
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7e1be4-331a-37ca-a234-211c999e1ca9.roa
File: cd7e1be4-331a-37ca-a234-211c999e1ca9.roa (raw, json)
Hash identifier: frlVnlRkOckxl/jxiinxdeCHh0khmLHf8/F/qAjkzn8=
Subject key identifier: 1B:D8:4A:2E:B8:BA:D0:5E:F4:E1:D3:72:18:81:8F:75:FB:87:33:AF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDC676135BD56B9F6D656A980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7e1be4-331a-37ca-a234-211c999e1ca9.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 24.251.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:61:35:bd:56:b9:f6:d6:56:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=d389155a-588c-40cb-8b99-9350cf49df50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:bf:3d:1a:ac:c0:fe:79:ba:bb:c0:30:b7:
f3:f0:80:44:c1:9a:2c:77:d1:dc:80:97:36:ee:b0:
13:2d:d8:2c:3a:ce:fc:85:08:f9:ec:31:bc:ce:a0:
b0:a7:67:58:cf:6b:9e:25:6f:ad:cd:57:7d:75:07:
d0:e0:70:ce:13:b7:cb:56:49:3e:4a:d2:44:46:6e:
c6:0d:c3:62:31:93:2f:7e:de:dc:3a:dd:a0:75:0e:
3f:48:0a:c4:b0:49:48:c2:0a:bd:05:dd:de:9f:81:
63:74:f2:f5:24:e8:d4:85:2e:42:7e:69:92:7d:2b:
c9:cd:4d:b3:6a:ca:92:80:e3:0f:2f:b9:e3:45:bd:
23:9f:c3:90:e3:05:96:ed:52:38:77:ed:f8:fb:7e:
51:eb:a7:83:b2:b8:ab:60:18:7b:15:65:1b:68:80:
c8:c8:57:3e:13:cf:4f:41:2d:fd:f2:ef:88:5d:53:
70:0e:53:fc:0c:82:04:86:4e:8d:5d:ab:5f:a5:ae:
db:5c:41:a4:7d:3f:1a:82:b0:5a:06:eb:aa:1c:61:
38:11:dd:d5:67:fa:b3:15:10:db:5a:c5:9a:54:97:
94:e4:0b:b0:24:3f:bc:8a:9d:d2:75:66:b9:40:21:
66:22:e2:21:ba:c4:d7:04:87:9f:fe:d7:33:7d:1d:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:4A:2E:B8:BA:D0:5E:F4:E1:D3:72:18:81:8F:75:FB:87:33:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7e1be4-331a-37ca-a234-211c999e1ca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.251.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:b1:ae:29:82:9b:06:45:40:58:6e:13:b2:e4:75:ab:c0:9e:
cc:89:b2:1f:82:a1:f8:4b:5c:f1:89:9b:51:1d:d4:09:24:7f:
cb:50:f1:e7:0f:f1:5c:c2:fa:0c:ee:b8:b7:c4:63:c1:50:92:
45:03:c4:24:a2:47:22:d2:9b:bc:2f:78:4a:81:a1:a0:d5:22:
4f:44:a6:0c:da:b8:f7:51:1a:b1:cf:f9:de:ee:30:8c:32:5a:
64:70:9c:a8:fa:39:21:16:c4:25:9a:96:5e:23:f3:ce:14:0c:
53:e3:94:de:66:ca:7c:de:f0:ea:06:16:7e:0a:b9:98:6f:8b:
de:b2:65:6e:b5:db:a3:f2:c3:33:08:f2:13:48:0f:1e:35:26:
d9:8b:92:e4:45:17:a7:be:22:9a:b6:82:a5:79:94:8a:db:a7:
0b:52:34:09:97:8d:a7:e5:12:65:38:79:b4:12:f3:18:05:bb:
52:e6:db:fc:87:0e:77:58:cd:94:16:fe:4a:61:2e:63:86:ce:
82:11:98:09:35:8c:30:1d:b6:5e:31:0f:fd:9d:8d:42:16:b2:
b2:86:76:15:9d:9e:31:fe:15:e0:a4:e9:5e:ab:33:36:3b:7e:
90:a8:fb:80:71:4c:11:da:12:f1:97:2c:71:a4:8d:42:6d:8c:
2e:8c:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:31 2026 by rpki-client