
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aec2976-85e0-33d2-9a41-e42ec50a6309.roa
File: 4aec2976-85e0-33d2-9a41-e42ec50a6309.roa (raw, json)
Hash identifier: RbcSSTmpJvj1OOFqtgqvWMqK2HPe9/7aK6iyDeja8iw=
Subject key identifier: 23:5E:A4:43:BA:8B:E7:F2:B0:7B:A7:02:07:5F:56:E0:EE:70:50:42
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE09777C4D587D3D1BCA9B600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aec2976-85e0-33d2-9a41-e42ec50a6309.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.108.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:77:c4:d5:87:d3:d1:bc:a9:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=add1b7be-fdb7-4b35-b600-9efa2bf6b02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:6e:c4:f4:9d:0b:0d:63:57:9e:4c:3b:ff:
8d:f7:7e:f4:34:06:0c:3b:1a:05:98:83:14:cb:81:
2f:23:31:03:2f:23:bf:6f:8c:66:e1:c0:87:e9:55:
62:11:c5:8f:28:7c:6a:d6:b8:44:1f:40:c4:36:1c:
71:45:1e:d1:11:db:d3:15:e6:5a:0d:05:98:9e:2f:
89:38:50:98:57:3f:a4:f9:d6:f9:57:db:5b:a7:cb:
6b:b2:0e:42:64:b0:f0:05:f1:59:b1:87:2b:c3:34:
55:49:5f:0c:48:ad:bd:b9:98:64:ec:8d:42:d8:d8:
b1:21:ce:33:18:13:02:90:00:d2:33:f1:67:f6:e7:
b7:2b:15:86:a6:89:a0:44:83:c0:0c:20:14:27:18:
0b:4f:8b:69:35:f5:12:9d:88:a8:7e:e7:24:fe:38:
55:1b:e6:1b:c0:e4:c0:17:66:85:1b:07:31:bf:1d:
92:09:63:f9:c6:6b:bb:a3:9a:b1:1c:48:46:8d:bf:
8a:09:5c:42:76:f9:ed:97:5d:94:3f:40:ae:b5:a4:
15:fa:ef:17:0b:a0:6e:58:a3:b9:80:2c:3b:67:da:
75:1e:55:a2:b8:a2:fb:ea:30:24:a0:32:5d:6f:fe:
b1:9d:74:35:8f:59:cf:25:8a:05:9c:21:a7:1f:6f:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:A4:43:BA:8B:E7:F2:B0:7B:A7:02:07:5F:56:E0:EE:70:50:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aec2976-85e0-33d2-9a41-e42ec50a6309.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:9f:63:cf:33:98:8c:75:2d:ba:a4:5a:47:09:55:f4:8e:c3:
ed:bf:07:31:7a:e6:be:a0:aa:05:3c:57:b4:30:b0:96:06:2e:
f3:83:aa:45:62:7b:99:79:1d:f3:db:d7:2b:4d:23:ef:3c:54:
c5:d1:f7:62:bb:f0:94:30:be:14:ba:65:bb:37:fe:dc:e2:a8:
83:77:0a:2c:3a:d8:1f:dd:55:c8:20:92:88:22:0a:3d:34:08:
45:dd:93:f8:1c:44:4d:0c:4d:f0:d9:ad:7f:00:be:19:f2:6d:
4b:c7:fc:16:31:31:ca:b4:7b:f1:64:87:60:fa:1a:a7:bd:a5:
d9:17:eb:45:dc:9f:9a:0b:5a:46:99:a1:36:aa:e5:f5:af:32:
d2:bf:e7:8d:63:9f:42:30:12:89:8e:04:55:59:a1:76:27:c2:
0e:2b:75:2f:8e:b0:65:e1:22:30:1a:84:2a:6a:19:71:82:b5:
06:19:ba:08:58:82:37:c7:7b:50:13:6d:e6:cb:65:2d:32:c8:
e8:53:d5:57:e9:9f:15:33:9d:f9:c9:92:2e:3f:60:cc:0b:db:
d8:c1:51:4b:7a:ee:d5:e6:8f:03:9f:6f:08:d7:18:b3:3c:31:
ac:81:28:f8:47:c4:22:b2:cc:6f:5f:e0:60:d8:74:2e:18:15:
d2:5b:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:37 2026 by rpki-client