
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
File: a455dd01-9d1c-3f67-be86-99d30a672de5.roa (raw, json)
Hash identifier: TMm59ImT/JjCt6Dfu+fETgK1JmGNe2Nvl+oL2QJ7pps=
Subject key identifier: F6:05:44:F4:CA:8D:D9:9A:6C:AA:7F:38:EB:D6:C9:B1:87:39:8D:51
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584F497552D70761BB1CCB0C8F00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16417
IP address blocks: 23.90.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:52:d7:07:61:bb:1c:cb:0c:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8996baef-c8b7-419d-935a-489d33d4698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:b3:65:67:86:72:4c:ad:29:6b:5c:8e:7f:
b6:5c:05:ed:25:d2:e9:e8:19:92:d5:43:92:b3:43:
90:b2:dc:a1:d0:e5:99:29:16:95:35:80:85:9b:0a:
3c:53:39:61:cf:6e:83:fa:be:89:ef:d0:64:7a:60:
6f:95:c1:9e:e9:50:b6:e5:bc:b0:ce:31:ca:83:81:
5a:43:06:f2:1b:92:2b:ee:dc:8a:7c:35:ae:63:31:
50:32:ad:bd:29:3b:1b:2a:f7:59:b2:e2:fc:87:4d:
f3:51:91:7e:96:c2:03:e2:90:16:c6:f1:7d:b8:1c:
dc:84:78:b3:27:ef:2b:c4:e2:7d:17:7a:e5:8a:89:
a8:fb:b4:f7:bd:f6:d0:d6:06:49:62:90:88:a8:bd:
0f:f1:bc:54:f3:9e:80:79:36:cb:7e:80:9b:a7:59:
51:08:24:d9:a0:84:80:57:ca:2f:44:bf:b3:2c:9c:
f5:28:db:a3:ba:e6:8c:14:ba:7a:d2:bb:7a:5b:e2:
10:26:03:a5:01:43:41:cb:60:f5:6d:0e:72:f6:5a:
2b:b6:f7:1b:65:af:b7:36:ad:88:22:57:77:f1:81:
e0:4f:58:66:3c:82:de:3a:97:2e:4a:35:98:14:b5:
b0:4e:fb:49:4a:9a:8d:46:58:6a:31:7b:a2:62:d6:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:44:F4:CA:8D:D9:9A:6C:AA:7F:38:EB:D6:C9:B1:87:39:8D:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:c3:79:61:4a:40:6b:f6:84:1f:ce:d4:1d:df:59:8b:2b:92:
0e:d0:f1:bb:4c:6d:0b:22:51:6d:45:a7:95:7d:66:80:4c:03:
ee:dc:d4:1d:18:11:3a:12:44:5a:9e:23:42:b2:4c:2c:91:6d:
36:ba:0d:2d:a7:c2:8e:ac:12:d6:77:b5:24:13:86:9b:cc:e2:
02:9a:63:32:3a:7a:e9:e6:b3:c3:fe:16:7c:b4:c4:75:2b:1c:
5a:7f:dd:dc:dc:bf:bc:2f:dd:16:69:06:68:c3:c6:84:0d:66:
f4:32:54:89:8a:9f:d3:27:ff:a9:f9:47:ee:49:57:0a:76:c3:
b8:ce:e2:79:fc:95:30:8b:d0:f6:0b:20:88:73:0b:9f:e1:d8:
4f:4e:61:37:51:17:b6:d6:52:36:e2:4e:94:3e:e9:00:cf:ff:
58:44:4d:e2:3c:72:15:3d:b7:7f:7c:66:9f:de:a2:de:93:48:
1e:4e:37:74:bb:c6:49:d8:6b:38:6c:5e:06:7f:7d:ee:de:13:
16:8e:43:bf:c6:5c:22:f4:08:40:f3:25:43:0e:64:8e:91:90:
9b:a0:c5:80:5d:72:ce:c8:4f:f3:0a:2b:d9:0d:9a:c9:de:f0:
e7:03:80:1d:06:96:8a:3a:3a:17:28:f5:fc:1b:8d:3e:64:4b:
bb:47:68:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdVLXB2G7HMsMjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODk5NmJhZWYtYzhiNy00MTlkLTkzNWEtNDg5ZDMzZDQ2OThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCazZWeGckytKWtcjn+2XAXtJdLp6BmS1UOS
s0OQstyh0OWZKRaVNYCFmwo8Uzlhz26D+r6J79BkemBvlcGe6VC25bywzjHKg4Fa
QwbyG5Ir7tyKfDWuYzFQMq29KTsbKvdZsuL8h03zUZF+lsID4pAWxvF9uBzchHiz
J+8rxOJ9F3rliomo+7T3vfbQ1gZJYpCIqL0P8bxU856AeTbLfoCbp1lRCCTZoISA
V8ovRL+zLJz1KNujuuaMFLp60rt6W+IQJgOlAUNBy2D1bQ5y9lortvcbZa+3Nq2I
Ild38YHgT1hmPILeOpcuSjWYFLWwTvtJSpqNRlhqMXuiYtaotQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYFRPTKjdmabKp/OOvWybGHOY1RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTQ1NWRkMDEtOWQxYy0z
ZjY3LWJlODYtOTlkMzBhNjcyZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfDeWFKQGv2hB/O1B3fWYsrkg7Q8btMbQsiUW1Fp5V9ZoBMA+7c1B0Y
EToSRFqeI0KyTCyRbTa6DS2nwo6sEtZ3tSQThpvM4gKaYzI6eunms8P+Fny0xHUr
HFp/3dzcv7wv3RZpBmjDxoQNZvQyVImKn9Mn/6n5R+5JVwp2w7jO4nn8lTCL0PYL
IIhzC5/h2E9OYTdRF7bWUjbiTpQ+6QDP/1hETeI8chU9t398Zp/eot6TSB5ON3S7
xknYazhsXgZ/fe7eExaOQ7/GXCL0CEDzJUMOZI6RkJugxYBdcs7IT/MKK9kNmsne
8OcDgB0Gloo6Ohco9fwbjT5kS7tHaJc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:24:27 2026 by rpki-client