
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff813561-30c2-3f35-9476-3efc405cd761.roa
File: ff813561-30c2-3f35-9476-3efc405cd761.roa (raw, json)
Hash identifier: ErYAh2KXE1r6kyD4JVXznQa1rwp/2bOLELJSR2DtGFk=
Subject key identifier: DD:F5:27:D4:FB:DD:98:55:81:F4:C2:8F:B0:41:70:30:8E:2A:7B:FA
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584CE0977030A1F6C5294D202140
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff813561-30c2-3f35-9476-3efc405cd761.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 22773
IP address blocks: 68.96.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:70:30:a1:f6:c5:29:4d:20:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=11eab9a4-06e9-4b0f-94a8-228fb4312a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:db:78:fd:cd:64:b8:cc:e1:91:85:4c:fc:
1d:91:05:a2:c9:f1:32:dd:ff:71:55:75:0a:3b:c1:
fe:f4:de:c3:80:24:9a:7c:82:10:59:bc:bb:72:33:
88:a2:c5:8c:6f:ba:89:01:c6:70:cc:b2:bc:b4:b0:
6c:fb:9c:58:e0:da:31:7e:44:c4:34:c9:c0:91:ec:
c8:c1:dc:83:14:9e:6e:20:0e:14:1c:2b:4c:1c:0a:
92:59:55:cf:35:53:42:da:a6:97:1b:29:d6:dc:b3:
85:4f:4d:db:d1:f2:8e:e0:89:cd:bc:ca:66:2e:cb:
ba:45:a5:c9:4a:03:87:04:46:3e:92:69:24:41:90:
42:39:b1:39:71:57:e5:61:0e:50:5c:4b:13:2f:04:
a9:65:b5:1c:1f:eb:2b:51:9d:63:b5:52:12:de:1a:
fb:0c:6b:16:75:d1:c7:10:a1:04:ee:04:2b:9a:71:
6d:e6:b9:db:f4:42:ba:27:5a:0c:97:63:e8:37:c3:
b3:da:3b:f0:06:c5:24:08:93:ff:77:b7:34:f1:d9:
13:0b:b5:4d:e4:f8:6b:c0:36:ac:96:d4:c9:37:22:
b0:b3:f1:58:0d:9b:10:24:bc:f6:a5:ba:e9:6f:8a:
bd:a0:7a:db:3d:9f:6e:38:89:13:31:05:ce:bc:b1:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F5:27:D4:FB:DD:98:55:81:F4:C2:8F:B0:41:70:30:8E:2A:7B:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff813561-30c2-3f35-9476-3efc405cd761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.96.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:56:e3:56:bc:d6:09:0c:6f:e2:6d:93:a8:bc:0d:ae:c3:c4:
f0:6d:33:b6:2d:c6:e8:52:5d:df:42:69:87:25:eb:29:d9:1d:
25:40:5a:14:b0:3c:79:f9:62:e2:c9:ee:f3:62:bc:5b:6b:ab:
ea:ff:e4:ca:7e:b0:65:30:60:64:85:37:5d:ac:0b:1c:a6:30:
21:03:e6:5d:a5:bd:42:dd:40:29:2f:05:d0:bb:c0:78:95:42:
37:67:6d:53:78:e2:e5:0d:ac:19:6a:98:f1:e6:4f:b8:ad:d7:
68:c4:ca:81:05:04:20:c5:2d:e6:af:9c:da:ea:9b:c1:43:46:
6b:56:b8:7e:02:8c:5e:5c:87:54:e0:25:d2:ca:6b:46:3e:68:
fd:a6:d2:5d:04:6c:b8:2f:2e:b1:da:41:91:7d:3c:d3:01:90:
23:75:ef:37:ee:1a:89:85:14:ea:d6:c0:57:65:8f:d6:39:90:
ab:59:d7:ee:98:79:ca:30:c6:ab:dd:d8:57:3e:97:f1:42:3b:
3c:02:c1:09:10:c8:76:fa:6d:e6:08:a5:e6:45:fc:dc:0c:56:
1d:9b:da:79:09:c4:f9:92:b7:5a:89:13:28:10:b2:a8:ed:b5:
b1:03:dd:29:c6:60:51:0d:1a:a4:0c:8c:83:1c:71:60:40:a4:
43:f8:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:37 2026 by rpki-client