
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa
File: 3d20060e-f449-30c4-8530-5b626095efd1.roa (raw, json)
Hash identifier: 0IwXFty1gx+OGBjawbq07z1XiKVwbwijoVtvkRT4hY8=
Subject key identifier: D7:39:13:7A:3E:FC:B2:D3:54:CF:67:CA:62:63:25:86:EE:F5:24:55
Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial: 010D0C9F4328584F4974A31C36EC5223499ECE80
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 21658
IP address blocks: 23.131.184.0/24 maxlen: 24
23.131.185.0/24 maxlen: 24
23.131.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:a3:1c:36:ec:52:23:49:9e:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=183ad060-b614-4499-889a-30312708bdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:43:24:b3:49:1a:2f:91:81:d0:fe:d8:7f:
0f:80:d6:b1:fc:24:b0:b5:2f:4e:0e:18:5d:d6:1f:
f0:90:c7:e1:c2:61:c8:5d:c1:38:55:24:e1:fd:be:
ed:91:ac:67:98:c7:3c:ef:81:2d:be:9c:56:da:10:
ea:3d:df:4c:a7:f3:ef:c5:18:38:e2:22:c1:27:60:
44:27:d5:f8:08:42:a2:d2:3f:e0:2d:e9:d3:0b:1d:
82:b1:1a:a7:c9:8b:25:1b:32:46:85:c5:d4:43:7e:
06:c1:c2:df:ec:49:3a:c1:41:32:fe:e4:73:7f:a6:
5f:9d:39:67:f8:05:49:62:ae:7b:69:7b:ce:40:59:
26:7b:19:05:fd:9f:c2:5f:7a:50:df:2f:a3:f2:65:
cf:27:60:46:c2:64:ee:eb:2b:35:a4:6a:8d:2b:40:
a0:92:22:7f:1c:d9:ee:39:bc:57:32:89:6c:9c:ee:
ce:7c:ac:89:9d:90:4e:20:90:36:92:8d:1a:44:7f:
cf:bb:6b:41:0d:e8:41:83:fb:ef:2e:e1:18:3f:c1:
d3:42:5b:70:3c:c4:1a:4e:f2:5c:d6:27:9f:25:27:
f7:5c:8e:c0:b6:4e:c5:fd:d4:1a:4d:f7:32:71:27:
92:97:32:66:35:63:a4:5c:ab:67:bf:82:54:ca:44:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:39:13:7A:3E:FC:B2:D3:54:CF:67:CA:62:63:25:86:EE:F5:24:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
X509v3 Authority Key Identifier:
keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.184.0-23.131.186.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:31:ae:82:46:24:0b:81:b2:ac:ea:4b:6f:3b:d0:a6:d0:af:
36:4c:30:68:53:40:d2:6f:52:9f:9c:8f:92:b8:e0:fc:72:58:
48:d4:6d:f8:63:ad:98:5c:cc:2b:dd:ac:63:3d:ae:1c:61:90:
71:a3:5b:c8:e8:51:20:1e:fe:37:36:00:42:57:0d:8e:28:73:
2f:be:c3:35:21:76:94:ae:1b:5d:43:fd:ca:46:b0:bc:a1:4b:
2c:bb:3e:74:09:1b:08:d7:27:c9:8c:12:ba:26:0e:1e:e5:3a:
6d:04:8e:e2:0c:9f:48:28:19:44:1f:23:34:1a:64:d7:04:b6:
94:fc:cb:9f:91:76:3d:8e:7e:b1:da:b5:ad:25:8b:83:e4:ba:
b6:5d:cd:9b:08:52:65:71:ac:5b:02:87:1e:7e:ff:10:b7:c8:
d4:da:53:5b:f2:c3:99:55:e9:e5:cd:02:28:8c:84:d4:ce:b3:
3f:dd:ab:ab:74:b6:b5:48:1a:23:b8:cb:b6:bf:6d:3b:07:6e:
8f:1a:b8:6d:6d:f1:0a:f1:1f:14:fa:4d:35:24:4a:b0:75:43:
d7:79:be:2a:b1:a1:f1:d4:f4:c1:e7:e9:21:bd:c2:29:d2:a6:
5e:a7:15:02:a0:e4:15:07:4a:fd:56:33:e9:e8:7d:33:d2:bf:
e9:72:45:07
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JdKMcNuxSI0mezoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTgzYWQwNjAtYjYxNC00NDk5LTg4OWEtMzAzMTI3MDhiZGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDRDJLNJGi+RgdD+2H8PgNax/CSwtS9ODhhd
1h/wkMfhwmHIXcE4VSTh/b7tkaxnmMc874EtvpxW2hDqPd9Mp/PvxRg44iLBJ2BE
J9X4CEKi0j/gLenTCx2CsRqnyYslGzJGhcXUQ34GwcLf7Ek6wUEy/uRzf6ZfnTln
+AVJYq57aXvOQFkmexkF/Z/CX3pQ3y+j8mXPJ2BGwmTu6ys1pGqNK0CgkiJ/HNnu
ObxXMolsnO7OfKyJnZBOIJA2ko0aRH/Pu2tBDehBg/vvLuEYP8HTQltwPMQaTvJc
1iefJSf3XI7Atk7F/dQaTfcycSeSlzJmNWOkXKtnv4JUykSsGQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNc5E3o+/LLTVM9nymJjJYbu9SRVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvM2QyMDA2MGUtZjQ0OS0z
MGM0LTg1MzAtNWI2MjYwOTVlZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMXg7gD
BAAXg7owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAHzGugkYkC4GyrOpLbzvQptCvNkwwaFNA0m9Sn5yPkrjg
/HJYSNRt+GOtmFzMK92sYz2uHGGQcaNbyOhRIB7+NzYAQlcNjihzL77DNSF2lK4b
XUP9ykawvKFLLLs+dAkbCNcnyYwSuiYOHuU6bQSO4gyfSCgZRB8jNBpk1wS2lPzL
n5F2PY5+sdq1rSWLg+S6tl3NmwhSZXGsWwKHHn7/ELfI1NpTW/LDmVXp5c0CKIyE
1M6zP92rq3S2tUgaI7jLtr9tOwdujxq4bW3xCvEfFPpNNSRKsHVD13m+KrGh8dT0
wefpIb3CKdKmXqcVAqDkFQdK/VYz6eh9M9K/6XJFBw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:36:15 2026 by rpki-client