
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/591c44ec-8cad-3fc3-9b07-5904b1fa19f2.roa
File: 591c44ec-8cad-3fc3-9b07-5904b1fa19f2.roa (raw, json)
Hash identifier: bYgm2Ps/BIvj92fMx/cdPwG5CRe5Zq8ulZcEaTSZKCg=
Subject key identifier: 15:46:A5:EF:9E:C8:4D:0B:3A:12:43:89:80:F5:82:D2:09:8A:9C:46
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584DBD05E667E9EBD99D619B2000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/591c44ec-8cad-3fc3-9b07-5904b1fa19f2.roa
Signing time: Wed 06 May 2026 01:00:24 +0000
ROA not before: Wed 06 May 2026 01:00:24 +0000
ROA not after: Tue 04 Aug 2026 01:00:24 +0000
asID: 22773
IP address blocks: 24.251.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bd:05:e6:67:e9:eb:d9:9d:61:9b:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 6 01:00:24 2026 GMT
Not After : Aug 4 01:00:24 2026 GMT
Subject: CN=77cf7a2e-fcac-4aab-b38b-4e526148dae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:35:7a:ba:19:95:fa:a8:31:c8:ce:5f:ed:
7a:f0:85:bd:d7:85:eb:47:1e:f8:1f:1f:bb:73:1f:
e7:d9:7f:f9:73:19:d2:b2:06:ba:cf:f9:00:ac:ec:
78:cd:05:b5:bf:17:0a:33:e0:00:c0:8d:75:33:60:
d9:6b:9e:c5:5d:39:8b:e0:d5:b5:f3:7f:f0:8b:1f:
db:f1:2c:38:b8:b2:6b:37:3e:00:1b:42:36:bb:e6:
66:f5:10:b8:db:62:51:36:58:6d:51:ce:cd:6f:ce:
d6:87:30:6a:31:68:87:cb:c5:aa:60:11:41:3a:9c:
89:10:9f:83:67:34:83:9a:1a:73:29:e1:2a:9b:8b:
16:8d:1d:ea:f6:1e:84:cf:e6:63:a9:fe:2a:24:9f:
39:a5:b6:d1:b6:1a:7e:65:48:5b:f1:89:4f:b0:28:
09:42:bd:34:03:dd:22:37:85:fd:89:5a:9a:2d:f0:
46:26:98:0f:92:28:16:b0:4c:fb:4b:84:12:21:cc:
96:73:bc:98:c2:11:7c:3c:dd:df:8b:0d:5e:cd:f9:
55:20:72:aa:ce:24:e0:5c:06:b3:69:03:a7:fb:26:
76:07:31:32:21:46:a9:0e:49:d6:29:0e:72:dc:de:
f9:e5:ea:95:bf:40:e2:8c:5c:83:5c:37:e9:f3:c0:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:A5:EF:9E:C8:4D:0B:3A:12:43:89:80:F5:82:D2:09:8A:9C:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/591c44ec-8cad-3fc3-9b07-5904b1fa19f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:a0:d6:46:7b:90:b3:71:dc:9e:7c:df:85:00:57:ad:eb:84:
b5:03:bb:71:9d:69:5b:a3:b5:a7:b7:c4:5f:13:1c:61:b5:48:
37:19:ed:27:79:79:e0:81:25:7e:92:75:ea:5e:38:3e:91:b1:
75:a6:f0:a2:f6:92:bb:0e:10:75:32:89:1d:60:19:fe:cd:4e:
2c:56:58:94:f0:2a:46:61:b4:63:2c:27:12:82:49:38:7f:57:
d9:76:e0:ca:0a:fa:5a:66:f3:c3:0c:a6:57:46:07:b1:70:7d:
55:e1:c6:59:ea:63:53:14:35:0c:b8:a7:f9:1e:e1:45:c5:49:
57:37:b4:5a:64:eb:94:15:5f:b2:6c:5f:10:13:c0:06:47:b0:
a5:92:70:ec:30:44:4a:1b:c3:aa:cc:58:a7:21:fb:e4:a6:dc:
02:80:2e:35:19:67:71:89:60:2b:40:c3:75:93:b8:03:e3:e6:
86:47:57:f9:19:8f:7b:38:fd:d2:6b:53:6a:50:82:e1:99:ab:
dd:7d:b0:4e:28:8b:2e:cf:13:f7:a4:56:bd:35:e0:aa:ec:34:
06:f6:f7:1d:4e:ba:54:f9:a5:12:77:bb:56:f0:cc:8d:08:dd:
de:a4:be:db:44:c2:23:f1:f0:04:e4:19:79:c1:c5:e0:e1:19:
2b:a9:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:37 2026 by rpki-client