA not after: Sat 24 Oct 2026 21:00:11 +0000
asID: 22773
IP address blocks: 68.104.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a1:7a:a4:f3:97:94:15:e0:83:5a:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 21:00:11 2026 GMT
Not After : Oct 24 21:00:11 2026 GMT
Subject: CN=58fe044e-497b-4f76-9636-074294dee892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:80:9e:f1:a4:76:c8:e6:bb:3a:3e:0a:90:
3e:bd:7d:7f:7e:03:8b:b3:71:29:01:79:fc:3a:b4:
b2:e0:84:8e:e9:5b:83:cc:8f:60:df:0a:ed:56:6f:
80:a3:76:68:1c:cf:f4:a7:e8:d1:4c:67:6d:f0:ff:
13:60:5d:b9:01:dd:1f:dd:43:4c:f1:46:00:c5:69:
9a:6e:b5:7d:ae:42:79:8a:45:fd:13:69:d5:55:57:
d5:4e:e8:97:ee:cf:d9:3f:df:e8:09:65:12:ad:ce:
75:5e:96:df:05:f3:6a:e9:80:68:d7:20:17:37:4f:
9a:31:1b:97:42:93:20:86:51:c3:64:59:7a:9f:1c:
de:cd:99:1f:05:fa:c4:08:09:17:27:fb:0d:ea:79:
b8:9f:2b:e8:e3:07:7b:ae:b3:5d:f8:19:93:05:aa:
89:ba:a8:27:5d:98:89:e3:12:e3:4a:3a:64:c8:91:
27:c4:d1:f8:0e:46:98:5e:d6:1d:fb:ce:a1:70:20:
58:9d:6b:46:96:c3:83:61:af:18:82:01:02:a3:01:
9b:d6:9f:3e:81:55:a5:10:8c:0a:91:ca:13:83:60:
73:37:3b:da:38:e1:9c:90:df:64:e2:e2:85:83:0c:
de:93:73:bc:c8:d4:a5:91:10:1c:c5:97:63:26:ca:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:A9:C3:C4:E1:93:FB:71:7A:D3:5A:6A:48:2E:88:C3:70:86:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4451251c-603e-3445-949e-4d3d563db245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.104.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:28:ad:c0:95:71:4d:c4:3c:44:5e:eb:87:58:4a:0d:64:df:
7d:be:eb:16:28:78:a8:b0:f1:07:44:b1:6b:4f:1d:cf:64:9b:
ea:07:a6:58:07:e9:92:dd:8a:a8:ce:2e:fd:b2:9c:77:55:ea:
c3:13:ce:64:9d:ce:4f:ab:67:c0:06:73:16:1f:65:d5:e9:f6:
5d:df:50:c9:34:f1:56:93:ac:b2:6b:34:61:c6:30:b5:b0:41:
04:23:42:70:df:56:86:ad:46:06:90:c3:29:6e:d9:19:cd:e0:
50:0c:35:bd:af:59:66:c5:1a:d2:5e:5b:5d:50:b1:1d:95:d4:
0a:9d:84:c7:af:61:09:ac:a4:3d:45:68:f6:31:f9:d8:50:81:
2a:5d:96:3a:1a:5f:3a:2d:95:f9:10:f8:7c:fa:36:bd:06:73:
e0:11:c9:78:f9:d8:6f:69:63:c3:de:cc:1a:44:c8:22:ab:c9:
d5:f5:d0:1e:db:b5:93:54:15:9b:a7:59:45:ed:50:96:6e:bc:
72:bc:91:3d:c5:13:79:a1:b0:21:d2:d2:05:80:41:24:b7:10:
20:03:56:0b:8a:ea:98:cd:35:48:98:4a:f5:1b:17:ac:89:45:
45:5d:f4:44:91:e9:d7:c2:68:4d:8c:54:de:cd:20:36:8c:a8:
00:d3:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:32 2026 by rpki-client