
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
File: 5107cb12-7dcd-3137-83ab-78d947b463bc.roa (raw, json)
Hash identifier: qkDN3IJtOZxxakYb8rWHD363tbLV8ZZHBH3i/vK24Nw=
Subject key identifier: 79:09:25:8E:23:6C:24:73:43:A0:21:2E:9B:20:86:4D:01:E7:17:B0
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584D44FA4944E50B547F3B353E20
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 16417
IP address blocks: 23.90.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:49:44:e5:0b:54:7f:3b:35:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=99ea7bba-9907-448e-8170-0826ba5d4a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:ec:2d:a7:af:16:20:08:31:cb:46:94:a6:
31:17:b3:8e:3b:52:ca:b5:da:7b:64:63:60:47:37:
37:6c:60:bc:d2:49:c7:fe:b3:f2:b4:7f:85:f8:39:
46:7c:2d:8a:95:a8:5b:2c:23:05:6a:2b:e8:91:ea:
a7:d7:0d:a8:31:24:09:ee:d1:52:32:9d:cb:25:f4:
44:99:f1:3c:bd:31:c1:f0:9b:68:1e:16:db:65:fa:
b9:54:75:88:92:24:61:1f:c4:c6:b3:da:b3:a6:5e:
e7:82:02:5c:d4:c9:22:b0:dc:52:a4:4f:17:3f:92:
9b:38:d6:31:ae:fe:b8:89:be:4e:95:90:cc:61:7c:
25:d1:c1:d1:ac:e6:3f:1c:cc:20:22:69:19:60:bb:
c8:b3:82:bd:65:bd:da:35:18:15:c3:c4:c3:a8:2b:
b8:e8:33:b3:29:ad:68:e1:9a:e9:2c:20:34:4f:fa:
2f:a9:e5:e7:4e:c2:e9:62:da:42:9e:18:a6:be:56:
45:be:d3:62:b2:1c:94:72:8e:33:8d:b4:26:42:7e:
f8:9c:ad:b5:46:98:9a:d1:4a:8b:42:a6:38:90:27:
f5:41:91:d5:66:13:07:0d:00:53:4f:ec:31:7f:0b:
f1:ad:72:8a:86:54:60:a5:cd:d3:e4:ce:c4:9e:49:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:25:8E:23:6C:24:73:43:A0:21:2E:9B:20:86:4D:01:E7:17:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5107cb12-7dcd-3137-83ab-78d947b463bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:fc:ab:f3:e9:7c:bb:b6:c2:1f:52:f8:25:26:0f:63:b2:9a:
75:10:8a:c4:00:eb:51:c5:f6:c6:22:0a:fc:0b:05:5c:c3:93:
ff:f2:78:9e:4d:d7:6f:9e:2e:ff:2a:31:a3:84:90:1f:ee:ab:
65:4c:81:db:53:29:a6:fb:ca:dd:82:96:e6:d6:b9:a5:5e:ae:
88:3c:df:f8:04:a8:1b:6e:99:db:2f:a8:db:b0:9c:0d:42:87:
06:9a:d7:07:59:06:b3:66:df:6e:37:55:84:b6:dc:e3:93:d3:
00:c0:e1:b4:4c:51:34:13:f2:c5:e4:9e:32:c1:db:a8:27:52:
b8:09:44:10:64:b6:b9:ba:a0:7f:d6:43:d2:bf:92:eb:95:49:
f6:e9:e2:1c:b9:88:67:06:c4:a0:74:6c:44:ec:8b:6e:30:c5:
4a:59:60:e9:af:db:b8:76:57:c5:6c:e9:36:68:f1:40:93:d7:
ca:ed:0f:f2:c3:1d:5b:ce:bb:c7:e3:f6:c6:37:05:97:e3:0f:
31:a2:f5:8a:71:f7:b7:9c:7e:e9:e0:b0:24:e2:2b:6a:97:fa:
29:97:cc:da:eb:b1:23:a0:41:d3:d8:51:77:f2:a0:73:b4:47:
55:c2:db:38:aa:87:25:03:26:23:3f:43:41:f1:17:c1:84:88:
5f:f6:d8:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+klE5QtUfzs1PiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
OTllYTdiYmEtOTkwNy00NDhlLTgxNzAtMDgyNmJhNWQ0YTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPPsLaevFiAIMctGlKYxF7OOO1LKtdp7ZGNg
Rzc3bGC80knH/rPytH+F+DlGfC2KlahbLCMFaivokeqn1w2oMSQJ7tFSMp3LJfRE
mfE8vTHB8JtoHhbbZfq5VHWIkiRhH8TGs9qzpl7nggJc1MkisNxSpE8XP5KbONYx
rv64ib5OlZDMYXwl0cHRrOY/HMwgImkZYLvIs4K9Zb3aNRgVw8TDqCu46DOzKa1o
4ZrpLCA0T/ovqeXnTsLpYtpCnhimvlZFvtNishyUco4zjbQmQn74nK21Rpia0UqL
QqY4kCf1QZHVZhMHDQBTT+wxfwvxrXKKhlRgpc3T5M7EnknIAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkJJY4jbCRzQ6AhLpsghk0B5xewMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTEwN2NiMTItN2RjZC0z
MTM3LTgzYWItNzhkOTQ3YjQ2M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1piMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALn8q/PpfLu2wh9S+CUmD2OymnUQisQA61HF9sYiCvwLBVzDk//yeJ5N
12+eLv8qMaOEkB/uq2VMgdtTKab7yt2ClubWuaVerog83/gEqBtumdsvqNuwnA1C
hwaa1wdZBrNm3243VYS23OOT0wDA4bRMUTQT8sXknjLB26gnUrgJRBBktrm6oH/W
Q9K/kuuVSfbp4hy5iGcGxKB0bETsi24wxUpZYOmv27h2V8Vs6TZo8UCT18rtD/LD
HVvOu8fj9sY3BZfjDzGi9Ypx97ecfungsCTiK2qX+imXzNrrsSOgQdPYUXfyoHO0
R1XC2ziqhyUDJiM/Q0HxF8GEiF/22BA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:55 2026 by rpki-client