
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aaa4f72-414a-3b42-a8c9-5a0148fcc680.roa
File: 6aaa4f72-414a-3b42-a8c9-5a0148fcc680.roa (raw, json)
Hash identifier: Uz1nI0JM/msptPk6nzauPNsPhZoPnU7TtLjGyYMs2js=
Subject key identifier: 67:58:A2:AC:78:13:F5:BB:BA:71:C7:06:6A:73:23:FC:8D:15:51:BC
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584DBE6B4EF90527C1B7F22B4E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aaa4f72-414a-3b42-a8c9-5a0148fcc680.roa
Signing time: Wed 06 May 2026 13:00:30 +0000
ROA not before: Wed 06 May 2026 13:00:30 +0000
ROA not after: Tue 04 Aug 2026 13:00:30 +0000
asID: 22773
IP address blocks: 70.172.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:be:6b:4e:f9:05:27:c1:b7:f2:2b:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 6 13:00:30 2026 GMT
Not After : Aug 4 13:00:30 2026 GMT
Subject: CN=d720c1ae-f8b8-4c9d-911f-b69a1eb511ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:23:b2:8f:c0:fc:de:81:a2:4e:6e:8e:e2:
52:f2:d5:e4:d1:cd:30:1d:c3:bc:0c:8e:25:7b:6b:
d9:af:f0:5a:3d:a8:66:e6:03:5a:95:d3:fe:01:f6:
ab:96:0e:fe:e5:95:62:8b:6d:bf:1d:4b:03:c5:ec:
47:db:fd:c4:0d:9a:67:c7:f7:b1:b1:b3:24:e1:e1:
17:cd:b1:b8:a8:11:ea:74:28:c1:ed:db:88:04:8c:
9d:65:bc:97:0a:d5:04:f8:f2:c3:7a:43:67:db:2f:
74:1d:48:80:ad:4a:b4:52:bc:c9:0e:4b:b2:1a:6b:
69:5e:2f:4e:e5:9e:a1:0f:53:05:e7:5c:b6:1d:6a:
30:7d:d4:5c:a6:99:b0:d1:90:91:b8:a7:d8:56:5e:
39:4e:fd:52:fa:59:08:2c:9e:d1:fb:cb:f4:76:b5:
b6:56:7d:33:31:d1:14:34:ba:41:e9:a9:f3:9a:a2:
3a:a3:1a:fb:36:e7:1c:8e:18:68:72:48:ba:17:78:
69:cf:8e:d9:1e:54:82:b2:a0:78:28:e3:77:7f:c0:
d0:87:7c:ac:e1:8f:59:03:aa:50:c0:62:60:65:66:
32:55:e3:c7:e4:2d:6c:5d:36:e9:cd:00:a8:d3:ef:
80:6d:4d:54:90:8e:18:fb:71:34:80:a5:37:08:15:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:A2:AC:78:13:F5:BB:BA:71:C7:06:6A:73:23:FC:8D:15:51:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aaa4f72-414a-3b42-a8c9-5a0148fcc680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
70.172.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:fb:34:ab:47:07:e0:03:f6:88:bc:8f:fa:22:df:59:59:8c:
77:7f:e3:0f:12:0d:5b:0d:e8:a4:b3:c2:07:e3:f1:07:e8:a0:
5c:b0:a2:e0:6a:3f:50:db:79:e4:6d:a3:1a:e0:34:fa:ff:b8:
44:88:a5:82:68:0f:1c:c1:40:14:2f:9e:0c:86:bb:e8:65:a8:
29:a8:05:0a:60:04:ba:89:5c:0c:3b:75:49:70:31:62:66:5a:
50:92:f3:27:d8:57:a0:6f:24:b4:0c:c6:a2:42:82:cd:ad:31:
32:58:de:75:d6:fa:03:ac:0d:d5:e3:26:cc:1c:b9:8c:4e:fd:
3e:30:4f:38:6f:f1:88:d0:3d:44:36:27:1c:39:bf:d7:54:49:
70:1b:8a:ec:a1:81:ab:57:54:fe:a2:61:ed:25:23:31:97:48:
15:46:cf:6d:54:32:52:c7:28:71:db:5d:d7:eb:3c:cc:7a:56:
79:56:17:99:f9:d9:ae:cd:33:1b:3a:78:0a:57:62:bd:ce:6f:
58:2a:4a:3e:2d:70:80:ec:6d:e5:d7:ec:d8:0d:4b:76:12:79:
a2:ae:d3:ad:97:60:aa:69:a9:83:ea:41:d8:d3:a7:3e:3c:17:
e6:a1:fa:b7:66:6a:d4:04:4e:94:64:b3:de:72:b1:cf:fe:da:
f5:af:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:52 2026 by rpki-client