
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b860989-7a54-3bdb-9f24-8b3bcdaa5c78.roa
File: 3b860989-7a54-3bdb-9f24-8b3bcdaa5c78.roa (raw, json)
Hash identifier: iXSyDnfnvh0McnWNZ4wTDpgn6Y18QOkgpxBHTkcIecc=
Subject key identifier: 55:24:F7:22:89:C3:6D:B0:E3:64:B8:EB:BE:78:45:9D:76:CC:27:D0
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F42780AD3D721F59B9E3D5540
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b860989-7a54-3bdb-9f24-8b3bcdaa5c78.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 2600:880a:70c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:0a:d3:d7:21:f5:9b:9e:3d:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=81045c3d-4377-4ce9-8dd5-bffb06862299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:8a:b9:59:73:40:80:84:11:6f:c5:cd:65:
5f:ae:c1:6f:5d:14:6c:3f:a8:d3:49:1c:f6:47:08:
9c:41:9b:25:29:19:ea:45:7b:a0:a9:bb:9d:66:77:
34:63:57:a9:49:6e:f0:90:2a:95:d4:b9:0c:56:70:
92:85:a9:e0:30:70:ee:b1:33:28:d7:a7:b3:57:15:
b5:c4:0f:82:72:2f:72:84:bf:46:6c:10:c1:3b:ad:
c3:6d:ad:f8:46:44:89:d7:50:ba:ac:be:18:64:cf:
b5:dc:76:f4:cc:ae:35:75:a2:c0:4e:17:04:4d:25:
ba:49:32:3b:d3:3c:c1:3e:95:b4:ab:4e:98:29:25:
29:f6:08:91:de:99:0a:1d:18:4b:1b:09:3f:67:41:
a8:28:15:0c:46:78:55:3b:04:72:90:7d:bc:59:1a:
71:f5:e8:05:49:00:9e:6e:48:66:ae:80:01:2f:0f:
ce:12:d8:af:b7:5f:2b:2b:c0:5f:21:5d:5a:9d:04:
62:6f:88:b1:41:1f:54:48:08:c2:48:6f:f6:62:3e:
cd:19:1a:a3:9c:63:13:5d:8c:59:4e:4d:6d:39:22:
f4:84:ea:31:99:c8:0a:d7:7f:10:6b:48:54:b0:6a:
5e:b7:a7:39:7f:c2:ca:82:ac:1c:87:5c:e6:70:9e:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:F7:22:89:C3:6D:B0:E3:64:B8:EB:BE:78:45:9D:76:CC:27:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b860989-7a54-3bdb-9f24-8b3bcdaa5c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:880a:70c::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:50:71:39:09:32:0a:27:bf:39:8e:02:40:95:4e:17:02:a1:
7d:2d:be:6d:e2:6a:0a:62:83:70:a8:58:de:91:b5:8a:11:9c:
81:b1:37:70:bf:6b:49:69:3f:3a:fb:3d:58:7e:98:9e:1d:0e:
92:ee:93:0c:7e:6f:d9:3b:d7:db:6f:8b:75:0a:25:be:77:22:
f5:8d:d5:45:cc:53:1b:cc:fe:72:6e:ac:e7:2d:25:3b:3d:8a:
59:79:43:9b:41:50:61:81:4a:81:83:2b:ae:6d:eb:b8:9b:7e:
c1:94:e7:ee:22:f7:9c:b9:45:e0:bb:71:7d:dd:65:60:c2:0c:
a1:cb:64:40:c7:ca:e5:e4:e4:1e:ba:1e:2c:e8:1f:e5:06:63:
0d:18:20:4c:eb:cf:11:f5:4d:97:eb:5b:58:51:f2:4b:c7:6d:
5c:05:6e:06:20:06:4e:fe:5b:3d:17:90:b4:41:bb:20:c0:59:
03:8b:6d:9b:68:65:1b:e9:70:34:e5:24:90:3f:33:91:3b:c4:
dd:7c:77:de:c0:2a:69:cf:45:f3:3a:42:38:13:87:fb:61:f4:
ef:8b:50:9a:89:f0:bb:28:fe:84:66:06:4e:8c:f8:da:94:5d:
1d:28:a6:d6:d9:8b:17:68:be:80:ec:f3:ae:f4:76:46:b7:b7:
4e:f5:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:39:43 2026 by rpki-client