
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcc18620-1daa-368f-83de-b8731191dc75.roa
File: bcc18620-1daa-368f-83de-b8731191dc75.roa (raw, json)
Hash identifier: /MP4iRCeTZnGf2xuKy/0etGsEssJKV96Dxlmq+kjlh4=
Subject key identifier: E0:4A:EB:34:B8:53:8A:EA:8A:27:36:B6:59:29:3D:82:37:1C:60:95
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE0977FDA033AE96F5DF6DF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcc18620-1daa-368f-83de-b8731191dc75.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.229.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:7f:da:03:3a:e9:6f:5d:f6:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=7514b06e-46d2-434d-a8b5-cd9a961bb7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:6a:b7:10:06:c0:ad:68:ef:9b:d6:a3:39:
f6:3c:ea:20:85:48:3f:b1:ff:60:6f:e4:87:e8:cb:
1e:2d:12:8e:b2:07:f9:04:e3:85:6f:fd:e6:63:b2:
5a:22:72:09:f7:c0:3e:d4:4e:55:02:d1:e8:76:f8:
9e:68:31:61:94:22:79:84:97:db:39:14:f7:e9:ac:
41:39:b8:be:ed:86:b0:a5:bf:9d:2f:dc:ee:7c:fd:
00:09:8f:5d:83:c9:1a:d1:08:2e:3f:f3:6c:0a:04:
86:e9:0f:ea:76:cf:0f:11:09:b7:f0:a0:3b:b5:96:
23:10:24:56:c6:63:5a:c4:fd:25:a4:38:a8:10:6c:
dd:6b:ca:d9:f0:4f:d6:3a:1e:c4:a9:7a:73:63:ff:
8e:a4:67:b6:b4:00:41:b0:b3:00:e9:5f:5b:ad:fa:
37:24:5e:97:79:a4:2d:ac:82:68:ca:a8:76:56:e2:
97:c5:48:2b:f0:94:b7:51:15:11:9d:14:da:a0:81:
3b:bb:d1:b3:a9:c8:3e:ce:fe:4b:77:b6:fe:b7:e4:
8a:c7:e1:1e:7a:e0:87:84:fe:e1:bb:c4:7d:5d:ff:
4c:76:a8:ae:1b:1f:c1:bb:b4:8a:e4:f2:e2:56:ba:
05:de:1d:06:94:52:2a:7b:45:57:c6:21:03:df:be:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:EB:34:B8:53:8A:EA:8A:27:36:B6:59:29:3D:82:37:1C:60:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcc18620-1daa-368f-83de-b8731191dc75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.229.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bf:49:04:ba:d9:e4:b7:55:57:0d:22:71:e0:a8:3e:a5:56:
e7:d6:9f:c9:f5:a0:c8:07:84:26:e2:5c:6e:38:65:e3:79:fe:
74:17:4c:80:96:f5:61:cf:8f:f2:db:7a:71:c5:fe:bf:c1:fa:
3a:fd:4c:f7:03:51:8c:8a:1d:28:1e:b6:dc:90:2e:8e:8b:9c:
40:bd:0c:1c:03:19:db:45:44:aa:c2:32:20:c2:66:25:9f:68:
64:26:3e:e9:f1:df:be:d2:c3:21:f1:fa:18:1e:0a:de:3f:b2:
d6:5b:01:d5:f4:d8:b2:8e:98:c2:8a:1a:91:48:51:1e:fa:e0:
76:4a:a7:be:b6:ed:d2:d1:30:f0:c0:06:53:96:5a:21:23:b8:
d7:0f:1d:0b:2a:cb:16:2f:5e:43:8c:cc:6b:a0:e2:b3:3f:83:
b6:37:8c:16:39:6f:e6:2a:bd:12:1c:2e:43:55:0f:ca:4e:be:
1e:f0:31:be:b8:13:fd:83:62:dd:c8:b4:e2:b9:ad:b3:d7:19:
20:f5:52:a2:20:e5:92:4a:97:f5:c7:88:03:9f:90:21:5b:37:
f6:d0:83:5f:96:f8:cc:aa:7a:4d:a6:1e:65:14:ab:14:40:92:
da:6f:b9:21:52:31:77:7e:13:ed:32:d0:58:02:59:a1:c2:84:
9c:a8:88:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3/aAzrpb1323wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
NzUxNGIwNmUtNDZkMi00MzRkLWE4YjUtY2Q5YTk2MWJiN2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRFqtxAGwK1o75vWozn2POoghUg/sf9gb+SH
6MseLRKOsgf5BOOFb/3mY7JaInIJ98A+1E5VAtHodvieaDFhlCJ5hJfbORT36axB
Obi+7Yawpb+dL9zufP0ACY9dg8ka0QguP/NsCgSG6Q/qds8PEQm38KA7tZYjECRW
xmNaxP0lpDioEGzda8rZ8E/WOh7EqXpzY/+OpGe2tABBsLMA6V9brfo3JF6XeaQt
rIJoyqh2VuKXxUgr8JS3URURnRTaoIE7u9Gzqcg+zv5Ld7b+t+SKx+EeeuCHhP7h
u8R9Xf9MdqiuGx/Bu7SK5PLiVroF3h0GlFIqe0VXxiED376EUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBK6zS4U4rqiic2tlkpPYI3HGCVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmNjMTg2MjAtMWRhYS0z
NjhmLTgzZGUtYjg3MzExOTFkYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABO/SQS62eS3VVcNInHgqD6lVufWn8n1oMgHhCbiXG44ZeN5/nQXTICW
9WHPj/LbenHF/r/B+jr9TPcDUYyKHSgettyQLo6LnEC9DBwDGdtFRKrCMiDCZiWf
aGQmPunx377SwyHx+hgeCt4/stZbAdX02LKOmMKKGpFIUR764HZKp7627dLRMPDA
BlOWWiEjuNcPHQsqyxYvXkOMzGug4rM/g7Y3jBY5b+YqvRIcLkNVD8pOvh7wMb64
E/2DYt3ItOK5rbPXGSD1UqIg5ZJKl/XHiAOfkCFbN/bQg1+W+Myqek2mHmUUqxRA
ktpvuSFSMXd+E+0y0FgCWaHChJyoiGg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:00:35 2026 by rpki-client