
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
File: f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa (raw, json)
Hash identifier: 1H0lgu9Kl6LgExl5tOd9dkODxW5b6CRrhhlIdGbz0xQ=
Subject key identifier: 54:FD:2C:42:5A:04:1D:87:F8:EA:46:9A:B2:52:81:FC:8F:80:56:7F
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584D7A052F47703C4F0B52F84EB0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 30238
IP address blocks: 23.90.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:2f:47:70:3c:4f:0b:52:f8:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=617e8ee2-a218-42da-a58c-d8beaf1cfed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:49:b6:62:df:b2:56:23:91:d1:c7:b5:36:
0b:55:1c:74:8a:58:1c:3b:85:a3:a8:3c:57:1c:33:
dd:f9:50:e6:bd:13:54:5d:66:d6:7a:78:ec:9c:55:
dd:87:fc:22:35:a9:96:64:09:23:a0:b7:f9:7b:ef:
2c:0e:1a:76:ad:5e:93:80:82:12:84:c6:e3:5a:31:
52:d9:09:fe:dd:16:09:07:fe:58:cf:e0:4d:7d:98:
c8:1f:68:76:81:73:91:9e:71:32:b0:e4:28:17:05:
b2:39:bd:a1:84:26:be:6e:76:6e:ee:a6:bc:59:85:
65:a2:0e:83:81:07:aa:70:35:e2:12:06:ab:44:3d:
db:37:bd:ac:7e:56:fb:98:af:69:a0:bf:f0:c4:c9:
13:23:77:fb:32:b5:45:9c:79:cd:35:01:d0:82:e9:
bd:72:ff:d6:72:76:91:cf:7b:ba:9f:5d:df:20:d2:
c1:d9:cf:d5:19:06:2b:c4:38:09:cd:eb:86:ad:c5:
3f:b3:64:57:c0:f4:62:61:c2:d4:b4:23:26:58:8c:
8f:90:4b:34:0a:cf:14:98:ac:c0:1c:69:d7:db:36:
31:50:05:1f:25:22:b8:5e:08:90:3f:fa:5e:f6:3d:
5e:67:bf:ac:fa:5d:d0:f1:cc:66:76:4d:0f:cf:b4:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:2C:42:5A:04:1D:87:F8:EA:46:9A:B2:52:81:FC:8F:80:56:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:56:84:8e:ea:02:39:62:10:a7:96:a9:66:96:81:d9:66:79:
4a:1e:95:3a:65:72:45:e9:eb:4d:b3:49:81:3b:50:21:c4:96:
21:3c:76:30:5e:d4:00:94:df:0e:9a:af:c5:d3:e1:44:2a:3c:
0c:16:5c:ad:89:33:a2:5c:34:fe:0d:1c:b3:1c:36:39:e9:48:
4f:4a:2f:8c:1f:b9:e2:79:d7:a2:6e:41:27:6f:d8:27:40:46:
09:e6:8d:95:da:93:11:6b:20:ea:84:a1:07:f6:68:e3:b5:fc:
3a:dd:dc:12:d7:02:58:95:49:28:57:9d:f2:59:98:12:05:27:
82:04:4b:bb:66:8c:2e:6c:19:55:b5:e8:34:45:2f:85:b7:3a:
0f:ce:32:f0:4f:9b:04:39:48:13:1f:7a:7a:cb:4c:2c:3d:31:
0d:08:a7:2a:b1:d9:51:35:ff:f1:b9:9f:9e:5f:9c:5d:23:02:
0e:4f:3d:28:07:13:c3:a1:07:45:89:21:81:c9:20:be:1f:2a:
2b:dc:68:58:83:a7:be:b2:2a:66:d8:f1:ed:d2:c7:39:55:7b:
54:4c:e8:ce:1f:4a:80:b3:cd:06:0d:63:56:52:69:b6:57:0d:
02:92:a3:4e:7b:b0:40:bb:49:dc:cb:fc:2a:80:0f:e7:ee:1c:
cd:fe:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:01 2026 by rpki-client