
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cba6989e-759c-3599-b911-8092c9cbf380.roa
File: cba6989e-759c-3599-b911-8092c9cbf380.roa (raw, json)
Hash identifier: dr1tfrPh7Y3D5iY7PmmlEmtREtyWCE2ymsWNCAaG4Pc=
Subject key identifier: F2:22:29:80:48:31:4D:4D:A1:6F:E0:2E:98:B8:9A:60:70:FC:30:4D
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE097974041CD04FFB7AFC900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cba6989e-759c-3599-b911-8092c9cbf380.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:97:40:41:cd:04:ff:b7:af:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=60bf93f0-8f9b-4779-9a2f-a3d8191957a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:31:b4:4a:b8:91:fc:27:80:a5:e9:d5:34:
9d:4a:80:ff:e9:3c:c2:6f:48:ae:6d:a1:49:01:81:
f4:ce:f9:cd:39:d7:36:6c:17:6a:bc:91:c2:d5:fc:
62:b9:53:67:54:dc:6e:d2:76:b2:4a:50:61:01:78:
c6:da:68:07:c7:ef:d3:4b:13:67:da:84:6b:3b:79:
60:db:96:d8:80:47:76:69:8b:8b:dc:a1:be:a4:31:
c8:5e:95:68:ff:e9:e4:bf:3d:06:d7:87:da:53:e5:
46:9b:55:00:20:83:7d:54:6e:67:e8:01:37:99:32:
c7:5c:e9:cc:f4:69:51:83:74:2a:9e:43:d1:83:56:
53:68:72:1f:ac:85:5a:a2:92:45:1f:4e:5c:b1:e9:
50:8f:28:ee:1a:31:f5:62:76:49:fe:e9:3d:7a:2f:
5a:bb:0d:6e:28:69:17:1b:5f:97:64:32:44:45:d0:
f9:a6:30:16:ee:ec:1f:a3:4a:c4:15:7c:6b:d4:54:
b1:58:f9:03:a0:f1:0b:04:25:c8:d7:f0:92:45:b4:
da:5f:ef:a6:71:39:23:01:0b:d6:bc:5e:ad:cb:26:
fd:19:5c:12:4e:5c:ee:4c:5e:55:f4:d8:a4:a2:11:
91:27:9d:02:df:37:96:9f:95:c5:47:77:53:63:9c:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:22:29:80:48:31:4D:4D:A1:6F:E0:2E:98:B8:9A:60:70:FC:30:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cba6989e-759c-3599-b911-8092c9cbf380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.229.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:fc:64:42:b7:5b:94:73:7d:96:76:0c:42:c2:f4:7c:32:5c:
d0:d8:de:30:31:97:1e:f5:70:91:b9:bd:ee:9a:08:cc:98:d7:
ca:23:a3:f4:21:bf:17:bf:3b:54:12:dc:7c:7f:bc:f2:e3:3b:
6a:c6:e3:2f:71:5f:ca:85:fb:44:4e:5f:8c:71:f7:8f:35:db:
22:6e:0b:76:eb:f7:a5:2d:e7:3c:f4:f4:e9:26:f2:85:c2:b9:
3b:3a:8b:18:46:ff:23:bc:0c:cd:22:72:d3:3a:d4:c5:69:a7:
8c:d4:27:4e:88:d7:a1:78:1d:e5:4a:f1:95:5e:b6:cb:06:82:
fe:14:ea:e7:29:b4:c3:0f:9f:d0:bd:e0:a9:3f:dd:d0:10:b3:
6a:78:0f:76:c1:e5:dc:da:fb:84:c5:82:3c:f4:b3:6f:5e:5a:
f2:3a:5b:e6:cf:40:28:0d:77:fc:55:dd:91:ed:f1:3b:38:04:
d6:65:ac:3e:72:9b:e8:73:ee:37:bc:0c:fb:39:14:b4:d7:09:
c2:dd:dc:83:75:47:64:e3:96:47:45:e9:fc:66:1a:b1:4e:82:
d5:3a:56:29:2f:c6:ff:21:72:c8:61:95:20:6f:ac:d0:50:35:
a7:b4:d8:9a:7d:81:5c:7d:1c:65:79:20:4d:cb:4b:15:ee:be:
c4:ca:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:28 2026 by rpki-client