
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
File: 409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa (raw, json)
Hash identifier: oe5lrivnkqf+LQ+XN6SDPFu+hfKhMnLna2MR0AMjfZQ=
Subject key identifier: B6:A0:15:6E:40:76:A0:84:04:40:2B:60:94:17:F4:45:81:5E:20:64
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584D8EF5718808EF4F580FE7E500
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 30238
IP address blocks: 23.90.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:71:88:08:ef:4f:58:0f:e7:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=9e8fb6d7-567b-4f6f-b0cc-5e90543abb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:85:34:1b:29:2e:73:39:e4:95:8c:bd:23:
3f:c1:e6:ce:c4:01:77:0f:7e:28:06:01:7c:98:d9:
23:84:6c:18:b0:04:f4:70:69:0d:4d:72:5a:a5:97:
27:45:65:e9:1e:0d:3b:15:82:69:28:19:a9:98:84:
2a:17:37:6a:0b:33:c7:1e:cd:1d:b5:d0:37:32:a5:
b1:df:04:97:20:23:0d:b2:0c:9f:50:ef:eb:38:0b:
61:70:4f:57:fe:e8:3b:83:f6:ae:cb:f9:89:1f:ec:
af:4f:85:d7:c8:3a:c5:47:f7:2a:63:fe:81:70:a6:
86:4a:a4:ea:20:49:09:22:e4:ed:ec:4d:69:73:b1:
00:85:c3:d8:9d:fc:24:45:86:55:be:af:29:1a:32:
cb:ad:d6:48:41:0f:31:80:fa:58:1e:1f:91:8a:db:
91:28:ae:b2:f8:84:3e:06:be:62:cc:49:f5:eb:75:
0d:37:3a:4d:2f:33:76:4b:81:86:70:1d:6d:94:20:
0d:79:fa:c3:cf:4a:76:de:84:79:58:aa:0b:4b:d4:
a4:97:db:07:55:71:9b:e9:e0:cb:ec:24:6b:96:45:
15:64:f3:b0:2a:11:b3:0b:6e:55:1b:d5:56:f3:0f:
d6:5c:17:74:e6:bd:8e:fd:7e:ee:67:06:ec:9b:32:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:15:6E:40:76:A0:84:04:40:2B:60:94:17:F4:45:81:5E:20:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:62:59:7d:b0:bd:16:79:8e:62:08:5d:df:0e:68:29:36:91:
0c:b5:93:51:53:d4:8d:8c:e9:57:cf:6c:12:8c:f8:0a:fa:5e:
69:7c:95:73:8f:94:1d:fa:de:2a:c6:49:fb:72:44:56:0c:58:
ad:3a:01:4c:27:ac:9f:a3:59:03:c9:91:3f:78:64:0e:d2:cc:
4f:18:75:94:43:03:76:31:93:3b:da:99:64:53:ed:c8:fb:f1:
9b:fa:67:86:67:83:b2:40:b7:0f:40:1e:06:8e:1e:5a:b9:8f:
f2:16:9d:29:37:17:7f:4d:b3:14:83:20:99:1b:0e:68:07:ee:
64:37:fc:1e:53:0c:81:97:da:24:39:63:e6:14:66:e5:e7:e0:
99:33:23:b0:b4:54:04:ce:fc:e9:6f:34:31:55:d2:02:ae:c8:
c5:6f:89:33:a4:e6:c6:29:95:33:6f:32:cf:d1:24:90:a9:31:
ac:d6:8c:70:4b:d3:25:0e:98:58:64:ae:18:e7:ca:b2:3f:4f:
13:7c:e9:8e:90:ad:08:c0:ed:d2:35:fe:ae:09:a1:ca:11:62:
e5:90:57:ab:4e:69:73:dd:8f:14:8a:c8:54:f9:c6:46:46:69:
c1:7b:f5:7e:ef:a7:80:77:1c:41:b2:f7:ec:dc:57:4b:1e:d2:
84:c4:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:34 2026 by rpki-client