
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9463c10e-f20d-33b7-bc66-6f76ecddc6e6.roa
File: 9463c10e-f20d-33b7-bc66-6f76ecddc6e6.roa (raw, json)
Hash identifier: NvYWKvYJ0bGVI9w96S7zHXYWH7ZPGSp3tke9q3FPS9s=
Subject key identifier: 7B:10:34:EB:67:1A:06:60:12:0B:8A:88:D2:64:2E:24:4E:33:8A:49
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584D1B1A648C14F7DDE647476C80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9463c10e-f20d-33b7-bc66-6f76ecddc6e6.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 16417
IP address blocks: 208.90.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 21 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:64:8c:14:f7:dd:e6:47:47:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=05f68777-78a8-4026-9463-925ccca58c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:35:99:d0:7c:13:92:26:b4:48:e3:ee:fb:
7e:c2:9d:3d:eb:06:09:fc:4e:2d:ca:38:52:55:a2:
53:48:54:a8:48:53:e7:cb:02:40:f9:a7:0e:12:27:
0b:35:62:e7:07:b7:54:b4:dd:47:75:28:3c:60:1e:
19:ca:64:f0:5e:af:ef:21:60:52:c6:49:00:26:2f:
ff:bc:49:39:a1:a6:50:f8:b1:89:ab:f0:d8:3c:c7:
f5:f5:ca:ea:78:c5:64:73:eb:36:fa:2e:b8:60:03:
eb:ab:30:d2:31:c6:d9:00:6a:a9:e2:0a:48:fa:c8:
30:38:fc:79:5c:8e:a1:25:8d:c2:64:4f:33:69:15:
31:ef:bb:ca:77:dd:5e:20:ba:12:c7:5a:fb:65:0c:
f4:6f:93:06:ed:f3:12:a4:df:cb:e0:02:c6:5c:10:
e0:5c:2c:be:3c:37:88:90:f2:20:e0:74:cc:f5:3a:
89:09:cc:36:5f:28:12:6d:ef:fa:1b:82:bf:c3:c4:
b5:40:0a:b3:c0:c1:8f:b2:5a:f2:cc:9f:6a:1a:e2:
06:bf:4a:c2:c0:5a:c8:e8:1a:0f:98:91:b7:dd:a0:
8e:79:6b:a3:79:6e:3f:e5:95:41:c5:37:fd:62:5a:
ef:9d:96:5a:29:08:3a:1c:e7:7a:b7:0b:5c:21:7f:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:34:EB:67:1A:06:60:12:0B:8A:88:D2:64:2E:24:4E:33:8A:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9463c10e-f20d-33b7-bc66-6f76ecddc6e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.90.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:e9:2e:d1:dc:53:2f:88:1d:88:57:06:f5:60:d2:c2:39:ea:
24:63:76:e2:37:35:8b:4a:fa:9f:d6:de:65:01:1b:b2:43:7c:
25:c4:99:83:fc:0e:75:b0:11:48:59:4a:57:36:ac:ee:30:da:
e9:5a:56:cf:b5:f6:57:61:95:b8:6e:81:bb:39:fe:2e:20:c9:
92:1c:52:77:22:6d:d7:7c:0b:98:e0:5b:c7:46:4d:58:4b:2e:
9d:17:08:44:24:13:94:f4:a6:61:31:1e:59:b1:fa:a4:20:20:
51:da:81:d7:ce:68:c1:fa:96:b9:29:7d:d2:37:38:1b:51:41:
35:99:af:85:99:9b:f5:09:2a:b1:e2:d7:b4:65:40:f1:09:20:
8c:29:5e:1e:9d:28:63:17:d5:45:66:df:c2:ad:42:cf:62:9e:
29:85:ea:f6:ad:b7:7a:d1:2f:8c:53:bf:61:3a:57:ca:48:b0:
bb:6a:b8:51:f3:ea:20:73:bd:3b:1f:40:9c:6d:61:17:02:bc:
83:29:4a:88:ac:b0:52:35:4f:8c:ea:2b:41:b4:e5:db:16:c1:
b3:7c:89:91:da:39:15:91:c0:4a:96:f5:ee:e6:21:8a:a6:0e:
cf:7d:6f:3b:2d:4c:8a:68:1c:6b:5e:02:c2:b4:05:76:f1:c2:
da:51:28:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmSMFPfd5kdHbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MDVmNjg3NzctNzhhOC00MDI2LTk0NjMtOTI1Y2NjYTU4YzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdQ1mdB8E5ImtEjj7vt+wp096wYJ/E4tyjhS
VaJTSFSoSFPnywJA+acOEicLNWLnB7dUtN1HdSg8YB4ZymTwXq/vIWBSxkkAJi//
vEk5oaZQ+LGJq/DYPMf19crqeMVkc+s2+i64YAPrqzDSMcbZAGqp4gpI+sgwOPx5
XI6hJY3CZE8zaRUx77vKd91eILoSx1r7ZQz0b5MG7fMSpN/L4ALGXBDgXCy+PDeI
kPIg4HTM9TqJCcw2XygSbe/6G4K/w8S1QAqzwMGPslryzJ9qGuIGv0rCwFrI6BoP
mJG33aCOeWujeW4/5ZVBxTf9YlrvnZZaKQg6HOd6twtcIX9vCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsQNOtnGgZgEguKiNJkLiROM4pJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOTQ2M2MxMGUtZjIwZC0z
M2I3LWJjNjYtNmY3NmVjZGRjNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fo+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL/pLtHcUy+IHYhXBvVg0sI56iRjduI3NYtK+p/W3mUBG7JDfCXEmYP8
DnWwEUhZSlc2rO4w2ulaVs+19ldhlbhugbs5/i4gyZIcUncibdd8C5jgW8dGTVhL
Lp0XCEQkE5T0pmExHlmx+qQgIFHagdfOaMH6lrkpfdI3OBtRQTWZr4WZm/UJKrHi
17RlQPEJIIwpXh6dKGMX1UVm38KtQs9inimF6vatt3rRL4xTv2E6V8pIsLtquFHz
6iBzvTsfQJxtYRcCvIMpSoissFI1T4zqK0G05dsWwbN8iZHaORWRwEqW9e7mIYqm
Ds99bzstTIpoHGteAsK0BXbxwtpRKGk=
-----END CERTIFICATE-----
Generated at Thu Mar 19 21:41:09 2026 by rpki-client