
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa
File: 4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa (raw, json)
Hash identifier: X+7yYCkI1neLFnXnIjAAhl5GWMkR4aZZratg+KEUmo4=
Subject key identifier: E7:96:2D:EA:85:8F:1E:EF:CD:BA:91:07:20:8C:CD:B3:F8:00:26:61
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584EA0157751254F13642C156C30
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 22773
IP address blocks: 72.206.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:77:51:25:4f:13:64:2c:15:6c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=0b63ed6a-00f3-45c3-a8dd-1b96c81111cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:e2:45:ce:df:05:3d:85:fd:95:24:6d:ab:
ea:a2:78:c7:da:ef:45:50:be:ed:7d:90:a3:96:14:
bf:da:4c:3f:77:d4:f6:6b:c5:fb:63:77:f8:e1:d2:
b0:49:dc:f0:99:33:4b:5e:41:55:ae:cf:58:21:8d:
9d:7a:d8:62:ff:c3:f3:14:a9:58:e1:e3:76:b2:e1:
41:9d:9b:32:43:92:53:96:89:39:fc:45:2c:6e:0f:
10:d0:90:13:cd:6a:c3:e3:a6:5a:5e:8d:2b:7f:7e:
e5:5f:e1:0e:2c:cc:02:65:cf:4b:ef:3e:39:e1:63:
af:1b:63:51:97:0c:71:72:ee:85:f7:27:23:5e:7b:
8a:81:08:49:c5:25:d6:5a:96:f5:3c:11:73:ac:c5:
06:f0:24:5e:13:e0:fa:c8:fb:da:3e:71:e7:92:a5:
e8:98:5c:1f:58:da:90:c1:7d:7a:74:81:92:3c:80:
0e:46:8e:d4:90:3e:5a:50:35:8f:c6:93:83:04:6e:
72:b8:fa:73:0f:5e:07:2f:f7:94:2e:c1:83:5d:70:
cc:4a:ac:78:8b:4e:1a:e7:1b:b8:78:3f:a0:f4:db:
12:95:62:a6:76:16:e0:43:37:3c:fc:16:4e:7e:f8:
a6:8a:b8:dc:d4:95:8a:d3:4f:27:04:27:2f:b4:f1:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:2D:EA:85:8F:1E:EF:CD:BA:91:07:20:8C:CD:B3:F8:00:26:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ce9df4b-d6a3-328d-be16-33d0d9dbc0fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.206.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:bc:ca:d6:ab:c5:ef:27:9b:4b:79:44:22:db:22:34:4a:a7:
78:fd:33:00:f3:21:04:a0:61:1b:9d:0d:e6:af:b6:39:0f:e7:
9b:92:b7:bd:80:0e:24:bc:65:f7:af:e8:2a:53:39:a5:f8:e1:
bd:c3:75:da:25:a2:f0:6d:17:d8:62:07:43:f6:81:0e:21:67:
6a:40:14:d4:20:c5:19:c3:07:bb:ff:b1:9f:0b:01:aa:dd:1e:
ca:a1:9c:29:9e:d0:b7:40:0e:16:ed:a2:be:c5:58:9d:7a:9c:
de:d5:70:14:0b:cb:24:46:c2:7f:ee:d1:d9:e5:2d:77:ed:fc:
e8:31:b5:57:27:58:ef:4f:ec:52:6b:1e:69:c2:1e:51:09:9c:
61:e4:a1:1e:42:73:c7:14:26:4d:db:9f:68:30:db:bb:db:c0:
c2:0c:e6:5b:17:39:99:9c:5f:7a:d6:8a:f4:57:a1:42:2b:2a:
40:a6:9c:13:50:22:ff:9d:59:66:a5:59:ae:2b:0b:97:87:6a:
b4:f7:71:95:62:e1:98:58:64:90:ae:23:18:c3:98:dc:df:e2:
e5:3f:3c:d1:42:34:2d:71:ad:74:84:1f:c6:ce:2d:00:ca:77:
0b:88:a9:b2:b8:0d:3a:6c:77:49:b6:54:25:72:12:14:44:2a:
9f:fe:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:32 2026 by rpki-client