
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ee7254b-328d-3d26-9232-0c709ed7b58b.roa
File: 2ee7254b-328d-3d26-9232-0c709ed7b58b.roa (raw, json)
Hash identifier: e+DsFHS7E9QDbt3OhbMCa5WkjPxu1/NZ4kwTOZFZiF0=
Subject key identifier: 1C:66:8D:8A:78:B0:DF:1B:16:63:2A:32:8C:2C:B8:BB:B5:26:47:00
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4278544E3228116DCAEBAA40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ee7254b-328d-3d26-9232-0c709ed7b58b.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 72.208.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:54:4e:32:28:11:6d:ca:eb:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=726c092d-4624-4643-8895-cdafb7b0cf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:4e:57:37:88:82:fa:32:34:af:4f:75:93:
7f:f8:a8:d7:cc:44:c4:6f:63:2e:cc:16:e5:3d:bd:
0b:01:cf:73:63:a2:77:f3:c3:64:c1:83:51:fa:c7:
44:a4:4d:c0:dd:f4:fc:e7:98:d1:87:7b:c4:f1:26:
f9:d0:37:7c:14:66:7c:1e:d3:ea:48:3e:cd:b3:46:
34:83:22:4c:de:76:93:10:73:6d:25:a9:0e:3d:a6:
83:d2:1a:15:64:07:fb:c8:07:d0:8c:42:cb:3f:5a:
8e:e6:93:d4:8e:ba:5c:2a:9c:ef:9d:a4:0e:7d:65:
df:68:cf:27:d9:78:e6:af:c8:6a:3f:a0:d1:2a:f2:
a4:08:91:f0:20:59:2a:eb:7e:f1:31:49:e3:72:96:
14:0c:de:91:79:b3:8c:24:da:64:c2:6a:3f:19:0c:
ff:58:86:c1:57:8f:fd:06:ed:a7:fd:74:f6:dd:83:
18:30:7a:cd:eb:15:93:b9:0a:06:14:99:5c:9f:da:
32:64:46:78:d0:0e:41:8b:77:c3:10:83:e2:19:86:
af:02:50:88:ad:8d:3d:04:0d:54:82:26:59:b8:64:
26:47:86:b5:f4:6d:8c:f8:d7:9c:32:a8:f4:ed:9f:
93:e3:74:51:7e:fb:d6:4a:be:39:96:9e:18:df:41:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:66:8D:8A:78:B0:DF:1B:16:63:2A:32:8C:2C:B8:BB:B5:26:47:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ee7254b-328d-3d26-9232-0c709ed7b58b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.208.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f9:3b:a1:61:9c:cb:04:3f:cc:81:db:e7:31:b8:ad:5a:95:
40:60:d6:d4:87:38:62:59:91:7d:23:90:9e:ff:22:f5:f1:74:
8b:43:6d:fa:af:91:51:b5:48:8e:e2:89:33:75:0a:8d:c9:70:
87:7d:03:b9:bb:c3:90:06:b3:bf:7a:b5:de:f1:f6:16:35:2e:
e4:1c:ce:a9:fc:40:9a:cd:b7:57:44:ea:67:29:43:c7:47:b4:
5e:02:8c:59:f0:f3:7e:c4:5a:01:5a:c7:1a:5f:8e:3b:ec:07:
84:01:64:1f:82:fd:6f:47:b6:d2:99:48:98:89:2f:95:3e:2d:
0c:75:cf:50:79:7b:8f:19:68:1c:67:7c:12:7e:d0:91:59:72:
13:69:8e:6b:cd:56:b3:74:a1:d0:ff:cf:56:fd:bb:75:87:4e:
d9:50:c4:66:6b:b8:1d:2f:b8:75:81:83:06:a8:f6:6e:9b:ff:
f1:4c:f4:21:0d:2e:e3:87:a0:5e:e2:c6:14:8e:91:e3:7a:92:
10:04:f3:45:09:ca:c1:9a:de:fd:66:6b:e0:db:5a:50:87:14:
b0:52:b0:28:42:f9:ba:3b:c1:d7:12:16:c0:3e:b4:d0:45:f7:
7f:f1:c2:ac:65:a8:8c:c9:e3:cf:6a:f7:79:e8:37:a4:3c:22:
b0:ed:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:36:21 2026 by rpki-client