
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
File: 409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa (raw, json)
Hash identifier: UOiC7LD755xnlG2ePg8UbBXLSrNL8L69i9HkIRTvrKM=
Subject key identifier: 6D:1D:01:9F:6A:80:9A:95:DE:1A:3E:AA:B8:B9:B1:50:9E:54:0A:A2
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584F119D045A6EAB884C7864CB40
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 30238
IP address blocks: 23.90.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:04:5a:6e:ab:88:4c:78:64:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=5a07369b-82f7-4dc9-a1eb-8d0ea7a72f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:c2:26:a5:4f:3d:28:f9:99:80:9b:8c:f5:
b6:e1:78:e5:29:e8:ae:a9:ec:b3:36:6b:f0:e5:b0:
c7:80:50:bb:49:a4:51:a4:d0:0f:97:93:07:d2:23:
19:e5:4b:ce:fe:64:2d:d5:9f:65:3d:e8:e5:75:33:
5b:9d:9b:64:8f:19:d9:95:09:a1:f3:3d:71:63:85:
07:ea:22:27:12:48:b5:1e:df:e4:65:a0:a2:fc:5f:
8e:37:0a:a6:7e:cf:ef:59:d9:26:98:03:d4:ba:f2:
ef:16:1a:25:d9:69:05:86:dc:60:42:67:d5:d3:ac:
66:3c:0e:ad:6d:9e:ed:e7:b3:2f:d3:a6:3d:e0:0c:
94:df:4d:3f:9d:23:71:ac:74:73:08:43:b7:b4:53:
2d:21:3c:1e:c6:a8:18:b1:af:08:b9:6c:60:26:35:
96:b5:e2:d8:5b:e8:8b:87:22:d7:e4:6d:f8:b3:06:
ce:60:90:50:19:4d:da:73:3c:a6:45:b0:e4:35:0e:
38:d3:fd:7e:a2:70:86:38:d5:93:76:8a:31:46:2c:
12:bb:5f:23:a9:b3:96:57:6e:e1:a9:89:eb:3f:07:
95:23:b5:7f:19:a7:09:b5:2a:81:7d:66:cc:2a:73:
e5:63:e3:fb:a4:2c:03:50:af:ff:79:26:12:20:5d:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:01:9F:6A:80:9A:95:DE:1A:3E:AA:B8:B9:B1:50:9E:54:0A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/409dbfa8-9fc2-3062-a75b-bb76ffc9a626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:1c:56:49:b9:cf:69:1a:85:ed:5e:a4:5b:6a:ad:1e:9d:90:
9f:55:a8:11:4a:36:7f:a3:eb:75:6e:e5:fd:88:12:25:16:6e:
0f:f7:c2:9f:3e:c0:66:af:84:bb:c8:f9:ed:e2:0d:09:1d:37:
36:79:7b:13:a3:3b:c8:ab:68:8e:0b:ce:15:3a:09:ae:ed:dc:
c8:b9:4b:11:dd:67:97:d3:c7:fc:02:b5:34:6e:9e:f9:3d:d3:
a1:45:42:8d:80:62:89:47:d0:04:2b:d4:e9:2b:c3:bd:21:9c:
9a:32:97:76:42:12:ce:14:24:5c:d7:dd:04:c9:fe:ad:f7:4c:
c5:4e:7a:bd:02:32:75:70:b2:de:38:20:66:e5:50:f8:4d:92:
93:44:87:60:3e:7b:aa:79:31:3e:da:92:b7:8c:0a:dd:8c:bc:
99:58:40:d1:4f:65:70:07:86:85:7f:7d:22:8e:62:55:cc:1d:
ff:8b:fe:d8:8d:1d:34:6a:5a:18:30:b4:e8:cd:d0:71:b7:d4:
b5:f9:a7:97:40:0c:d1:22:e7:76:a2:bb:c3:90:9b:de:d0:3a:
d6:cd:08:5e:8a:ec:40:9c:14:2e:b0:63:9e:b8:47:2d:00:c1:
1f:47:93:9d:ff:01:5b:2e:69:63:9c:86:1a:a1:9e:98:48:98:
4a:41:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:25:50 2026 by rpki-client