
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52ea4229-9136-3311-a6f4-6cc94942ac3c.roa
File: 52ea4229-9136-3311-a6f4-6cc94942ac3c.roa (raw, json)
Hash identifier: 7+ICd2WM5yiF/36FoGQvHzksdRKH8VgnCjIgKUMdzVU=
Subject key identifier: 89:F7:18:29:5B:F7:D6:2B:B4:E2:9C:44:50:1B:AA:60:DD:33:B8:68
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584E9EB00684F001DAA964BD9900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52ea4229-9136-3311-a6f4-6cc94942ac3c.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 22773
IP address blocks: 70.162.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:b0:06:84:f0:01:da:a9:64:bd:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=36658f47-82fc-4bc7-9c11-800cfc7f48ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:52:dc:9c:7f:0a:41:bd:ae:72:c2:66:b6:
ff:7c:e8:73:e9:bb:0c:43:9c:0f:7b:6e:b7:9d:c9:
bd:50:3a:ae:a6:31:60:ec:7a:24:47:d6:aa:f9:87:
91:5c:db:f8:25:f9:db:c5:c4:5a:bc:3d:eb:de:49:
16:1d:9b:00:92:16:00:19:9e:94:17:5c:d2:e4:8b:
5d:ca:96:fb:25:71:38:10:40:8d:5a:60:e2:b9:cb:
87:7a:f2:a2:f2:6b:fc:51:0c:3f:20:90:f7:c0:ed:
1b:41:51:ef:7f:37:7f:63:59:ac:8a:13:03:cd:61:
aa:02:23:6e:c4:38:0e:0d:bb:da:b4:77:94:4a:8b:
0f:10:d8:66:e2:ed:f7:f6:71:48:cb:ef:61:e1:f1:
5b:89:fa:f2:a5:63:65:ef:62:10:a8:40:cb:a7:5b:
f3:04:d7:cc:f4:58:69:21:6d:66:53:dd:2b:42:1f:
38:56:fe:08:b6:03:b9:ba:ab:b7:4f:97:40:30:85:
74:0a:de:bd:99:a8:0d:84:c9:13:c5:3e:f2:85:e7:
c7:05:19:2f:fa:53:cb:c0:6e:f2:f6:64:cd:b2:e7:
7d:d4:6f:72:19:16:f0:ff:75:02:66:63:38:50:69:
46:0c:d9:be:28:50:fe:f7:4c:ce:bd:52:c8:aa:2c:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:18:29:5B:F7:D6:2B:B4:E2:9C:44:50:1B:AA:60:DD:33:B8:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52ea4229-9136-3311-a6f4-6cc94942ac3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.162.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:43:f5:66:e3:1f:d2:b3:df:ba:1c:3e:3e:1f:74:c4:1d:2a:
26:af:3f:26:05:67:97:c1:9a:7c:fd:63:c0:47:37:ac:43:d4:
6e:85:d4:01:7a:d5:4e:a1:ec:28:27:51:46:63:79:b5:57:eb:
f4:24:65:f4:a6:de:eb:96:6e:03:f0:7f:1c:85:e1:ac:c4:8f:
86:a2:2d:f6:6e:28:63:cf:79:5a:55:16:c3:1c:97:df:a1:db:
bc:c4:3d:be:7f:6a:f6:99:83:ed:ef:6e:bb:3f:f5:55:6f:2d:
d9:79:5f:b1:9a:ff:0d:70:60:88:89:05:cd:e8:71:b2:1c:5f:
bd:a8:96:a0:42:bf:4a:5e:cb:6c:67:a6:a0:0f:20:87:51:c0:
94:35:f2:d8:ac:12:56:d4:5b:4b:e4:e1:bc:98:59:5d:a8:1c:
92:b3:82:2a:d0:7c:93:8a:bd:61:2b:43:0e:b5:7a:38:eb:c8:
af:26:52:dd:d7:03:32:6f:91:cb:01:49:84:70:13:89:0a:9c:
d7:a5:22:69:18:de:23:bc:89:7a:d3:c6:ba:3d:fe:ad:c1:be:
03:e2:e0:a4:43:2c:52:08:9f:2b:d5:aa:7f:cc:e2:c7:e2:25:
b0:87:bb:af:be:27:f2:08:c4:a3:04:76:cd:6f:3a:62:41:85:
20:8b:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:39 2026 by rpki-client