
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65a26d6e-8918-3c5b-b188-6eadf5e35110.roa
File: 65a26d6e-8918-3c5b-b188-6eadf5e35110.roa (raw, json)
Hash identifier: +YsEIgnLOefI+EGXkQt3Gat0kSgXQqtHIAZPN6M6D3E=
Subject key identifier: D1:43:B5:95:A8:2A:B2:2A:CD:F3:A9:23:46:20:2C:48:31:60:12:09
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584DBFD06327E4FF35988FB48640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65a26d6e-8918-3c5b-b188-6eadf5e35110.roa
Signing time: Thu 07 May 2026 01:00:23 +0000
ROA not before: Thu 07 May 2026 01:00:23 +0000
ROA not after: Wed 05 Aug 2026 01:00:23 +0000
asID: 22773
IP address blocks: 72.223.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bf:d0:63:27:e4:ff:35:98:8f:b4:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 7 01:00:23 2026 GMT
Not After : Aug 5 01:00:23 2026 GMT
Subject: CN=2cacdf27-6740-4bfc-9b01-2fb51e7af7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:de:1d:21:bb:61:34:5c:34:56:fc:a9:4a:
4b:f5:15:8f:e5:2e:d9:6a:18:91:26:3c:6a:f0:46:
b9:32:8b:4f:c3:82:dd:c9:3b:70:6b:0e:ad:55:62:
01:54:83:0b:28:86:88:84:70:7d:66:41:a7:94:7b:
bf:2b:60:ca:f9:f7:06:7c:aa:68:93:a7:79:e1:2f:
e9:30:ba:94:e3:37:a3:1e:47:3f:ce:97:07:a0:da:
1f:29:5b:be:15:c4:64:d6:5b:bf:e4:23:65:ef:c4:
de:ce:4d:dc:e8:af:9a:41:2e:78:90:9f:c0:30:b4:
2f:0b:c7:e0:83:18:07:ef:3f:dc:d8:3a:00:12:45:
80:aa:27:15:b4:d6:a9:f6:d4:89:77:60:bf:c5:48:
17:9a:2c:17:84:48:30:61:6b:46:86:85:37:9c:73:
65:9b:65:1d:22:a3:03:ad:83:c2:85:a7:a8:81:f3:
96:12:ba:a2:fe:bf:9f:cb:49:fe:16:7c:cd:92:bd:
71:f3:a6:44:29:ac:0f:db:74:a4:c9:76:f1:4c:ac:
c3:c0:61:14:76:67:2c:b0:f4:14:39:cd:fa:91:95:
19:e7:bd:7b:39:f5:3a:ab:c4:96:ed:43:25:a9:fc:
66:9f:4f:12:a6:92:cc:f7:83:67:54:2e:d2:9b:c6:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:B5:95:A8:2A:B2:2A:CD:F3:A9:23:46:20:2C:48:31:60:12:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65a26d6e-8918-3c5b-b188-6eadf5e35110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.223.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:e8:17:e6:c9:47:57:f8:93:ff:f5:ba:9e:1c:4f:e1:2e:bc:
38:f3:97:c5:7c:ed:fd:03:54:22:78:17:ad:9c:d0:a4:3d:d2:
e8:a2:bc:48:4e:43:e4:dc:b9:ff:83:e9:66:8f:0c:50:b6:f7:
e7:2d:ba:7c:8c:bb:34:7f:b1:d3:60:5f:ad:20:8c:ed:72:91:
58:26:53:8b:40:78:2f:21:72:6b:e2:b3:49:16:21:42:b6:eb:
a7:0c:e3:74:27:05:29:07:34:a2:de:28:8e:4e:26:a9:18:31:
f2:4a:89:a4:31:63:43:ae:84:77:61:03:42:8b:6c:3b:cc:c2:
f6:54:a2:78:bc:a7:fa:05:a7:5f:7a:1c:e5:45:63:f6:ec:57:
95:65:61:fd:eb:a1:2a:a6:87:3d:cd:77:f3:91:26:c9:fa:1d:
b4:39:f5:6d:45:c9:73:9a:d6:9c:80:33:7b:e3:8c:43:c7:7f:
e2:1e:3b:af:9e:23:dc:ad:99:82:7b:3a:06:24:05:2d:e2:09:
ed:58:7c:eb:bd:2f:b6:00:21:80:b8:9f:0f:57:87:da:ee:1e:
01:3c:66:b5:9e:5f:b6:ce:15:b3:36:af:cd:bd:fa:41:f1:a0:
90:d7:1e:46:5a:5c:88:ed:db:fb:7a:a9:3d:f6:6e:c4:8b:db:
3c:b4:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:14 2026 by rpki-client