
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa
File: 24852c38-21d4-3340-ad31-087aec7f9bba.roa (raw, json)
Hash identifier: VI3xE3QLtQfm/ufYLMA/pfv/btvnTKpa+2dLD8vw+mU=
Subject key identifier: 5D:AC:61:AF:77:18:9B:57:91:54:0D:BF:90:F4:04:67:77:20:A8:94
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584DC135CC9510C71EFDC64FB9A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa
Signing time: Thu 07 May 2026 13:00:31 +0000
ROA not before: Thu 07 May 2026 13:00:31 +0000
ROA not after: Wed 05 Aug 2026 13:00:31 +0000
asID: 22773
IP address blocks: 68.108.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c1:35:cc:95:10:c7:1e:fd:c6:4f:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 7 13:00:31 2026 GMT
Not After : Aug 5 13:00:31 2026 GMT
Subject: CN=453a6f43-f1af-4b52-b965-fefac55748c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:07:66:19:ea:31:73:a1:f3:db:8c:00:98:
76:c1:5c:90:23:53:64:75:91:fc:85:87:a3:de:71:
af:18:2f:a6:8f:6e:cc:b2:93:51:ff:5e:e5:87:4c:
25:51:3b:4d:84:5e:da:62:db:c3:55:43:9f:fc:88:
f8:bc:0c:9e:d1:ac:66:8e:37:52:56:ce:f1:79:92:
e6:3d:a4:d1:e2:5a:57:dc:40:0e:a7:33:5a:00:40:
32:db:b7:b8:5d:cc:b6:5c:0e:13:0c:2e:a9:7c:c8:
cb:3e:f4:41:2e:92:38:b6:15:bc:e3:e6:64:f3:0e:
7a:fe:8c:9a:54:ce:0e:02:24:62:fb:1a:38:af:28:
4d:ce:3e:73:f3:ea:fb:36:29:c3:df:eb:5c:1f:7a:
de:17:7d:a8:a0:aa:d9:6a:ae:78:75:0a:32:0b:b8:
0c:c6:3c:76:f5:11:83:33:3c:0a:06:ad:c9:4d:e0:
af:e4:68:c2:a6:1d:1d:a7:8f:45:ce:62:a0:3c:03:
90:e6:27:c4:0d:61:1c:77:7e:c6:f1:07:bb:f9:7c:
42:ff:f1:90:a8:fe:0d:b5:5b:a1:87:28:62:ca:b8:
4c:37:19:74:d5:85:ff:38:43:50:84:b7:78:84:c7:
8a:f0:7a:b6:ad:7e:c8:ed:3a:90:6e:bf:2b:f9:1a:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AC:61:AF:77:18:9B:57:91:54:0D:BF:90:F4:04:67:77:20:A8:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.108.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:76:3b:78:bd:83:94:4a:ea:7f:a9:bf:9c:78:67:28:68:f7:
02:90:1b:7e:99:4f:3f:bd:dc:98:e3:62:2f:af:84:2d:9f:65:
2f:fc:aa:c5:87:4a:49:1b:3e:15:ff:ee:38:29:4f:17:50:9a:
93:25:bb:41:fc:60:65:66:ec:53:78:f1:2e:43:e6:6a:82:cc:
5f:9d:2c:ed:bc:3e:ad:82:0e:ec:66:36:56:da:d6:7e:b0:da:
ff:2a:27:57:e1:2d:6c:9e:27:1a:5b:d8:27:20:ae:01:71:95:
a4:b9:84:bb:37:4b:67:e6:ae:37:d3:43:d0:e0:f5:64:e5:fc:
db:73:e3:e5:15:2d:e1:ad:bf:f7:61:69:07:7a:0f:ad:8c:51:
88:a4:32:5d:14:da:ce:d3:f6:77:25:d9:ad:44:a8:c0:13:1c:
2e:1f:38:74:5b:2d:33:d1:94:e6:c5:5a:bd:24:a5:97:8a:2f:
dc:25:29:f9:2c:e1:c8:c4:9a:bb:90:24:23:9e:91:1a:ff:fb:
b3:9f:11:e1:3a:e1:6f:ac:8c:e2:5b:0d:84:d0:b0:f2:b3:c4:
3e:43:fc:35:00:80:f9:bb:50:60:22:74:25:99:47:12:d4:46:
b8:5f:d3:d7:f8:fc:99:d4:f3:21:1c:81:4d:44:c1:a6:af:51:
39:69:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:31 2026 by rpki-client