
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec8e1a50-f3ca-3a28-8f72-adcd2845e125.roa
File: ec8e1a50-f3ca-3a28-8f72-adcd2845e125.roa (raw, json)
Hash identifier: kOwL+S4WcfbeiUBmY3kdaYFFRLSKKeLZs9eHbNKx0mQ=
Subject key identifier: CD:30:23:AA:0A:20:0C:ED:65:F5:22:A8:F6:17:73:0F:B0:77:B0:78
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE09778173D72AD599C5EB700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec8e1a50-f3ca-3a28-8f72-adcd2845e125.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.108.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:78:17:3d:72:ad:59:9c:5e:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=2c5b089b-ae29-421a-afa8-74347a05b750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:11:2b:d1:61:53:bd:3d:b7:94:67:f1:6f:
90:d1:d1:e8:d1:dc:f0:2c:ab:94:73:60:9c:3e:ce:
8e:a4:08:ec:e3:92:05:55:53:6d:96:d2:45:e0:37:
2f:6e:c9:24:a9:d2:48:db:97:f4:e4:ee:69:33:a7:
07:12:9c:e8:d3:69:b6:70:3d:5e:fe:5e:d6:9a:16:
90:b6:8f:b3:0c:5a:f9:2a:9a:25:9b:e7:0b:bc:b6:
06:5a:c0:bf:eb:09:ac:4a:b4:15:ab:f9:78:49:1f:
57:c9:fa:f4:4d:b2:56:91:67:95:54:ec:97:ed:d7:
74:73:5b:f8:b7:9a:aa:b3:7a:98:ed:93:52:94:4d:
c1:f7:73:a6:c4:9a:d3:ee:98:93:95:12:5a:a0:79:
26:58:57:05:3a:c2:93:9a:30:ac:fa:37:be:bf:29:
44:06:d8:53:b1:5d:c0:79:dc:41:5d:7a:61:71:b3:
cd:4e:4b:40:0e:89:2c:09:13:6a:e8:63:5a:a9:9b:
a9:3a:08:37:47:4e:af:46:66:1a:75:30:bb:ae:fa:
80:8a:37:21:89:fc:d5:11:b1:aa:79:4e:f1:39:e1:
e7:4f:b2:59:2b:06:75:b4:9e:b9:87:f9:15:90:6b:
d0:7f:21:28:87:25:04:48:59:b7:44:0a:9c:45:46:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:23:AA:0A:20:0C:ED:65:F5:22:A8:F6:17:73:0F:B0:77:B0:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec8e1a50-f3ca-3a28-8f72-adcd2845e125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:ce:5d:b3:00:f2:97:26:7c:92:42:36:9d:41:3e:fc:68:98:
6a:ea:e6:ff:da:a7:86:3e:d0:d5:0d:71:4d:fc:2a:f9:0c:28:
76:b0:42:96:0c:c5:61:a8:a5:98:65:a3:d2:4c:c4:95:b2:a6:
b3:68:33:9d:c3:b7:c6:f3:6e:ed:3d:66:b4:77:dc:e2:fb:6a:
5d:7b:50:df:13:c5:be:cb:df:10:99:62:70:fb:db:22:c5:28:
62:da:ec:df:b2:50:19:5d:68:1b:09:1f:72:8b:82:13:4c:f5:
f4:73:84:68:bb:8a:12:dc:02:05:c8:f2:4e:dd:5f:2c:b9:62:
94:e4:fc:9a:bd:fe:43:7f:27:6d:6d:7f:9d:2e:28:f1:08:f3:
37:71:31:30:f0:c7:92:60:83:0f:2d:ab:0c:59:c9:15:7f:f4:
9b:f1:84:6d:21:bd:1e:72:e1:b9:70:0e:a8:04:d5:42:ec:84:
03:c3:63:44:6c:ce:67:55:c4:7e:6a:bb:c8:2e:ae:ce:4c:53:
cb:a2:a6:05:f7:ee:e2:b1:21:05:e3:60:b9:aa:0e:70:07:08:
0f:d7:8e:85:32:33:df:18:b2:6a:26:5f:82:41:5b:42:15:f4:
56:da:f7:da:a2:34:c8:d2:56:da:c5:30:c0:a2:10:12:4a:f7:
1c:de:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:43 2026 by rpki-client