
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b70ded77-8a60-3031-a1cf-69170cd2bc8f.roa
File: b70ded77-8a60-3031-a1cf-69170cd2bc8f.roa (raw, json)
Hash identifier: 2fchDqEFo9sC3+nNFIXcHrMFgxURJ9i+9IgTtCjjDns=
Subject key identifier: DE:A5:3E:FD:B6:07:8F:FE:CF:71:40:63:AC:7D:75:43:AE:A3:D0:F6
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDDCD292C78D08A69FD9C4800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b70ded77-8a60-3031-a1cf-69170cd2bc8f.roa
Signing time: Sun 15 Feb 2026 02:00:32 +0000
ROA not before: Sun 15 Feb 2026 02:00:32 +0000
ROA not after: Sat 16 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 98.165.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dd:cd:29:2c:78:d0:8a:69:fd:9c:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 15 02:00:32 2026 GMT
Not After : May 16 01:00:32 2026 GMT
Subject: CN=6e9f35e2-6b28-452f-a9b1-7e59f3a28d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:62:bb:1d:58:a0:8c:ff:02:bd:20:58:38:
11:ba:2a:b7:88:ed:86:8d:5b:80:ee:15:45:df:85:
ef:e5:c9:1e:15:ee:29:cc:34:0f:fa:bd:83:95:33:
fa:53:de:e9:4f:97:c0:19:68:e1:55:fd:ad:30:64:
12:99:51:1b:0d:9c:3f:1c:ef:b6:6e:99:8f:67:ad:
21:1b:ac:57:f0:9f:60:2d:ce:5c:db:02:b7:bd:99:
3c:36:d0:d8:54:61:55:c5:0e:55:d5:7e:14:22:d3:
2b:42:8e:69:87:16:eb:0c:86:e0:eb:d6:a1:16:7f:
cd:7b:90:87:0d:42:4d:5f:d9:fb:46:62:d6:b0:86:
3a:9f:16:bb:dc:a4:7c:92:95:ca:1a:f1:12:fc:e7:
f1:db:c4:93:33:de:85:46:58:f0:16:bf:74:fa:94:
a6:1d:6f:d7:df:5b:f8:5a:b3:5c:dd:fd:38:cb:ad:
89:83:54:aa:10:b2:37:8e:c8:04:35:95:1a:d6:52:
ae:79:85:de:89:be:07:84:d2:e8:08:05:73:5f:28:
44:c2:41:7e:a6:72:7d:8f:06:bb:69:16:ed:34:fc:
d2:04:c1:e6:76:ae:2b:f3:18:c4:8d:22:28:3b:b5:
90:d0:a2:ce:38:72:3c:48:00:a0:8f:03:e7:b7:ff:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A5:3E:FD:B6:07:8F:FE:CF:71:40:63:AC:7D:75:43:AE:A3:D0:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b70ded77-8a60-3031-a1cf-69170cd2bc8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.165.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:7a:5d:d3:c3:81:e2:3a:56:29:86:57:96:2a:50:ab:99:16:
26:a0:96:c0:03:97:71:98:38:6f:ff:ea:9f:ed:04:d7:29:c3:
de:05:3d:c1:c4:a2:91:53:0e:5c:49:32:4e:45:4c:1e:83:6d:
21:53:b3:75:78:0c:33:da:bc:71:2b:69:bb:9e:a5:01:cc:65:
77:be:aa:98:20:45:fc:59:c8:43:18:57:21:11:66:bc:b7:31:
48:93:ec:ab:da:d3:71:b9:a5:06:5c:b9:ae:6b:14:15:71:fb:
5e:e4:d1:1c:74:15:0d:6f:62:91:08:6b:2f:8b:c4:5d:2f:b4:
10:b4:08:99:a0:c0:c6:a4:2d:75:b9:6a:c0:d9:47:6b:d3:17:
5c:3d:3b:31:80:5b:92:af:d8:65:89:53:21:05:e4:9a:68:2d:
14:6b:ce:07:72:33:1a:1f:c0:35:ae:fc:e6:2c:13:c1:6d:64:
f0:ed:f7:e5:5c:7c:56:05:18:16:88:f2:70:af:23:ac:5b:85:
34:69:d2:34:90:a2:30:14:de:3c:eb:c9:af:17:ff:52:af:5e:
6c:33:6b:b5:a5:f2:f4:66:87:55:2d:6e:a0:d0:51:b6:0f:46:
ce:53:77:cb:22:c7:f2:cb:2b:5a:03:9b:56:cc:10:ae:16:f4:
ca:68:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:39 2026 by rpki-client