
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49c98dd1-1d0e-30b1-b172-c1a36d288c15.roa
File: 49c98dd1-1d0e-30b1-b172-c1a36d288c15.roa (raw, json)
Hash identifier: c6LsvZf4TsrK4ZPVTfOHGv6sx/seLaX4pCVfRwhFXwE=
Subject key identifier: 19:14:25:72:4E:A6:68:B6:31:26:0D:1F:C8:93:8D:65:19:57:B9:1C
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E15E488487D81E25F4F3D8200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49c98dd1-1d0e-30b1-b172-c1a36d288c15.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 22773
IP address blocks: 68.230.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:88:48:7d:81:e2:5f:4f:3d:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=3b075b73-b5b9-40cd-937d-c7b661495a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:e3:f4:5b:21:1c:e8:c2:df:aa:cb:5a:38:
18:8c:d4:24:7d:bd:4e:18:6e:56:81:19:b4:c5:66:
b9:c2:0f:18:61:fe:ff:d2:c7:b2:dc:56:48:b3:6f:
b8:c2:b5:a4:ed:92:87:ad:11:1b:d4:cb:1f:2d:bb:
c1:87:bf:a6:8d:eb:d1:00:39:c6:f4:0d:18:72:d4:
1e:f6:14:69:7a:73:95:7c:d1:d2:69:7a:84:72:a9:
b0:71:22:42:03:3f:52:03:fa:4e:8b:df:22:ab:a1:
d7:69:7e:58:a2:c8:10:ec:51:bc:65:ea:19:1e:28:
3a:58:9e:d0:ed:00:7e:1b:e2:72:51:63:01:b2:b2:
b9:49:89:42:fd:ec:dd:31:be:87:2d:2a:5c:9e:a7:
55:36:b4:96:b3:73:05:21:b3:61:6c:43:99:19:04:
81:27:93:ae:3c:72:d5:07:c7:94:0d:ce:45:13:92:
2d:72:9e:f9:a0:a1:12:d2:1b:9f:06:4c:f3:30:a0:
e9:a2:80:b7:a4:10:ed:d0:d1:1e:33:4f:3f:be:5a:
4e:cd:e3:5f:59:c7:0e:74:a2:79:2b:35:eb:09:82:
ae:4b:be:e4:09:48:e7:6f:0c:d9:82:f7:e8:a2:72:
b3:8f:e5:81:c7:1d:ed:d3:b1:5e:be:dd:e2:a9:de:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:25:72:4E:A6:68:B6:31:26:0D:1F:C8:93:8D:65:19:57:B9:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49c98dd1-1d0e-30b1-b172-c1a36d288c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.230.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a5:52:9e:ba:ef:d9:b5:99:fb:ed:6c:61:46:75:64:63:75:
26:6e:b9:3e:10:71:ef:1f:c0:a8:1d:15:0e:34:28:fc:f7:5b:
63:2f:cc:41:f4:71:1c:4c:3f:cf:a0:fb:8d:e5:17:70:1c:b4:
7a:9b:f1:98:0c:16:df:23:27:63:93:a6:29:97:2b:75:96:c7:
94:01:84:07:87:d5:27:49:d4:dc:01:ee:64:00:75:37:8c:4e:
9a:e2:32:b7:53:31:d3:a4:57:1b:7a:48:03:23:ff:c7:a9:17:
18:37:ac:35:a2:3c:d4:76:5b:3e:4b:4d:3d:8d:bc:e7:c8:a6:
00:16:6f:71:7a:da:55:40:d5:c3:2e:7f:9c:7b:29:71:12:05:
4d:12:13:ea:9c:50:82:21:25:46:27:21:57:18:4b:d7:24:20:
0e:ea:a9:e8:fc:06:29:23:37:91:59:b1:19:d2:f1:90:b5:b1:
c9:0b:bc:21:15:84:91:5c:9d:98:0c:da:0b:7e:c0:7f:b8:f1:
a7:90:3e:0e:28:76:ad:58:f0:62:29:95:c9:af:ab:6f:0d:f1:
64:75:5a:ae:6c:68:3e:5d:af:96:d7:68:8d:42:87:13:a0:97:
6d:6d:7f:23:03:26:7e:d7:72:9d:09:f4:29:60:62:03:d0:99:
ad:29:aa:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5IhIfYHiX089ggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
M2IwNzViNzMtYjViOS00MGNkLTkzN2QtYzdiNjYxNDk1YTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1rj9FshHOjC36rLWjgYjNQkfb1OGG5WgRm0
xWa5wg8YYf7/0sey3FZIs2+4wrWk7ZKHrREb1MsfLbvBh7+mjevRADnG9A0YctQe
9hRpenOVfNHSaXqEcqmwcSJCAz9SA/pOi98iq6HXaX5YosgQ7FG8ZeoZHig6WJ7Q
7QB+G+JyUWMBsrK5SYlC/ezdMb6HLSpcnqdVNrSWs3MFIbNhbEOZGQSBJ5OuPHLV
B8eUDc5FE5Itcp75oKES0hufBkzzMKDpooC3pBDt0NEeM08/vlpOzeNfWccOdKJ5
KzXrCYKuS77kCUjnbwzZgvfoonKzj+WBxx3t07Fevt3iqd5MewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBkUJXJOpmi2MSYNH8iTjWUZV7kcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDljOThkZDEtMWQwZS0z
MGIxLWIxNzItYzFhMzZkMjg4YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABClUp6679m1mfvtbGFGdWRjdSZuuT4Qce8fwKgdFQ40KPz3W2MvzEH0
cRxMP8+g+43lF3ActHqb8ZgMFt8jJ2OTpimXK3WWx5QBhAeH1SdJ1NwB7mQAdTeM
TpriMrdTMdOkVxt6SAMj/8epFxg3rDWiPNR2Wz5LTT2NvOfIpgAWb3F62lVA1cMu
f5x7KXESBU0SE+qcUIIhJUYnIVcYS9ckIA7qqej8BikjN5FZsRnS8ZC1sckLvCEV
hJFcnZgM2gt+wH+48aeQPg4odq1Y8GIplcmvq28N8WR1Wq5saD5dr5bXaI1ChxOg
l21tfyMDJn7Xcp0J9ClgYgPQma0pql0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:55 2026 by rpki-client