
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49f0333f-a5aa-31f4-b3d2-55514518a770.roa
File: 49f0333f-a5aa-31f4-b3d2-55514518a770.roa (raw, json)
Hash identifier: B7q5BRS6UxTzySjRZESVYxXKgIGaf7iGSddffijRssk=
Subject key identifier: 19:AE:54:0B:38:38:E1:19:15:4F:35:B3:2D:85:5A:6D:98:1B:43:0E
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE097A2D722D4D42CE6EB7700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49f0333f-a5aa-31f4-b3d2-55514518a770.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.96.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:a2:d7:22:d4:d4:2c:e6:eb:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=3e28064d-4063-451f-a20f-e115acf77314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a5:2d:57:7d:03:00:7b:f8:98:e0:48:2a:95:
8e:bb:ad:e5:5f:28:83:04:ce:76:58:f4:f4:59:46:
35:b6:a5:8f:e3:c1:77:f8:a4:30:59:6e:bf:d3:1e:
e4:be:d7:9d:cb:69:81:fd:d2:8e:aa:e2:1f:a6:79:
24:34:a6:e2:63:ea:46:6a:7f:9f:ec:87:41:3b:72:
d5:ec:70:28:f7:45:7d:bf:9b:bc:8e:67:34:09:f0:
81:19:62:19:00:0b:3b:06:2b:05:d6:c0:89:f5:77:
6c:1a:d2:69:be:4c:60:e8:be:67:41:e6:d7:59:f4:
88:f7:34:23:71:91:67:90:a9:05:76:2e:8c:83:2f:
51:b5:82:ea:35:a7:92:8c:28:0a:46:54:66:21:90:
ca:fd:f5:26:8b:98:4f:44:d4:70:3a:6f:6c:40:cc:
8d:b2:21:d3:f8:c8:67:e4:9a:08:36:4c:fd:b3:d8:
34:1e:de:c1:1d:4b:1e:ef:45:ab:e5:0d:a2:9b:f2:
4e:55:5b:8a:d9:8f:7d:cd:73:c5:6c:20:17:f1:ce:
21:88:a2:4a:5c:40:86:5d:9d:06:88:3c:ed:03:41:
26:fd:a7:ca:6c:21:b8:0b:f3:54:68:89:98:27:e3:
0c:d7:ca:b7:18:03:ee:a7:60:7b:3a:d2:a5:1a:96:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AE:54:0B:38:38:E1:19:15:4F:35:B3:2D:85:5A:6D:98:1B:43:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49f0333f-a5aa-31f4-b3d2-55514518a770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.96.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:92:40:4d:3d:75:f3:a3:71:86:6a:9a:61:fd:63:41:05:d6:
69:eb:cc:01:b4:df:13:e2:16:c3:5f:61:61:aa:c1:97:5c:98:
f0:c8:cf:f8:5b:8a:ce:b8:b9:e5:00:45:07:12:97:a3:c5:cf:
f3:26:0e:51:a0:35:f7:2c:c6:98:e2:7f:7f:f8:1f:41:36:26:
8f:be:2d:05:6e:8d:50:df:42:3c:6a:ea:7d:94:9e:22:f6:90:
8c:7f:ab:7d:0a:d7:b8:e6:86:c4:17:c8:60:ac:a8:68:0b:fb:
d0:31:9d:d0:6a:af:1b:9d:ae:4c:96:92:d4:cc:75:90:9d:68:
57:32:4b:43:ea:84:55:be:28:56:4d:84:62:46:d2:ac:78:dc:
1c:35:d2:3a:ce:fe:e3:a5:2a:47:80:a9:07:9c:82:9a:1b:be:
3e:97:f0:11:93:e4:3d:3b:5c:11:6f:64:7e:46:53:7b:a8:f6:
1c:17:4e:8b:f6:90:89:5c:7d:8b:cc:54:b6:91:25:9a:24:20:
ec:4c:18:9e:33:cb:a0:79:8a:e5:25:46:ae:c6:71:45:23:f5:
ec:3e:54:60:5c:ad:f9:c3:21:fc:4b:41:7e:1e:56:f9:bc:7a:
3c:4c:f4:a5:59:20:ad:58:55:88:10:56:9e:43:ae:79:26:0a:
fe:70:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:57 2026 by rpki-client