
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2c27569-2715-3569-b2ab-b242ec00b971.roa
File: d2c27569-2715-3569-b2ab-b242ec00b971.roa (raw, json)
Hash identifier: /jUZMu1Q9N/dHkkt/cvCn76ITUYQlXa9/WEkHNQwirk=
Subject key identifier: 2A:40:64:F9:B9:61:E4:29:94:F9:5D:08:91:3A:9F:0B:82:F1:B4:9D
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CDF329ADC5FB902985AD77140
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2c27569-2715-3569-b2ab-b242ec00b971.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 72.223.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:9a:dc:5f:b9:02:98:5a:d7:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=38eaa42e-742e-44c2-a62e-d9f09f65941b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:a4:46:e0:4f:f1:14:15:6a:30:bb:ef:c4:
6c:8a:cd:f4:d7:e0:2a:21:7c:fb:a3:62:b3:aa:0d:
50:88:2b:f8:28:35:62:da:0e:db:df:13:a9:0c:11:
cb:20:6a:12:86:7a:46:e2:a7:79:9b:e1:24:a1:e1:
3b:c7:08:5e:dc:9d:6d:57:ec:06:1f:85:51:21:36:
d8:c4:f9:91:0f:e3:76:50:25:26:10:e7:01:68:a4:
d2:12:3e:b9:97:15:8f:51:ac:b9:14:06:a5:c1:e7:
ad:6d:52:ce:88:09:a5:50:e5:94:77:35:c8:aa:e7:
7f:78:e4:7b:52:74:42:b8:50:34:38:65:6e:e4:56:
af:a1:61:c0:7a:b6:e8:8c:e5:0f:ac:03:88:94:98:
45:1d:f5:d8:bd:29:8e:87:9a:b8:5e:66:9f:30:3f:
ec:16:f6:80:22:4c:96:96:9b:57:ce:a8:da:e2:9f:
45:6b:16:36:b6:e0:2d:0a:e1:2b:4c:75:5f:92:28:
3c:7f:4b:c1:4d:c4:25:88:3e:ef:7d:5e:57:77:46:
1a:2f:ed:85:5b:c9:74:75:b0:ef:a5:ce:4a:d2:5a:
f5:63:d4:6c:5f:61:60:67:fa:76:21:6b:14:ff:b3:
90:71:86:5f:1c:d7:24:a4:15:b7:9a:2f:d7:88:c5:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:40:64:F9:B9:61:E4:29:94:F9:5D:08:91:3A:9F:0B:82:F1:B4:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2c27569-2715-3569-b2ab-b242ec00b971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c8:c8:98:4f:ba:f1:b3:be:cc:ee:8c:b9:e1:f4:f3:ea:fe:
70:27:c7:59:e2:8b:5e:89:b0:f7:3e:4e:43:a2:41:3e:83:16:
35:f8:24:eb:ae:65:f6:ec:82:f8:87:11:9d:69:60:41:41:80:
1b:e1:df:51:e1:ba:d8:47:7a:84:2e:06:06:9f:9a:fc:a8:d7:
5c:58:68:0e:9e:b8:20:fa:7b:f5:99:fb:49:ca:da:c2:f5:c1:
d6:af:72:0f:e5:41:e9:77:47:95:a4:58:62:1d:34:11:8f:8a:
11:b3:88:91:63:11:96:6e:6b:2c:7c:30:df:07:c8:1a:17:8d:
52:b8:ca:e8:2b:73:21:fc:1a:f6:74:34:77:85:7b:f1:f0:52:
c4:3f:35:37:5e:0c:17:1c:51:3c:2c:ec:ba:d7:e6:7c:ea:b3:
bf:68:9a:92:41:a3:d7:cb:3d:d1:23:70:16:ff:f6:03:d4:16:
c0:e8:bd:f8:f1:5b:1c:29:04:f9:45:0a:16:ba:c4:c3:78:db:
db:2e:2d:fb:86:b7:1c:a1:8d:a7:47:de:f4:02:72:12:54:30:
9e:2b:41:48:c8:e9:d0:ed:bd:0f:2d:21:b2:72:5e:59:48:a5:
ba:20:15:33:58:d5:00:6a:36:ca:de:84:4d:0e:c2:14:fd:9e:
be:8e:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:39 2026 by rpki-client