
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json)
Hash identifier: xyv3JtR9FKEAVjlS9awRKjyRujlwK3g57AgIO4SIY78=
Subject key identifier: 5E:9C:90:84:3A:AC:C9:36:21:96:68:87:31:05:F6:41:45:6D:18:1F
Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94
Certificate serial: 010D0C9F4328584E736A1CD47C843FB103748DC0
Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
Signing time: Fri 10 Jul 2026 09:00:12 +0000
ROA not before: Fri 10 Jul 2026 09:00:12 +0000
ROA not after: Thu 08 Oct 2026 09:00:12 +0000
asID: 25715
IP address blocks: 173.225.32.0/20 maxlen: 24
199.36.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:73:6a:1c:d4:7c:84:3f:b1:03:74:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94
Validity
Not Before: Jul 10 09:00:12 2026 GMT
Not After : Oct 8 09:00:12 2026 GMT
Subject: CN=a7401455-e338-40c7-9422-a254744d5e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:ec:59:18:30:3c:ce:b2:42:f6:b4:e5:24:
fc:9d:9c:d3:db:aa:41:0d:5e:d0:dd:61:79:8b:b7:
ef:d6:88:9f:ae:14:b9:f4:1f:11:28:af:af:25:6b:
41:47:34:24:94:d5:a8:c6:29:08:8b:15:e0:52:d1:
4b:19:ba:16:0c:65:ed:21:ef:16:f1:20:72:27:e6:
03:bd:fd:a3:08:b7:15:af:67:50:bf:48:d2:f8:84:
81:cf:dd:13:79:4c:bf:ba:e4:ef:1d:8d:0e:ad:51:
06:fa:b8:8f:12:a0:b6:37:6d:0b:6b:09:32:9c:56:
18:3d:f9:73:cb:6f:ac:f6:f7:f0:83:24:fc:6a:2b:
04:3a:a6:cd:3e:4c:16:0e:73:da:40:23:06:de:fb:
84:79:d4:52:08:ea:28:dc:2c:1a:5a:08:5a:98:b8:
1e:bc:3e:c6:4d:af:8c:c0:9a:d4:a6:e7:b6:22:a5:
0b:f9:05:b8:e4:20:73:2b:57:0b:d4:fd:00:1f:5d:
f0:9b:0b:37:b4:8a:4f:b9:32:4b:86:93:47:5f:ab:
5e:92:a1:cf:e9:98:0d:17:fe:94:f7:7d:bf:78:6b:
9e:98:de:a6:3b:1c:2d:74:1a:21:93:30:2b:f9:14:
6f:a8:e2:35:16:4b:87:3f:f1:ba:35:c5:c7:28:d3:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9C:90:84:3A:AC:C9:36:21:96:68:87:31:05:F6:41:45:6D:18:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl
X509v3 Authority Key Identifier:
keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer
sbgp-ipAddrBlock: critical
IPv4:
173.225.32.0/20
199.36.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ff:4a:bb:ed:68:3f:ed:9b:df:c1:51:cd:9d:23:6d:0e:38:
56:50:45:27:66:98:1a:16:57:c0:61:25:7b:73:82:92:f7:38:
94:4f:42:3c:d3:9a:57:a2:8b:a7:39:40:b7:0f:99:d0:0a:cf:
ea:79:6c:39:6a:04:6c:b0:40:9a:9c:57:a1:a3:39:07:41:f1:
7b:60:e7:23:c6:3e:de:a8:87:6e:41:28:a8:cd:8e:dc:52:69:
bd:2a:1e:46:fa:6a:5d:05:8a:c7:14:4b:8a:f2:56:1e:c4:28:
4f:09:4f:3f:60:8c:53:24:18:1c:f0:f4:f8:a1:10:c7:75:1a:
2b:53:08:91:8c:93:5b:3c:8d:81:6c:d4:54:29:d7:f6:36:1d:
16:d8:a8:4c:65:8d:fd:a3:26:25:fb:f0:f0:ba:f3:52:2e:4a:
4c:fd:5a:5a:0d:95:57:3e:b9:66:f2:b4:64:9c:6f:70:9f:4f:
a3:9b:53:e9:fb:ca:d8:8e:ec:18:85:a7:25:bd:da:9d:c2:a7:
e6:e1:96:d6:71:9f:81:47:90:74:a3:7a:7a:0d:e3:8b:5f:b4:
e8:51:c7:84:a9:d2:30:ae:b4:61:41:60:62:2c:b1:91:e5:e5:
51:4c:54:7c:02:9f:56:a3:6e:f8:32:5a:29:2d:87:af:4c:57:
63:51:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:24 2026 by rpki-client