
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4073c301-45ac-374e-957d-19298291c349.roa
File: 4073c301-45ac-374e-957d-19298291c349.roa (raw, json)
Hash identifier: u+/hSlRf/ZrJxnz/OsWDBWxYYP1D9gdoWJClxaiIZlY=
Subject key identifier: 75:42:6B:98:71:6B:60:AD:F0:34:2A:4D:CC:D9:BC:76:AB:E9:7A:FD
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584D44FA497754B194A9A4324BC0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4073c301-45ac-374e-957d-19298291c349.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 16417
IP address blocks: 23.90.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:49:77:54:b1:94:a9:a4:32:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=a380fc16-a979-4cb3-b406-a5f72371be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:91:7d:97:38:ab:5e:4f:9b:89:06:31:53:f4:
bd:35:24:c3:ba:50:25:f5:8e:b6:9d:ea:0a:ae:a9:
e1:f1:5e:02:9b:7d:71:72:58:a6:a2:a0:10:98:17:
d0:f7:13:6e:57:1b:70:75:0e:00:d9:b9:79:97:01:
3d:fb:d7:2b:95:40:13:c7:87:ff:e2:fc:6b:4e:2c:
17:85:12:cf:00:5e:ad:05:21:54:fc:06:02:45:5c:
36:82:14:d6:10:31:89:56:4d:4a:f7:f5:b8:18:56:
69:ae:1e:70:e6:b2:07:55:05:22:52:3a:85:85:41:
76:47:68:e3:99:5a:ec:3c:2c:20:bb:80:f6:27:65:
4a:61:be:31:3d:16:50:32:a1:29:80:1f:0b:bd:a1:
d9:ce:4b:81:59:3a:88:bf:8c:b8:80:ee:08:15:9e:
03:32:33:7c:8a:de:f9:6b:da:a5:84:86:91:f0:0a:
e8:24:03:00:fa:09:e1:23:1e:9f:11:90:00:a2:57:
70:86:d3:72:40:00:53:4b:8d:25:1e:c3:48:94:23:
b1:e4:b1:9c:e5:57:dc:c4:1d:c9:d8:6c:3c:52:b2:
6d:7a:9e:d0:9a:5b:f8:86:7e:33:f9:81:42:2d:c7:
a6:f7:da:90:e9:ac:1d:e8:dc:f2:71:70:d0:cf:b8:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:42:6B:98:71:6B:60:AD:F0:34:2A:4D:CC:D9:BC:76:AB:E9:7A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/4073c301-45ac-374e-957d-19298291c349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:51:df:44:cd:31:ce:ff:34:77:e5:dc:6b:e9:ac:01:36:37:
5d:39:83:e5:93:bf:a5:fb:64:4a:03:66:86:fe:64:b8:ec:fc:
ef:41:f8:a1:5c:14:f3:f8:55:10:a0:22:7d:f2:21:df:24:de:
b3:f2:aa:f0:04:39:53:70:91:42:ef:c6:d3:a7:95:57:06:39:
65:07:13:14:1c:50:15:89:aa:dd:e4:b9:1c:77:88:d3:a2:91:
53:69:f4:d7:a7:01:ca:cc:2d:b2:91:b0:06:e7:62:21:ad:87:
d9:a6:e2:ad:7f:72:9f:7a:2e:d8:78:a3:e5:43:73:5e:b6:c0:
0d:e1:ce:5e:1b:23:40:cf:7f:07:c0:56:07:4a:35:ba:3d:ae:
1e:90:e2:a0:f8:7c:80:31:d6:88:cf:8f:13:d4:06:ee:9e:65:
58:4d:b8:fa:d9:58:b2:88:c9:f0:74:dd:89:02:6c:5f:72:56:
01:0e:6c:70:37:8e:b6:47:fe:81:4a:23:9d:e5:bd:79:e1:0f:
fa:01:2a:00:ab:55:cc:83:ec:ae:58:3f:53:73:74:09:4b:0a:
52:48:c3:2a:10:00:d1:db:5d:4e:4d:68:88:56:b9:2c:80:4f:
14:c3:c7:af:94:d9:21:59:7f:a6:1e:dd:74:a9:08:8a:1a:2f:
88:f6:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:43 2026 by rpki-client