
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/478227e4-197e-30e8-b30d-083d50c76a1f.roa
File: 478227e4-197e-30e8-b30d-083d50c76a1f.roa (raw, json)
Hash identifier: j2gYmeRH1LMtvalQuPT1RVc2OaXgjflJWjzouTaTkJc=
Subject key identifier: A5:A1:FD:F3:24:2C:4D:32:13:8A:91:5D:3C:FA:EC:1E:E9:04:13:19
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E15E43F79F7C262B78942CA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/478227e4-197e-30e8-b30d-083d50c76a1f.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 22773
IP address blocks: 68.8.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:3f:79:f7:c2:62:b7:89:42:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=d6c170ec-74e2-410d-a60f-21adbe890afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:03:46:7e:6e:34:8a:70:6d:77:d1:e6:44:
33:02:d6:a4:3a:c0:6b:3f:fd:8b:b0:f6:4d:36:6a:
e1:9d:34:d6:58:40:f6:cd:4b:56:79:d8:cc:79:d5:
8d:e8:c7:0d:d7:ea:61:9b:33:c0:67:94:1e:bf:c5:
e2:42:8a:c3:9f:d1:f1:6b:d1:06:47:54:d4:2e:79:
13:93:e3:ea:b6:46:4c:11:e1:55:44:0e:47:eb:75:
1d:ab:9a:7d:ea:f7:fa:05:5d:8c:a1:a5:d8:0f:74:
2e:5e:c4:64:60:15:ca:14:fe:9c:80:59:64:b1:fd:
5d:00:40:6c:d5:09:95:d7:11:af:79:fd:1d:16:b8:
7b:52:07:19:61:7b:25:cc:8d:91:f7:7d:5e:77:ea:
ae:db:24:00:64:c2:39:f1:ef:fd:ae:95:f2:36:aa:
3c:be:9a:66:c4:85:5a:52:44:e9:ec:35:8a:1f:84:
e0:c0:c0:b3:ad:52:88:a0:14:50:f2:99:5d:ca:05:
f3:75:7c:d8:d0:16:90:06:69:f6:f2:0b:b4:a1:5e:
1e:bf:a3:ce:3d:97:da:21:5b:58:da:b1:d3:f0:ca:
89:c2:0d:81:55:c3:97:72:6c:ef:15:1a:6c:b6:58:
c1:9b:58:17:58:40:7b:a3:e9:11:23:2e:99:a7:ea:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A1:FD:F3:24:2C:4D:32:13:8A:91:5D:3C:FA:EC:1E:E9:04:13:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/478227e4-197e-30e8-b30d-083d50c76a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.8.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:2c:99:57:3e:9b:41:ad:da:9d:09:35:f8:7f:c5:68:5e:6d:
99:78:13:66:19:e0:62:a8:ea:a3:41:92:2e:32:b9:19:15:f9:
60:f8:67:5c:43:b6:d3:92:82:aa:d9:cb:cc:dd:d1:5c:65:b5:
86:aa:1b:a6:25:d4:0d:1e:16:99:93:2e:67:2d:f6:ba:9a:29:
0f:73:dc:86:e4:21:95:7f:7b:9d:eb:53:80:5a:7e:b5:72:6a:
9d:10:4b:4e:8e:4d:63:1f:a1:80:a4:ad:8e:ff:69:d8:f2:cd:
c7:41:99:89:64:85:80:5a:ee:70:b6:eb:ff:89:4c:c0:57:0c:
de:c2:1e:38:72:a1:36:b8:06:86:a0:e4:fa:36:43:b0:45:bc:
0c:0e:46:38:bb:fb:26:36:ad:e2:36:1e:f5:af:74:0c:86:06:
61:6c:6c:93:3b:57:19:65:3d:a4:6c:28:0e:92:d2:1f:53:f2:
00:18:03:8b:78:e4:1f:6f:e5:20:c4:7e:b2:fd:63:a2:46:a8:
e2:8d:d3:c6:24:dd:e6:8f:70:25:2b:85:8e:cf:05:44:99:05:
80:96:64:39:0e:de:23:df:f6:8e:dd:d0:9e:80:1d:db:96:97:
d2:d4:28:49:e2:03:38:b2:2f:6b:9d:58:85:89:d5:48:e8:0e:
54:aa:95:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:36 2026 by rpki-client