
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a1628cf-0aee-3540-a5a9-51bcfabfd6ad.roa
File: 5a1628cf-0aee-3540-a5a9-51bcfabfd6ad.roa (raw, json)
Hash identifier: ef0jH5ODmNQgStEHLNyN3ZkKUIFGKY77bgy/m53kOFY=
Subject key identifier: 53:A7:E1:FE:5E:D5:73:C2:CF:31:74:93:4F:D7:A0:6D:BC:01:FC:D2
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584DBFD07221A508F298BDF191C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a1628cf-0aee-3540-a5a9-51bcfabfd6ad.roa
Signing time: Thu 07 May 2026 01:00:23 +0000
ROA not before: Thu 07 May 2026 01:00:23 +0000
ROA not after: Wed 05 Aug 2026 01:00:23 +0000
asID: 22773
IP address blocks: 72.210.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bf:d0:72:21:a5:08:f2:98:bd:f1:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 7 01:00:23 2026 GMT
Not After : Aug 5 01:00:23 2026 GMT
Subject: CN=9fdbb517-543d-4e0e-afb5-a0bb4f1d2381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:6c:f3:7f:59:42:9f:c1:2b:df:61:37:51:
2d:22:9c:c0:e6:5e:97:d8:17:31:e3:21:78:78:a1:
fa:07:48:35:27:22:76:12:c2:79:ed:27:f2:7d:d0:
34:5b:e9:b4:c9:12:b7:8e:71:f4:f0:7c:32:d6:de:
24:25:f3:51:e1:97:7d:df:3e:30:6c:93:07:83:ff:
ba:f2:c8:4f:ea:e7:ad:dc:6c:0d:2d:8d:2e:33:5a:
8b:db:04:a0:85:a9:bb:08:6f:e3:bd:9b:62:0c:02:
82:f3:b8:cb:90:63:60:f3:73:e7:52:c0:87:2d:f5:
77:bf:80:1f:21:d8:30:28:55:1d:7b:8b:9d:f1:fe:
34:99:14:ab:2c:08:bf:4d:d4:50:c2:e5:f8:24:76:
c3:6a:81:b5:ac:26:d2:39:ff:3a:21:c3:af:dc:a3:
3f:a9:39:39:b3:46:3f:48:96:12:51:76:14:69:ad:
79:88:ca:a7:9d:31:a3:24:a5:99:7b:01:0b:12:73:
dd:16:6c:22:e4:fc:09:45:b9:d9:22:79:cd:b9:f6:
62:fc:2a:71:8f:8a:40:a5:9a:54:13:35:c1:de:a2:
42:49:f1:0e:af:ca:4a:ba:1f:a8:43:77:de:ba:c5:
25:6d:2b:37:d5:19:58:fe:f9:a5:30:64:a6:96:11:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:E1:FE:5E:D5:73:C2:CF:31:74:93:4F:D7:A0:6D:BC:01:FC:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a1628cf-0aee-3540-a5a9-51bcfabfd6ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.210.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:be:44:18:52:20:54:cf:9b:40:18:ab:ee:ec:8f:7e:9b:68:
27:46:e4:f4:78:31:17:99:80:92:95:c1:5c:8c:36:63:82:53:
f2:a2:29:a1:78:21:6e:ff:9d:a6:d6:0d:ff:9a:aa:be:91:7c:
7c:e4:a7:f3:23:57:00:7e:c1:5a:10:a7:87:2b:59:e4:0a:56:
4d:ca:a6:3a:37:7b:df:c6:a9:5c:31:4d:20:31:56:e1:0b:0b:
8a:16:d6:01:0f:90:b3:22:c3:de:e7:17:de:67:14:b3:07:05:
0f:0d:5c:97:be:58:80:97:ab:08:9c:49:65:fd:42:25:85:01:
d7:12:53:10:78:cb:eb:07:e8:f1:37:ec:d0:ed:37:20:3d:15:
54:9c:ca:86:96:15:d6:8a:91:ab:cc:e4:57:76:4c:9e:8f:42:
b3:18:e4:fd:1c:64:7d:9d:d7:81:d8:48:3c:82:06:d1:90:68:
b8:4f:33:d4:d4:f7:3b:34:89:14:b8:31:a0:47:9e:dd:b8:fb:
0f:4d:03:36:54:b5:e0:b0:c1:a4:0b:df:c4:13:8e:28:33:a9:
4a:e8:d1:38:af:d4:61:fa:fa:56:75:9e:f6:cc:6c:68:08:29:
96:95:8a:6e:dd:0a:83:31:1d:5f:0c:bc:db:41:bc:6d:71:17:
e8:9d:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:34 2026 by rpki-client