
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d12e3ed1-05db-3688-b6c8-06246b9caf36.roa
File: d12e3ed1-05db-3688-b6c8-06246b9caf36.roa (raw, json)
Hash identifier: VawREv1pngxuD9P/pJJUkb+gkcFsnJLMLy7mko1GfAU=
Subject key identifier: A2:00:1C:03:F1:9F:8F:05:58:68:BF:4F:6C:E1:6F:18:81:5E:97:E3
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584D6EDA6F426C14EB2F8054C380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d12e3ed1-05db-3688-b6c8-06246b9caf36.roa
Signing time: Wed 08 Apr 2026 01:00:24 +0000
ROA not before: Wed 08 Apr 2026 01:00:24 +0000
ROA not after: Tue 07 Jul 2026 01:00:24 +0000
asID: 22773
IP address blocks: 72.205.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6e:da:6f:42:6c:14:eb:2f:80:54:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Apr 8 01:00:24 2026 GMT
Not After : Jul 7 01:00:24 2026 GMT
Subject: CN=c9d0dc48-bfc0-4053-98d1-788a7a501663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:8e:14:f7:5a:88:20:49:92:24:a6:f2:d3:
cc:7d:81:52:e2:52:fb:03:be:e2:03:78:ab:a4:77:
38:38:69:8a:f6:9f:d3:2d:b4:5a:ea:a4:8e:7a:bd:
da:85:d6:53:f1:df:ad:5b:fe:7f:e5:f0:34:c9:1b:
f3:38:bc:25:17:d7:38:af:31:40:1b:5f:35:06:35:
e9:0e:e3:25:6a:be:73:e7:c2:1a:75:e7:96:50:cc:
ee:20:f3:74:97:2c:74:8d:5e:10:18:ce:f1:e8:42:
3f:00:7b:4b:d0:6e:95:42:77:b9:a4:ea:a5:07:63:
f7:d9:34:e2:c3:20:dd:54:59:ef:27:c1:51:b1:e8:
3d:92:84:62:c8:05:35:ce:e9:96:b8:82:25:44:c1:
e0:26:14:f4:8e:ec:71:72:27:55:49:a0:db:03:3d:
e9:24:88:74:47:ee:3b:29:05:a3:af:6b:4a:1c:69:
7b:9e:73:ce:4f:25:67:f4:d4:89:57:8c:df:79:24:
50:1a:07:73:db:a6:e9:08:4b:02:d4:65:0f:cc:88:
0a:93:d0:3f:54:47:e7:80:c7:98:2d:e5:a7:44:37:
3d:65:8f:64:d5:50:d4:05:26:39:3e:64:6d:9d:87:
9f:61:93:aa:7c:ed:13:1b:c1:23:5d:4b:56:a4:8a:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:00:1C:03:F1:9F:8F:05:58:68:BF:4F:6C:E1:6F:18:81:5E:97:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d12e3ed1-05db-3688-b6c8-06246b9caf36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.205.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:04:ce:00:a6:94:cb:0a:35:f5:3d:a5:b4:e5:25:d5:cd:7c:
07:30:bd:da:77:ad:61:98:e7:32:18:07:b9:bd:fd:fe:9a:df:
6a:1e:49:6a:3a:0a:ef:8f:32:ef:53:02:d7:90:42:dd:1e:3d:
91:be:f1:58:2b:8a:03:4c:5e:04:e8:85:7a:98:6f:20:91:7d:
d2:ae:66:29:02:3e:49:96:d9:cc:6e:04:1b:51:58:6a:e3:d2:
de:06:1f:9d:a7:88:95:6e:ec:09:d1:d7:de:91:67:08:98:ac:
6d:7f:2b:59:31:c3:3e:f1:28:4f:0b:1f:21:c4:f1:64:2f:59:
9d:e0:69:9a:82:9d:b0:69:cc:ae:26:dd:06:00:0f:a6:20:6c:
bc:7c:01:1d:a8:14:67:da:76:c1:2f:0e:e8:d7:cc:20:cc:b5:
66:9e:cc:26:af:37:ad:e0:73:36:f9:d0:8b:8e:be:13:a9:f8:
0e:5e:9e:b0:85:7f:9f:a5:8c:af:7a:2a:8c:cc:be:8e:d9:ca:
a1:7f:65:27:6f:33:a6:cb:0d:36:ab:12:f4:37:0f:47:6e:3e:
81:73:cf:4b:d1:bf:82:48:c8:a4:5c:cf:e9:aa:f3:8a:c1:06:
cb:60:08:cc:02:e3:a2:31:ef:da:28:d7:fa:f9:57:a6:5a:f4:
3b:62:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:09 2026 by rpki-client