
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa
File: e3c52c97-c290-3307-892c-62205511a25b.roa (raw, json)
Hash identifier: jBHmHX+1bnQJqlUqMD4Zdz2J3/Lwvrv7H2fGkJRtD38=
Subject key identifier: A7:C7:81:1C:27:83:22:5A:99:0C:77:AF:A1:8E:F8:5A:53:BE:9C:F2
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE0976312D96FE5C4ECDBFD40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 70.170.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:63:12:d9:6f:e5:c4:ec:db:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=e81613e9-ff8a-41ec-95a4-aa72698feaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8d:76:bd:5e:5e:2f:15:7a:94:9b:65:af:f3:
b3:bb:b8:52:ee:d2:e8:50:76:d0:8c:07:ce:a2:ef:
bc:7f:c6:46:27:38:66:a6:db:dd:73:b4:91:41:a7:
44:7b:b8:8e:82:f2:4d:d3:07:53:03:be:56:ed:4b:
53:9d:21:3c:b2:e7:dd:38:f8:ca:07:d0:1a:f2:59:
7e:e7:eb:67:62:68:6e:3b:2d:d1:80:d9:80:74:54:
f7:63:cf:f8:a4:ac:2c:fd:cb:ab:87:8d:3d:9f:12:
01:ff:35:06:bd:53:25:c9:3a:29:4d:c1:48:ca:7d:
50:ae:c5:4a:c3:50:e7:c1:95:5a:33:2d:a4:43:b1:
88:f3:6b:75:a2:c0:53:47:e1:02:b5:67:30:1b:4e:
a2:91:b3:79:d2:b9:76:e1:e8:4f:ab:8c:e7:e9:17:
82:2e:c7:7e:29:38:cc:31:ec:49:67:ac:7e:81:4c:
eb:78:75:c2:30:8e:c9:3e:d8:14:17:d7:38:fa:ab:
0f:3c:da:ff:95:40:de:78:2b:07:0c:99:2e:aa:99:
05:13:af:3c:7e:fd:d9:ed:ef:c4:c2:bc:09:ad:7b:
73:87:af:e5:d2:e1:6a:d1:20:61:93:bd:08:5b:ff:
32:62:f6:b2:ef:a9:0b:b2:10:4c:1f:9a:78:1f:15:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:81:1C:27:83:22:5A:99:0C:77:AF:A1:8E:F8:5A:53:BE:9C:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.170.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:1b:13:0a:9d:cb:bd:bb:e6:a5:25:a4:d3:3a:43:1b:2c:3c:
2a:4f:55:80:f9:14:da:fb:d4:2f:22:3f:07:1d:a0:8b:21:f6:
30:75:0a:78:39:c6:01:6a:67:4d:4c:1d:6e:9b:c9:dd:0d:40:
5d:3c:d9:5e:1b:8c:08:43:1b:41:94:06:6d:1c:b6:df:58:90:
35:6f:f0:16:cd:35:91:12:70:05:5b:08:a5:0f:de:83:4c:3b:
71:d7:e1:5c:1c:1c:2b:3a:fb:b2:97:0e:88:19:ff:ad:b3:a8:
0b:d1:e0:88:39:fd:5b:59:71:be:2a:42:a5:0f:bb:d7:00:5a:
09:57:7d:b5:b1:33:d9:df:b3:9a:ab:ac:d4:b5:72:fa:40:77:
9e:83:7b:28:85:4d:81:9b:e0:ff:96:c8:cf:5e:0f:f2:13:6f:
97:69:f3:ab:b6:5f:ce:28:93:50:a4:0d:f4:f0:74:09:15:a5:
8b:c3:61:b0:a4:42:19:1c:6e:e8:1a:25:92:0e:1f:48:32:bb:
d5:40:6e:1d:ca:d0:d0:40:80:03:07:dc:ba:f8:da:1f:da:70:
ac:65:f4:27:49:34:b3:13:2d:8a:fb:c8:dd:a0:13:4d:b3:c0:
f2:ec:d4:77:d8:86:5c:20:01:f8:2c:9a:49:e4:f4:af:ad:5c:
2a:61:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:04 2026 by rpki-client