
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2acef9eb-1abd-38e1-8cf8-7bb19e03c75a.roa
File: 2acef9eb-1abd-38e1-8cf8-7bb19e03c75a.roa (raw, json)
Hash identifier: ThQHoq+KYJzu23AqLf8Muc/ofhwXHeEXdHZPnH7hy6o=
Subject key identifier: 4D:8F:77:08:AE:08:ED:3E:A4:2A:71:6D:89:D0:91:E9:0F:B8:B1:08
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584DC83050D2901A4382A3995500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2acef9eb-1abd-38e1-8cf8-7bb19e03c75a.roa
Signing time: Sun 10 May 2026 01:00:24 +0000
ROA not before: Sun 10 May 2026 01:00:24 +0000
ROA not after: Sat 08 Aug 2026 01:00:24 +0000
asID: 22773
IP address blocks: 68.99.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c8:30:50:d2:90:1a:43:82:a3:99:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 10 01:00:24 2026 GMT
Not After : Aug 8 01:00:24 2026 GMT
Subject: CN=bb2c6331-a3ac-4949-ab00-23a0644176ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e1:b2:b3:b8:d1:97:84:ad:a7:a8:aa:58:08:
5e:7c:b7:77:93:ef:41:03:cf:b0:ca:41:ff:7e:b3:
19:37:67:78:71:62:a3:06:68:3c:dd:c6:27:1d:5e:
2f:75:b8:67:c6:48:16:6c:4e:72:a2:8c:78:17:7b:
61:1e:6a:76:a6:30:d1:4a:e6:55:dc:9c:46:d9:d5:
a5:8d:05:a2:40:f7:34:01:3d:16:73:2b:d4:11:93:
93:49:f5:2e:ae:72:7c:e9:d5:0e:a3:12:8f:a3:c9:
ab:7b:62:31:27:e4:ed:05:ae:44:c9:e0:d0:ac:c9:
94:c9:4c:09:bd:16:db:7d:40:40:a7:fb:ef:c0:59:
3c:17:ce:b3:70:68:78:81:c7:c5:58:b0:22:88:35:
79:27:a9:16:1f:80:4b:36:83:34:de:10:d0:39:24:
b9:3e:31:c3:9c:66:b4:58:82:39:ac:0e:82:ad:ed:
8c:43:46:40:32:03:97:93:a3:68:ae:85:0b:9a:16:
23:2f:de:12:9a:fd:9f:2f:9e:df:07:dc:ef:8f:ee:
ae:16:45:5f:5a:56:89:b5:fe:aa:f4:69:08:2d:79:
bf:51:cb:b8:87:20:0d:e2:f4:ea:7d:94:34:aa:87:
89:bd:a1:56:ac:94:15:f9:34:9a:df:86:ed:11:a1:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:77:08:AE:08:ED:3E:A4:2A:71:6D:89:D0:91:E9:0F:B8:B1:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2acef9eb-1abd-38e1-8cf8-7bb19e03c75a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.99.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:d8:aa:27:bb:cc:75:2a:33:9d:6b:4c:53:21:13:c0:de:88:
b3:dd:dc:61:8a:21:e4:cd:66:c5:c1:fd:1a:5d:2d:d2:ec:8a:
9d:5d:b0:c7:ce:0b:84:81:17:cb:2c:5a:29:b4:9e:be:df:ed:
26:91:8f:9a:ba:b1:fa:97:11:38:76:04:91:3a:55:ec:7d:de:
62:0f:38:af:1b:e4:5b:df:b1:65:df:cb:9a:b3:43:93:4b:51:
ea:a3:f4:09:e7:0f:6a:ad:35:2e:c9:2d:c3:96:cf:c5:63:c3:
a7:0b:1c:7f:ac:29:f8:17:b7:b7:eb:c4:44:70:8b:69:36:ea:
e6:53:6f:c2:19:0d:d6:eb:5a:79:0e:56:b2:86:80:e6:7d:97:
92:cb:78:93:2a:d8:73:b4:56:77:f9:59:69:07:87:53:db:81:
71:08:ff:4d:1c:d4:6a:8d:4b:a8:8f:47:82:4b:c6:b2:9c:00:
c4:07:37:90:bc:8e:b1:8d:7b:3f:ba:e9:09:5f:04:1c:76:d0:
c2:ff:57:48:a9:ca:37:5c:45:cb:88:e3:3e:29:1e:58:43:74:
0c:e3:0f:55:70:f6:47:a9:59:c9:3f:9c:33:db:c9:d6:7e:43:
16:a9:5e:12:4b:97:f9:e2:b2:73:f9:b3:ea:85:fc:78:de:80:
5d:a1:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:56 2026 by rpki-client