
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20dc2b6a-a45d-3773-ab3b-860e90f62e5e.roa
File: 20dc2b6a-a45d-3773-ab3b-860e90f62e5e.roa (raw, json)
Hash identifier: D3qkIn3uuPtAtmtpTTM7UlXTcPplOTbAcPVm6Rx/SjI=
Subject key identifier: B3:B2:78:DC:B4:8F:53:18:93:A6:B4:A0:A8:7B:CC:17:6D:D5:21:DF
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4278181AD04BE40DAF912660
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20dc2b6a-a45d-3773-ab3b-860e90f62e5e.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 2600:8800:3480::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:18:1a:d0:4b:e4:0d:af:91:26:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=56d63b60-19b2-4a8d-9191-8b2067d67dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:44:76:61:41:e2:e6:41:f2:75:69:b3:4b:
11:53:23:7d:ac:34:50:8f:0d:63:3b:50:5d:a5:28:
2b:f1:dd:50:ac:be:9a:a6:2f:5a:d9:6c:1c:f9:15:
25:f0:1f:c2:ae:72:0f:20:8b:f8:46:37:2b:8f:5d:
60:87:ba:0f:81:fb:4b:b2:d1:cc:d3:39:60:d6:3e:
e4:55:30:f8:ea:6a:a5:0e:25:47:d2:b6:30:9c:b2:
77:90:be:ae:19:f8:77:e1:63:13:81:f1:e4:31:3f:
ab:ec:0f:53:6d:df:95:c5:33:52:c7:1c:cb:7d:c2:
4c:84:1b:51:8d:c9:46:2a:26:8d:02:85:2b:26:88:
15:e0:4c:79:e4:1b:82:92:2c:2e:bd:5f:10:aa:31:
3d:a8:f6:e8:17:b1:ee:86:cb:79:61:b5:a7:d0:cd:
3a:13:be:6f:9f:c5:92:07:f3:bd:72:a1:a9:06:db:
21:90:9a:d4:a3:3f:ec:84:50:9d:b2:05:ef:bf:df:
c6:ed:5b:30:51:26:4d:50:5a:cb:06:20:8d:fb:05:
29:ad:12:5d:43:3c:67:8a:54:6b:3c:f0:d3:5e:ab:
25:d0:1e:dc:ff:5c:eb:9f:b0:26:22:2d:02:43:b1:
71:c0:8e:c2:cd:7d:84:6e:25:d6:87:4f:99:17:f3:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B2:78:DC:B4:8F:53:18:93:A6:B4:A0:A8:7B:CC:17:6D:D5:21:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20dc2b6a-a45d-3773-ab3b-860e90f62e5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:8800:3480::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:8a:70:20:cb:b8:35:8f:45:52:e0:66:dd:35:dd:c6:60:42:
80:ba:9a:8a:87:9e:ef:46:f7:ca:b5:8d:dd:d6:f4:9a:23:14:
9e:3e:59:a9:c9:7d:32:7a:5a:e1:88:8c:2e:f6:fa:71:f2:76:
76:ef:92:93:a2:6e:27:77:5a:f3:1a:64:86:f4:6f:4a:35:8c:
94:09:83:be:9c:b0:ff:5e:fc:7e:02:68:aa:48:e5:65:2b:02:
c5:01:e1:00:98:b8:d8:f1:2a:ab:2f:b6:35:33:ee:d7:c5:84:
94:5d:ae:26:05:32:94:56:d0:fd:17:fa:6e:4f:b9:e2:7f:6a:
2c:3b:0a:24:9d:bb:53:fa:66:a6:d9:bd:f9:44:b6:a3:8f:2e:
d0:d9:51:44:1e:b2:e5:0f:81:a5:f6:7d:7e:47:3e:f6:5e:e5:
48:3a:dd:af:e7:f4:fc:55:a6:30:8f:a7:f1:43:91:9b:78:8d:
b5:55:bd:c8:96:94:12:d1:57:46:b6:86:7b:55:a5:55:6f:0a:
b5:38:c2:78:8c:d3:82:b9:2b:73:ed:3f:25:4b:9d:92:26:3e:
d6:4f:7e:27:a5:6d:e8:32:f9:3e:1a:2d:29:08:88:ff:d5:eb:
6f:dd:63:9d:29:a2:8b:a2:e2:35:cb:44:64:40:a3:0b:9e:43:
d5:73:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:56:24 2026 by rpki-client