
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89029abd-41e3-3522-aa9c-0676f27e8015.roa
File: 89029abd-41e3-3522-aa9c-0676f27e8015.roa (raw, json)
Hash identifier: i0egN3lNOEDfpvt2Nb+6cTnDYNdjzqgkXYujNJyafwY=
Subject key identifier: 12:93:DD:74:1E:E9:3F:6F:2B:D9:50:E5:6A:FF:AC:38:F8:97:90:C0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE097B97F1A77F55032E0AC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89029abd-41e3-3522-aa9c-0676f27e8015.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 72.193.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:b9:7f:1a:77:f5:50:32:e0:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=5cd97551-24d4-4f46-bfb0-070940de2093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:70:bf:86:8b:c6:57:4c:91:0b:6e:ab:3f:
f9:5a:ce:8b:58:cb:0f:18:40:d8:de:8f:73:d0:8a:
03:54:42:3e:5d:03:5c:bc:1f:de:21:24:91:24:52:
51:cc:fc:8a:3c:1a:0a:bf:ac:24:2a:7f:6a:1c:14:
72:27:36:1a:26:cc:e8:b7:8b:ed:e2:14:ff:c2:c9:
08:53:fc:03:44:04:69:de:72:2a:99:69:0e:21:e8:
28:38:fd:e1:ac:da:77:74:dc:3a:d8:7e:e4:0a:c3:
21:f1:fc:77:9d:f9:2c:b9:d2:00:23:59:fd:13:ef:
16:df:1d:8f:8d:a8:e9:08:22:fc:94:58:ed:7a:ee:
d2:b3:c9:b1:62:7c:72:d0:24:ee:78:53:d4:dc:7f:
e0:87:d4:b7:34:3e:3f:37:7c:b3:97:86:f6:ea:92:
71:f8:a0:4c:7c:79:31:67:65:34:21:db:36:4e:a4:
cd:15:55:0f:32:71:e1:55:10:c6:fa:86:09:8a:1e:
55:23:28:71:2c:6b:8c:0a:10:49:f9:32:e7:0e:b1:
34:91:3d:f9:d8:66:5b:d7:9a:a7:d6:b7:2b:23:56:
62:b4:1a:98:8c:8c:44:7f:63:bb:10:df:02:d9:04:
99:1b:3e:d7:16:30:11:a1:b6:ac:73:c3:0f:59:43:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:DD:74:1E:E9:3F:6F:2B:D9:50:E5:6A:FF:AC:38:F8:97:90:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89029abd-41e3-3522-aa9c-0676f27e8015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.193.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:c5:33:07:47:45:01:b5:30:53:47:3e:79:60:ea:54:36:74:
3b:1e:01:b6:18:95:ce:a5:f9:6a:b5:c1:f2:8e:bb:74:6a:03:
d0:51:14:37:0f:0d:3a:27:da:e8:60:ff:bf:f6:b2:f0:bf:57:
08:d4:20:bc:48:2b:e6:74:96:d4:00:3a:97:82:53:1c:33:58:
69:22:6a:9d:d7:56:7c:f9:d0:bc:24:da:e7:3f:10:d1:32:a1:
ed:8f:12:9b:d4:e3:f6:04:e7:02:6d:39:cb:8a:e4:d1:de:40:
3d:89:1e:32:d8:dc:7d:fe:f8:84:39:87:aa:2b:c6:c8:a0:29:
8a:8c:e6:37:0b:4f:31:b2:81:44:dd:53:fb:34:1e:fe:48:81:
3d:ed:bb:e8:15:5a:2a:1c:ad:d9:a5:f5:b5:b8:86:2c:bd:da:
24:c2:a9:f3:04:9a:08:0a:33:7e:a4:e5:37:17:96:cd:f1:d5:
fb:25:5f:c5:e4:a9:74:e4:ad:9d:f9:34:17:e5:8a:e2:c1:bb:
e2:5f:67:d7:91:c0:15:18:97:cf:89:7b:e3:5d:08:fb:9b:38:
2b:a1:98:19:99:a1:01:82:2b:ad:52:1d:ca:fa:10:64:e7:93:
ca:97:fc:39:8b:64:65:aa:a9:59:51:ee:9e:09:d6:23:40:ae:
da:c3:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:13 2026 by rpki-client