
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa
File: ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa (raw, json)
Hash identifier: C1+mAQJVRksbSRyLjeUXryOlU/IBfqWEr0NgymwwKFM=
Subject key identifier: 12:CA:04:76:EB:4F:F0:DE:D4:9B:7A:44:3D:B4:3A:A4:D9:7E:C0:3A
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDF3230B703D7A50AACBB1060
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 72.206.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:30:b7:03:d7:a5:0a:ac:bb:10:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=396f8513-1391-4944-a2d0-a3b0406b710d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:12:85:bf:1b:75:fe:6e:c9:07:6e:93:64:
06:38:72:42:f4:66:b3:9e:01:e9:e9:3c:5c:c2:41:
f8:3d:8e:b0:95:94:d9:51:7b:1f:be:9c:26:c3:be:
db:cf:c2:82:a1:e7:21:c6:24:9b:a4:3c:1f:87:76:
c2:94:bd:eb:92:96:ae:69:3b:81:53:83:59:45:14:
9f:86:bf:7c:f6:51:7d:d2:a9:a6:25:60:23:da:a3:
2e:4c:3c:04:80:0f:6c:c3:30:b9:b1:66:93:0d:ae:
cf:1a:82:94:e1:77:4c:d3:d0:8f:a3:36:77:88:0b:
b1:6b:de:30:cf:09:ce:b5:49:6f:9d:19:0e:24:2a:
f0:53:09:de:8b:8f:60:e9:b8:42:ef:28:06:0b:82:
bf:4b:b4:24:96:ac:cc:9c:32:e8:a5:ce:b9:af:b0:
8f:77:d0:f1:7f:87:41:42:b8:90:81:55:7b:29:2f:
6d:22:5a:e5:ed:d6:b4:92:7d:77:11:1f:33:6a:11:
bc:61:7a:e6:03:af:23:5b:86:f6:0b:ab:f4:52:41:
b0:67:7a:75:80:3f:f4:9e:4b:4c:01:02:8d:ee:42:
04:38:b1:d6:85:df:3c:1e:24:15:70:62:d2:3e:95:
45:72:90:e1:19:18:2c:9d:51:f8:47:dd:d4:39:f3:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CA:04:76:EB:4F:F0:DE:D4:9B:7A:44:3D:B4:3A:A4:D9:7E:C0:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ce96e977-24a5-3392-bb8e-2afe8cedb0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.206.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:9c:c3:69:de:9e:69:d8:be:5e:a5:23:ec:f5:c0:fd:3a:83:
14:82:c1:03:10:21:b3:80:6f:02:ec:5c:3f:82:0b:49:6b:5e:
4d:a3:b2:38:23:0f:57:d1:0b:02:e9:e4:6d:50:6d:31:b7:62:
09:b2:24:85:95:30:c4:fb:25:a1:62:ea:a3:ea:b8:64:c2:e7:
ef:d9:00:00:35:c8:7d:86:40:b0:74:ba:cf:fc:18:13:fc:e0:
66:a9:9e:cc:31:98:7a:62:64:d3:05:e3:a1:a2:72:56:fd:b7:
33:5f:88:0f:96:7e:de:be:c4:a0:37:98:29:e7:6c:77:86:71:
84:9d:95:99:75:02:b0:86:88:0e:b1:f6:1b:60:89:bd:0e:7b:
f9:ad:03:84:ce:2f:1d:21:bc:ef:d6:fd:00:c8:3f:c7:e8:b2:
eb:a0:06:0e:4d:59:94:79:31:4d:44:58:08:30:5d:2e:a2:29:
1b:39:a1:2d:7e:08:b2:26:6f:67:70:5a:2d:f2:de:36:f0:33:
d3:39:51:c8:77:8e:da:ed:f0:00:18:9e:29:3b:0b:86:62:ff:
f2:b6:16:36:3d:90:54:8e:52:b2:a3:6f:05:c3:ad:68:17:ad:
76:a8:de:1f:a1:76:c7:de:6f:31:a1:f5:32:ef:36:cf:78:92:
7d:43:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:52 2026 by rpki-client