
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b41f929-b8cd-39cf-9a01-1c8d2ec34b23.roa
File: 5b41f929-b8cd-39cf-9a01-1c8d2ec34b23.roa (raw, json)
Hash identifier: FKEoJCNAI58twYfmcmIn2jIbJop4fXp1JMBkwCKu4ss=
Subject key identifier: A2:4E:B9:4A:DE:CC:FE:52:F0:15:47:2C:12:E0:F4:C0:BC:0A:2C:FE
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F41128997DC36393969C06A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b41f929-b8cd-39cf-9a01-1c8d2ec34b23.roa
Signing time: Tue 22 Sep 2026 01:00:12 +0000
ROA not before: Tue 22 Sep 2026 01:00:12 +0000
ROA not after: Mon 21 Dec 2026 02:00:12 +0000
asID: 22773
IP address blocks: 68.231.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:41:12:89:97:dc:36:39:39:69:c0:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 01:00:12 2026 GMT
Not After : Dec 21 02:00:12 2026 GMT
Subject: CN=4d6171d3-7fff-42a2-bcec-aea56de21725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:07:55:ee:3a:4d:27:d7:f0:c5:06:2f:a2:
77:66:6a:5e:62:70:f0:b5:c2:94:5d:d8:65:c0:6b:
df:4f:29:29:0a:56:77:e4:14:b2:7f:63:e8:54:75:
5c:23:88:b1:c0:54:5a:d3:ce:08:0e:59:48:d2:6a:
90:85:ad:fe:a3:4d:94:20:d6:03:1f:74:70:52:9f:
b5:ba:58:a3:89:96:f5:2b:fa:82:92:cc:c4:de:2b:
9b:04:79:b4:ae:dc:a5:ac:5f:f0:b8:9e:43:93:de:
4e:a3:58:8e:41:c2:63:00:74:60:95:19:35:87:01:
67:68:94:f5:21:3e:b3:bb:c1:2d:66:4d:97:14:cf:
07:41:27:73:c4:d3:11:4f:60:d0:06:64:b7:84:ac:
4a:ef:22:e1:f3:12:af:80:d7:01:ae:29:e7:d0:b4:
f0:4d:86:1e:11:cd:61:f4:f8:4a:87:7c:f9:a7:38:
50:8c:51:df:71:ea:c2:cd:f1:81:09:7d:7f:df:89:
b8:57:4e:a2:9d:1d:ef:07:18:65:3f:a8:b7:81:93:
a5:f9:ef:ce:c1:5f:1a:bb:9b:30:d5:3a:33:57:46:
e7:97:aa:05:55:32:fa:86:d0:63:33:43:46:da:d5:
8d:c9:d9:60:f3:d5:06:fe:d0:3f:d5:d4:92:6e:48:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:B9:4A:DE:CC:FE:52:F0:15:47:2C:12:E0:F4:C0:BC:0A:2C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b41f929-b8cd-39cf-9a01-1c8d2ec34b23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d3:25:a4:84:5c:9d:bb:c7:98:f0:e9:96:5a:8a:99:af:f8:
54:7b:e1:0a:b6:60:3a:b2:cf:bc:05:8f:94:5d:bf:21:5f:c6:
d7:8c:4b:3c:95:ec:be:f4:c7:a8:7a:91:96:9a:41:e5:61:f3:
af:fb:d3:f5:13:21:cd:74:ba:70:d3:bd:d1:8b:cf:11:04:af:
93:9b:aa:d9:bc:df:78:b8:ac:b3:20:21:a4:c2:85:a1:8b:a7:
29:6b:f8:5a:0c:1c:64:cf:59:d7:52:fa:a7:ed:0a:76:b0:35:
69:f6:4c:be:71:50:91:c8:33:d5:5c:91:18:dc:13:c5:13:bf:
28:35:db:0c:2b:2a:ba:36:29:aa:98:f5:1d:79:d3:3d:54:56:
4b:1b:99:77:74:3c:2c:66:2d:23:d0:d8:14:ee:58:90:9c:53:
2b:fb:b1:d8:c6:93:47:b6:8f:f5:6b:b8:c6:a1:56:a5:e2:d6:
2b:c8:5f:1c:e3:79:ac:38:1f:19:92:25:be:92:76:02:0d:2f:
d9:e9:dd:ac:3f:83:05:18:89:60:f1:6a:c2:16:4a:75:26:f8:
9c:13:c4:1d:2d:a0:6c:64:81:35:07:cf:b0:4f:99:06:0b:4c:
de:63:bc:93:96:ef:50:49:fd:04:59:52:6c:12:4b:87:92:af:
41:87:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:06 2026 by rpki-client