
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4653a3fe-c18a-33fb-aada-edb291bc3304.roa
File: 4653a3fe-c18a-33fb-aada-edb291bc3304.roa (raw, json)
Hash identifier: ccy3CyhDkwQuUXY6hXrlZYwMQlR8ojN0fDg7GrJN2hQ=
Subject key identifier: 71:91:2A:0D:8F:46:AC:21:F3:3D:D8:3B:70:38:23:A4:FD:71:8E:06
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4278195F89DD222624876D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4653a3fe-c18a-33fb-aada-edb291bc3304.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 22773
IP address blocks: 72.222.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:19:5f:89:dd:22:26:24:87:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=fb30e494-61c7-42b8-a4ed-585a28a6bc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:6c:b5:cf:93:7a:27:6e:d7:71:13:8c:5e:
e8:f2:04:cb:0b:84:a8:07:a1:61:02:00:f0:b1:f9:
f4:fa:6f:fb:6d:73:da:ab:4c:93:a0:dd:5d:33:66:
c5:a6:db:22:e0:df:ab:2c:07:57:9f:6b:35:e1:97:
11:6f:2d:cc:5b:e3:f3:7c:87:99:df:74:e7:f6:e8:
f4:da:06:b6:71:04:81:e2:73:61:e9:87:4f:e9:3f:
38:6d:f7:8b:51:7b:37:8e:6d:cc:c8:56:fb:0f:c8:
63:e0:4c:a2:be:14:eb:e8:75:94:60:8f:af:f9:1e:
64:52:7b:94:bf:54:71:d9:d9:11:19:83:05:43:a8:
ea:93:40:ba:b2:6a:a5:a4:4d:da:00:6f:2f:98:f3:
53:b7:b7:4c:f6:eb:62:ef:d3:95:cf:9a:a6:91:fb:
d7:4f:e1:bf:35:15:f5:fb:4d:9b:9e:95:87:de:0e:
27:f9:62:9e:de:6c:d8:b0:4f:79:66:8a:59:1e:3a:
4b:ce:53:03:d0:79:cf:aa:9c:16:14:0a:bd:c1:1e:
2c:43:6a:6f:a8:d3:18:7f:50:3a:e2:2e:8d:10:69:
1e:d8:fb:fb:6a:6c:a2:b4:b7:1f:54:09:a5:a3:6b:
37:dc:f2:45:52:8b:37:82:d7:58:8b:4f:cf:5b:2d:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:91:2A:0D:8F:46:AC:21:F3:3D:D8:3B:70:38:23:A4:FD:71:8E:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4653a3fe-c18a-33fb-aada-edb291bc3304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.222.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c4:92:b9:78:c7:84:5d:46:3e:60:3d:b0:04:60:c9:a0:a2:
77:d2:4a:5d:91:bc:95:78:df:f8:dd:cc:82:52:05:2d:39:f7:
61:f9:20:03:d4:0e:2c:67:53:24:4e:1d:64:31:7d:52:b2:b7:
89:ff:14:7b:9a:3a:8d:1e:57:c2:79:ed:32:3b:30:fa:a9:78:
b9:a0:95:6e:99:6d:bb:f3:9a:dd:74:28:12:1f:e8:26:33:f4:
6a:a0:8d:76:d1:d2:52:88:39:6a:eb:3d:be:85:b7:bd:b8:cd:
5f:85:c7:47:b4:40:7f:cb:de:93:2f:da:c7:65:e3:e0:2d:3f:
5b:d7:d3:e4:3b:a6:8e:76:f2:33:d5:07:01:ab:d9:b3:7c:a9:
f6:93:8d:e0:36:94:ab:6f:2a:2e:4c:47:e7:8b:a7:6e:da:5f:
98:f7:9a:aa:a6:a4:4c:c3:6a:4d:6b:c0:ab:8a:97:30:df:6a:
5e:f8:da:4e:79:dc:ba:e5:9e:13:b7:a9:34:14:8d:58:88:f1:
9c:3d:88:e6:41:f2:f7:ea:60:20:0d:4d:4f:29:59:90:29:36:
f0:f2:73:0f:b7:6c:b7:1a:0c:40:ab:c6:f7:da:c2:9e:46:dd:
c1:45:87:e7:62:0f:8d:ec:06:ae:ce:c6:7e:f5:00:65:2d:71:
2c:9f:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:12:21 2026 by rpki-client