
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d968877f-67a4-39b5-ae00-76c41d398ce8.roa
File: d968877f-67a4-39b5-ae00-76c41d398ce8.roa (raw, json)
Hash identifier: do8LfKSdnlsgPYYvKX8PVzMtAc1i28GmReF1xxP3YUs=
Subject key identifier: E0:F8:34:24:4A:9B:C2:11:09:9F:46:6D:44:DE:54:70:63:8D:77:CD
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CD99D05AC9AA3C0A7851C8840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d968877f-67a4-39b5-ae00-76c41d398ce8.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 22773
IP address blocks: 68.2.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9d:05:ac:9a:a3:c0:a7:85:1c:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=0d7e9c67-3a7f-4062-a664-39f5f52ff712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:4a:f5:61:e0:a4:49:08:e5:71:88:e3:a6:
c4:35:71:58:2f:bf:fc:5a:b6:48:cd:fb:53:05:dd:
8a:f5:88:b6:4c:08:f7:67:1b:ed:f7:78:65:d9:0d:
60:37:b8:72:26:73:2c:1a:98:e8:81:1e:68:3b:5e:
ed:7e:92:90:e8:2e:aa:25:03:ff:e1:0e:19:19:d1:
28:c4:d7:c3:4b:c9:39:9f:36:af:05:c9:15:09:8e:
a7:24:8f:a1:17:70:31:39:33:ec:d8:9b:0a:0b:32:
ea:33:76:b8:2c:d6:88:5c:8f:4c:86:34:ca:66:1e:
9a:d1:95:e7:12:5b:7c:5e:da:f9:31:92:f1:4f:45:
e3:33:13:de:1a:e5:61:96:50:d1:87:1e:39:fd:b6:
c4:2d:98:f2:ff:01:57:46:67:aa:49:b5:79:50:82:
1c:15:09:6c:65:30:1c:7b:0c:c3:ca:0b:23:3b:5e:
f3:2a:8d:61:16:42:e1:a4:45:e6:dc:ba:8c:a9:a9:
35:88:5d:35:dc:b7:c9:04:dc:b7:86:cc:45:98:06:
03:73:95:a9:73:f5:80:63:88:a6:7f:95:1f:88:d6:
e4:50:d0:bd:05:85:24:64:91:77:93:96:48:05:09:
5c:59:dc:55:34:8d:a7:68:52:3b:db:06:3f:83:50:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:34:24:4A:9B:C2:11:09:9F:46:6D:44:DE:54:70:63:8D:77:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d968877f-67a4-39b5-ae00-76c41d398ce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.2.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:fd:96:22:c2:e3:60:68:1a:a0:13:05:d8:ed:7c:98:42:21:
9c:3b:b6:ee:2a:9d:3b:a7:39:b9:18:b5:18:dc:e8:e1:0c:84:
d0:1d:b8:78:1c:4f:e3:2b:40:2d:01:d8:fd:8a:e6:b8:59:de:
86:74:b0:f5:d3:79:89:56:f7:da:8f:3f:61:31:3d:44:c6:ee:
3b:9b:f5:76:7b:02:e1:fc:27:12:e7:ee:f5:7b:bd:58:6b:7c:
9a:39:0f:10:a5:94:89:68:92:e6:d1:26:db:8a:f7:ce:71:d1:
33:4a:65:3e:39:99:06:90:0f:6b:b0:16:7a:57:a2:b3:d9:41:
f2:a7:d5:79:de:af:06:9d:da:20:b7:d8:bc:6f:18:1e:ee:d0:
e5:bf:71:ef:2b:99:ee:0e:81:9c:91:11:1d:0f:01:c8:0f:8e:
58:58:65:db:d6:16:8b:cc:ba:b1:c6:3f:58:8e:4f:48:2a:cb:
ed:05:40:bb:1c:68:03:1f:21:e6:2f:29:ac:8f:0a:9f:f6:54:
f2:5d:a0:59:73:81:db:8c:20:3e:36:e5:6d:c4:8d:67:7d:04:
53:8b:d0:1c:89:86:8b:c2:ae:54:c0:9e:b2:29:31:05:3e:e7:
8e:98:5a:13:3c:b5:b3:11:51:c2:f5:0f:18:50:39:5e:04:63:
d8:34:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:43 2026 by rpki-client