
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bac748ad-b06a-3b25-af5f-aee10cb6af41.roa
File: bac748ad-b06a-3b25-af5f-aee10cb6af41.roa (raw, json)
Hash identifier: q2iKCIS2J+Kj3YGcuCtVme+YIoFzgzuSG+iy9yRNNus=
Subject key identifier: EC:8A:0D:18:5A:D8:A5:D8:A5:D2:46:E6:45:37:43:DD:39:6D:3C:67
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDDCCC3C934F7778E34103DE0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bac748ad-b06a-3b25-af5f-aee10cb6af41.roa
Signing time: Sun 15 Feb 2026 02:00:32 +0000
ROA not before: Sun 15 Feb 2026 02:00:32 +0000
ROA not after: Sat 16 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 98.171.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dd:cc:c3:c9:34:f7:77:8e:34:10:3d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 15 02:00:32 2026 GMT
Not After : May 16 01:00:32 2026 GMT
Subject: CN=079d85e4-cb74-4be6-9363-8a971e2086a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:0f:21:3c:34:09:6b:51:6d:39:eb:19:74:
78:2d:bb:e7:18:55:f3:5a:ba:7a:b2:97:13:7e:aa:
cc:36:5b:f5:ee:49:ad:03:bb:ca:b1:07:48:98:dc:
6d:18:0d:9e:9f:75:b0:c3:de:69:c0:e7:6d:25:46:
01:c0:33:cc:06:08:94:b9:fc:27:20:cb:51:2b:2b:
68:34:8d:0f:05:0e:ce:84:b3:ac:de:3e:33:39:4f:
63:5d:4d:6e:b8:5c:f5:96:c3:40:c0:dd:8e:96:e5:
ec:66:2f:f4:bb:02:42:a3:1b:2c:ff:53:ff:25:44:
82:de:d6:2c:49:33:04:90:45:07:41:a7:3e:01:87:
3f:94:38:73:29:a8:c3:ff:5c:ac:3b:3c:04:35:8a:
9f:dc:b1:64:37:15:a5:df:82:24:8a:9b:46:6b:ee:
bd:18:83:4d:03:6a:8f:89:0e:ff:f4:1d:de:83:70:
51:a4:e6:10:9f:29:55:eb:67:09:f3:96:eb:b8:95:
17:d5:be:48:ca:df:b0:79:fa:07:eb:f5:da:5e:4d:
fb:24:01:ab:d4:11:e2:33:9f:77:b4:bc:89:c7:b2:
1d:78:07:a3:12:b9:14:9d:7f:b1:58:f6:b0:c3:45:
bd:39:2e:01:aa:71:fb:50:40:e3:dd:3a:ee:31:c9:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:0D:18:5A:D8:A5:D8:A5:D2:46:E6:45:37:43:DD:39:6D:3C:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bac748ad-b06a-3b25-af5f-aee10cb6af41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.171.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:63:9b:de:45:5e:6d:e6:06:1e:77:66:07:34:4f:5b:ab:6f:
7e:2a:02:da:c5:30:0f:b6:1a:46:cf:53:2e:ae:f0:82:c3:da:
56:13:6d:68:99:cc:d6:32:64:4c:cf:5e:30:0d:c8:27:c1:36:
4d:de:d2:ca:23:06:fc:bb:8c:2a:d8:2b:b3:b1:60:73:2a:c9:
d6:9f:6b:21:44:cc:46:b6:7a:71:8c:89:bb:10:6e:ba:32:1e:
e2:5e:3e:e5:f3:d4:d7:9b:80:af:69:98:0e:6a:29:b7:c7:3a:
70:26:c4:83:65:55:4d:ed:fd:09:bc:e8:f1:53:c3:3c:ac:82:
b0:55:b3:ae:35:85:34:71:c7:e6:7b:f3:60:43:e2:1a:a7:ab:
35:57:13:73:d5:68:f0:61:38:ba:ce:78:7c:25:b3:f9:72:a0:
e4:82:a2:8d:44:41:42:09:58:85:3f:b4:37:3f:5f:85:2c:87:
6e:0b:4b:b1:a6:dd:5f:05:13:28:20:c9:77:4d:50:08:fe:e3:
30:19:38:aa:a0:73:6e:69:38:4a:8f:5f:1b:8a:fe:52:92:60:
bf:f1:8a:72:50:30:6f:54:99:c5:76:d2:4d:5e:28:be:cf:18:
16:e8:ed:c4:cd:e9:62:1c:e9:7f:5a:50:39:04:4f:eb:36:21:
7d:af:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:26 2026 by rpki-client