
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01cd6a7a-f4eb-306c-96a7-2368a8aaf00e.roa
File: 01cd6a7a-f4eb-306c-96a7-2368a8aaf00e.roa (raw, json)
Hash identifier: vCzVotafDelnzuIFek7krwxaL97k/1jBc/DCdQeT3jY=
Subject key identifier: BE:66:25:8D:F0:01:C2:9C:CC:B7:4B:43:BA:B2:F9:AF:BA:78:1B:BC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584DBFD0679B625756EF32F7A640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01cd6a7a-f4eb-306c-96a7-2368a8aaf00e.roa
Signing time: Thu 07 May 2026 01:00:23 +0000
ROA not before: Thu 07 May 2026 01:00:23 +0000
ROA not after: Wed 05 Aug 2026 01:00:23 +0000
asID: 22773
IP address blocks: 72.223.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bf:d0:67:9b:62:57:56:ef:32:f7:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 7 01:00:23 2026 GMT
Not After : Aug 5 01:00:23 2026 GMT
Subject: CN=bc159d7f-c820-47c9-abf8-2cf96a7611bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:4d:d9:a1:37:82:f9:67:e3:24:01:1c:4b:
a6:d1:6a:0b:ca:f7:c8:cc:fa:7f:55:94:9e:59:f3:
c7:17:b3:66:70:74:da:12:3a:5d:b4:f9:c8:2c:b4:
12:26:c7:70:41:05:55:af:46:11:e6:c8:1e:ca:15:
78:2f:f8:0a:39:38:0c:28:ef:5b:4f:9f:5c:38:26:
5e:2d:d3:ac:bc:7e:c4:4a:8a:5d:1b:08:ff:42:c4:
b9:18:c1:74:fd:10:a3:7c:8c:2f:eb:9c:8a:35:27:
d8:93:a4:d0:98:36:2e:23:15:ef:c0:68:77:e2:52:
93:44:eb:13:17:4a:07:48:f6:0d:8a:9f:15:25:06:
fc:e4:6c:08:1f:ba:2d:1d:5d:9f:30:0a:bf:a5:57:
84:fa:52:1d:0d:45:96:31:4e:7c:47:7d:4b:66:c6:
86:59:02:38:6a:77:78:85:73:22:1d:93:0f:8b:2e:
73:69:1c:a0:0b:c8:b8:4c:4e:ed:ad:c8:f5:ac:fb:
93:1c:bd:7a:ef:f9:59:da:4d:e2:22:0c:b2:c3:e0:
5a:65:23:67:ae:31:2b:cd:80:f8:c8:5b:3f:60:98:
fd:27:f7:51:8e:94:4a:d7:0e:03:7c:0a:a8:37:5a:
65:49:36:a5:b7:e6:0f:96:50:42:d9:40:9e:9d:65:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:25:8D:F0:01:C2:9C:CC:B7:4B:43:BA:B2:F9:AF:BA:78:1B:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01cd6a7a-f4eb-306c-96a7-2368a8aaf00e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:7e:46:63:8f:33:dc:0c:9e:d9:19:ad:e6:c3:19:23:ba:b4:
7c:7e:05:12:0e:2a:2e:23:af:d5:67:51:ba:d6:82:d8:e0:4d:
a2:e9:5e:6e:42:bc:92:f1:e8:c0:84:31:08:de:d3:09:c1:84:
9c:8d:21:36:17:a2:87:5a:47:8e:d5:d0:e0:42:d1:2a:71:1e:
99:db:44:b7:4d:1c:a2:34:80:b6:b8:a0:55:56:f6:20:ff:68:
c4:58:41:bc:9c:45:04:fa:75:aa:f3:f2:62:3e:f2:7a:be:68:
da:ac:d7:7a:86:c8:17:d6:44:01:1d:a9:eb:b2:7f:a6:75:6f:
87:37:8d:e5:71:63:43:d1:05:e6:d3:3f:73:92:f3:61:1c:7d:
f9:64:7e:f5:30:dc:0b:81:3b:b6:ed:fa:9f:7e:a8:11:5e:fa:
8b:3e:50:c9:b4:a0:e2:d6:60:e6:8b:e7:05:0d:64:06:a6:0b:
c0:c9:a8:e9:fb:be:d2:e5:76:17:4e:d5:03:42:c1:fb:42:c6:
9d:b1:b4:ce:dd:7f:54:59:76:94:72:74:26:8e:46:94:56:37:
de:12:65:a7:f4:bf:09:1c:17:e2:5e:67:d9:82:3e:61:d3:2d:
12:24:e0:98:e7:31:47:46:59:ee:eb:a9:13:67:2a:9c:38:d4:
d9:03:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:19 2026 by rpki-client