
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa
File: ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa (raw, json)
Hash identifier: EKEj19CxSIiM0TF1bnofT9CN/XDpYr8wICY1f4M0dRg=
Subject key identifier: 9E:4E:53:88:A7:55:72:FB:0A:DF:57:64:F8:FE:9A:AF:08:35:1F:16
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDF323AA7AADDE9A15F62FB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 2600:8800:b704::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:3a:a7:aa:dd:e9:a1:5f:62:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=ba3d6f95-2956-4bdb-b2a1-1704e7c07b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:d4:fb:f1:a8:ba:3e:70:1e:2b:00:d9:cb:
23:6c:6b:90:20:cc:cd:92:1d:69:47:2a:26:cb:ac:
e6:30:01:e4:8b:dd:90:26:be:9a:73:02:b2:bc:a8:
71:bc:89:9a:dd:47:ce:46:10:4f:83:1b:6e:18:3b:
23:37:2c:87:b7:02:60:39:88:45:a9:ba:9e:34:b5:
d6:b9:26:9c:d0:8e:fc:73:26:28:4f:0e:e4:b4:c4:
95:d1:22:c5:59:f0:b9:ef:e0:ff:a2:ec:7d:7a:df:
f2:3f:83:ad:db:87:d0:22:6e:87:fb:a5:49:a2:18:
d2:53:86:ab:f6:a8:bd:41:93:71:d5:9f:06:13:b8:
15:a0:ed:61:8f:98:08:2b:81:62:40:83:e0:7d:d4:
d0:01:f4:7c:91:27:d4:b2:79:cf:b6:86:fd:3e:65:
54:9d:0d:05:96:50:58:f0:fb:4d:c3:dd:18:f8:c0:
e7:ff:f3:ea:26:13:24:93:79:24:cd:da:11:59:77:
7c:55:c1:50:02:dc:3a:a5:56:ee:31:35:85:65:10:
d1:37:03:f0:d2:83:62:be:97:b1:ee:40:20:1c:52:
bc:21:16:22:f7:72:43:3b:9e:51:29:6f:79:48:1d:
92:a2:68:05:c4:94:f6:a2:26:89:3e:43:3b:ec:5d:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4E:53:88:A7:55:72:FB:0A:DF:57:64:F8:FE:9A:AF:08:35:1F:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:b704::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:ee:cd:af:2f:56:a7:dd:66:c1:6a:9f:14:2b:c5:6c:df:a9:
99:85:ed:d5:e9:77:ab:23:9d:50:63:e1:45:e5:88:d2:bf:7b:
75:cf:79:e2:1f:ae:34:9d:ad:62:88:2c:02:35:e9:66:2c:7e:
c3:ae:0a:9b:bd:15:cb:1e:f7:ca:0b:11:21:79:82:60:ce:69:
46:cd:c3:24:50:13:b0:5c:7c:ce:84:f1:22:f6:6e:9b:e9:06:
68:2a:99:52:ac:b6:bc:4c:c4:af:12:2f:0c:6c:86:af:57:c0:
f7:ec:0e:00:bb:de:5a:0e:b4:cb:41:9d:f2:7c:d7:d8:bf:ed:
d0:85:17:be:31:49:b4:b8:4f:86:35:56:4a:1b:f6:f2:90:85:
d3:b4:57:d7:d8:66:85:c7:79:d9:49:47:1e:0f:a6:7a:83:0c:
be:89:f7:50:7b:28:1b:fc:bb:d0:51:b1:80:97:4c:12:dd:91:
a5:e1:ee:85:38:95:93:23:a5:1a:0e:06:f3:c7:1e:38:18:ef:
27:47:35:7c:48:75:ca:38:2e:8b:f3:34:f8:8b:01:39:c5:7d:
66:1c:7b:3a:cf:e6:2e:4e:43:eb:6b:f3:65:fc:26:00:7d:14:
c0:a3:b9:45:a3:10:da:b3:f9:7a:d5:e8:0f:23:95:e0:12:cf:
d9:f0:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:40 2026 by rpki-client