
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c82cec94-2724-3029-8b83-7c9442e7a5ba.roa
File: c82cec94-2724-3029-8b83-7c9442e7a5ba.roa (raw, json)
Hash identifier: jRoOG+IBglA7xmDliXc1A6jEneDBrZLxxtCisU7CoYk=
Subject key identifier: 96:43:CF:FB:41:20:33:02:B2:CB:0C:CF:E8:A5:32:CB:4E:32:84:9F
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D59EA602030F578D286B90200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c82cec94-2724-3029-8b83-7c9442e7a5ba.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 22773
IP address blocks: 68.3.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:60:20:30:f5:78:d2:86:b9:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=1a094ce4-4bc1-4410-ab7e-b5092818622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:14:24:96:88:8e:db:f4:91:fc:7f:ea:e6:
1b:49:b1:64:2d:4e:dd:40:a3:7a:cb:6f:49:6a:32:
54:d9:4a:c9:cd:0b:2f:4e:13:b0:a5:7b:c4:de:95:
37:bc:e1:72:73:6f:65:79:21:a8:84:96:d1:37:ab:
22:0d:3d:2c:94:ce:61:f3:0d:60:bd:3a:fc:de:9c:
10:c9:d4:c8:5a:63:3d:7f:a1:e4:59:21:f8:ea:01:
24:96:64:e2:1c:92:2f:a7:51:a0:d3:7c:96:a2:01:
d4:fe:6d:9a:7f:04:ad:71:7e:72:33:66:b7:d3:33:
f0:67:04:30:d1:9c:a3:34:33:6a:60:82:3a:31:19:
a8:12:26:4b:c1:b4:15:23:73:25:98:91:8d:5f:0f:
ce:b8:17:c2:76:92:16:61:bb:73:ff:d4:32:1d:c8:
a0:ce:6a:4e:13:de:dd:f8:01:e9:b1:15:7e:87:3e:
1d:33:a1:91:88:4c:6d:72:8e:a2:b4:c3:8a:3a:cc:
8b:42:3e:cf:a8:99:7a:5f:81:b8:27:7b:cf:7a:62:
85:a4:82:82:bc:7b:a0:4e:f0:e5:df:a3:f2:c5:47:
b4:77:48:1e:e4:5d:30:2a:6e:1c:51:00:39:42:ba:
d2:58:e8:bd:53:e7:ef:5d:a8:14:5f:31:d1:e2:b7:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:CF:FB:41:20:33:02:B2:CB:0C:CF:E8:A5:32:CB:4E:32:84:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c82cec94-2724-3029-8b83-7c9442e7a5ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.3.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d0:c5:c7:37:eb:9b:6c:41:89:15:cb:45:9b:1c:bc:0d:73:
50:89:d0:e3:66:50:3f:56:2c:11:f4:d4:c7:dc:01:d8:fd:6c:
33:9e:95:32:7a:9e:f5:33:59:11:a5:04:cf:a9:9d:92:70:67:
6f:e1:5f:fe:64:74:53:d3:5e:b8:1f:25:84:5b:7b:8d:17:5d:
bb:0f:f8:a2:c7:aa:6e:de:ea:85:68:ad:d6:54:7e:38:6b:49:
af:74:ab:65:f1:ff:9b:22:43:90:76:35:0b:52:5b:42:3b:cf:
0d:05:dd:c3:d6:44:4b:ae:8f:37:c2:b5:92:f7:1a:f4:5c:bf:
01:50:c7:54:43:24:81:88:b4:ee:04:8f:d5:ba:4f:05:fd:fe:
ae:96:50:19:17:5d:4d:5b:44:22:54:a0:e7:2d:a1:28:c9:65:
45:77:c1:cd:5a:0e:3e:49:cc:c0:b1:98:08:bd:7d:34:29:79:
29:f0:52:b3:ec:e6:96:42:e8:3c:84:fd:5c:a4:47:3f:b5:c5:
03:81:bd:73:26:00:e1:60:d9:e4:d9:69:bc:26:fc:a9:07:74:
dc:d1:55:54:db:05:a2:98:66:6c:26:50:02:f4:bf:92:eb:4d:
fd:11:e5:e7:6a:b3:44:3a:83:83:87:6e:91:75:28:d3:4f:8f:
7c:28:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:39 2026 by rpki-client