
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa
File: b657d4b5-4b44-3212-ae06-094b356a68b1.roa (raw, json)
Hash identifier: XRWU9WrO/eMDatARYLjP8uHxg59f0WqYIuCOBMZklp0=
Subject key identifier: A6:F6:F7:1F:68:0F:92:C7:FE:F2:B0:7E:FC:CE:18:56:E8:39:7E:45
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584F119D129554CCA30ECF969A20
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 30238
IP address blocks: 23.90.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:12:95:54:cc:a3:0e:cf:96:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=881e190f-1162-4d2b-a719-34792faac5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:b8:b4:23:b9:f4:4b:0b:24:c8:b2:63:8b:
02:96:af:29:9b:57:cf:50:65:e7:5f:8f:7b:9a:ae:
bd:b1:af:51:f9:ae:dd:c3:2a:13:ab:14:85:5d:cf:
2d:cb:2d:cf:6f:6d:fb:ac:52:44:50:45:68:25:52:
43:84:b7:fa:73:29:2b:05:6f:25:5e:c6:98:2c:ba:
46:29:d7:29:fb:81:25:c5:85:41:02:63:57:f1:e7:
71:ba:da:15:01:e2:9a:1c:2b:7e:36:eb:5b:fc:19:
99:f2:98:fd:13:e0:f1:cd:28:72:b9:d2:0b:e4:86:
99:96:a6:6c:d4:58:4d:d9:55:7b:89:c5:d6:9f:77:
b1:cd:b4:f0:47:1c:3d:8a:d7:cc:92:99:1b:1e:b5:
26:b6:b7:a1:61:ef:e4:95:3b:f7:4c:5c:02:02:49:
c2:30:22:ca:d8:fe:93:27:d8:4e:ad:88:32:8a:1b:
f0:72:d6:0f:a0:48:7f:85:57:ab:f1:69:e2:d6:2f:
f9:37:db:ef:24:7a:10:fe:b8:80:a0:da:de:b9:c2:
36:f9:96:b1:e8:08:45:cd:e0:5c:49:40:c3:85:76:
2d:84:f5:be:9d:9e:f9:1b:94:e6:ac:ee:db:32:c1:
bf:b8:6c:98:00:9f:98:ba:48:b6:22:77:09:d0:ed:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:F7:1F:68:0F:92:C7:FE:F2:B0:7E:FC:CE:18:56:E8:39:7E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e7:5e:9c:43:c3:1f:4b:66:18:29:63:5f:69:f6:24:9d:59:
1f:89:e3:5d:49:d2:2d:99:b3:24:dc:2b:38:1a:40:66:53:cd:
94:9f:ce:0c:38:95:08:0e:60:93:fb:89:71:e6:a8:e4:ac:27:
ab:95:98:61:0e:4f:66:b9:56:98:a9:a2:3e:70:f6:a7:a1:59:
1a:46:2f:61:f9:f6:a3:ac:7a:69:19:04:de:2c:6c:dd:f6:02:
49:b9:4c:4a:af:cc:57:31:cc:3a:84:ed:e5:be:c9:5d:49:de:
04:62:cb:af:94:bf:10:2c:3e:d1:05:66:fd:1f:0e:1f:e7:28:
b7:33:ac:a8:f4:81:70:4a:f8:46:0f:a0:e3:cd:99:7c:c7:0d:
dc:c5:84:33:92:d1:a6:d1:1f:c2:66:d4:b4:99:4f:f5:39:18:
3c:6e:a3:98:bb:a7:0b:eb:c7:4b:3a:14:27:3c:f7:67:a4:f1:
7c:d7:2a:00:81:1b:94:15:ad:30:80:72:9f:82:e5:38:c9:e3:
94:d2:0d:e2:ef:d0:9a:53:c1:33:d6:f5:64:03:3a:42:f5:ef:
35:59:a5:fb:4f:2b:3e:43:32:e2:72:bb:3c:33:6e:e6:36:dc:
75:27:57:6b:68:33:4c:ef:c3:d5:cb:92:03:48:8f:bd:96:3e:
33:97:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:27:29 2026 by rpki-client