$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0415a968-c73d-3e2b-b6c0-172537e9f23d.roa File: 0415a968-c73d-3e2b-b6c0-172537e9f23d.roa (raw, json) Hash identifier: a3psRPtOSu8mrBSdPvKGSxybBw2SqubIRE3Tu8IcX3Q= Subject key identifier: 8E:3C:F9:9F:EC:1F:0B:47:36:49:58:C2:CD:3B:3C:2F:86:BA:59:55 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EABED4050BBEC9AD2340 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0415a968-c73d-3e2b-b6c0-172537e9f23d.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 23.90.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:be:d4:05:0b:be:c9:ad:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=c031d5a4-df59-413b-9cd6-d24f48f21db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b0:58:1e:89:69:27:a4:bc:22:38:fb:92:e2: 5e:b6:eb:14:f0:e2:50:cf:22:c1:de:ba:7f:74:12: cf:66:dc:ca:36:bd:b8:47:ab:0f:d1:69:00:30:46: 92:77:aa:38:30:0e:52:ca:85:0f:d3:39:e7:fc:88: e8:48:a7:03:e0:ba:76:ae:62:c5:74:46:bb:3e:b2: ee:d2:c5:da:06:aa:82:5f:9f:4b:bc:40:9b:44:99: ba:97:e7:a4:ab:6a:0e:94:56:eb:d4:36:ad:ef:fa: 92:10:41:71:d7:bf:5a:dc:57:41:92:02:d3:28:dd: 5c:d3:eb:1c:55:8e:c3:1e:86:8e:e2:9c:af:59:07: e4:48:48:d7:b7:eb:fd:6c:41:97:71:db:a3:21:fd: 8b:69:06:c4:4b:f8:4d:10:cf:19:3f:ba:9c:e4:cf: 9f:0c:1a:f2:32:93:9b:96:a8:d2:d1:e9:f1:cb:a4: cf:53:fd:61:dc:32:5e:22:59:00:bc:93:8c:e1:d3: a5:52:37:89:94:10:ff:b3:40:6e:ad:8a:65:ce:d0: 3f:50:00:3b:4e:f1:c3:71:23:96:b8:fa:40:2e:5a: b9:cd:ed:ed:0d:ac:48:aa:2d:98:16:c2:c7:d9:19: 23:0c:bb:49:10:93:3f:f8:47:74:00:4b:ef:ec:53: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3C:F9:9F:EC:1F:0B:47:36:49:58:C2:CD:3B:3C:2F:86:BA:59:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0415a968-c73d-3e2b-b6c0-172537e9f23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9e:c3:1d:03:87:fc:66:b7:2e:58:24:37:2b:83:a2:d5:de: 50:f6:62:ce:bb:36:2e:84:1c:e8:66:96:99:07:24:f0:8f:32: b0:5e:1f:97:05:af:2c:0a:c8:48:88:75:49:29:9a:bc:08:08: 15:95:f8:12:35:74:de:cd:54:06:e8:66:34:ab:3b:92:52:00: 7a:08:49:23:16:b8:b2:13:99:ae:13:04:39:50:56:d8:7f:fe: 20:c2:2e:a7:d0:20:6f:8c:08:db:b1:50:a1:e3:20:6f:d1:42: e6:d7:d9:02:be:f0:81:a8:8f:57:25:28:76:51:3b:40:a2:2b: 28:66:58:d2:5a:88:62:65:94:39:7a:59:9d:ce:dd:8f:36:62: ed:61:cb:01:ee:7f:85:2b:6c:8f:76:0f:8f:88:94:c5:3c:08: 02:76:aa:0f:0d:6f:0e:d4:91:db:95:19:49:79:7f:f2:c3:83: ab:d8:5e:a7:64:2c:d1:cb:ae:ab:93:a2:64:87:a8:31:e7:6f: 69:0b:f3:89:05:de:70:1a:eb:57:b8:4a:2b:69:5d:99:59:e0: 5d:3a:97:77:ee:9b:b9:27:d1:f3:d7:11:d9:44:ea:ac:d8:5a: ef:06:42:54:5f:03:eb:37:d5:53:d5:38:57:88:cd:e2:aa:25: 97:ff:35:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vuq+1AULvsmtI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YzAzMWQ1YTQtZGY1OS00MTNiLTljZDYtZDI0ZjQ4ZjIxZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbBYHolpJ6S8Ijj7kuJetusU8OJQzyLB3rp/ dBLPZtzKNr24R6sP0WkAMEaSd6o4MA5SyoUP0znn/IjoSKcD4Lp2rmLFdEa7PrLu 0sXaBqqCX59LvECbRJm6l+ekq2oOlFbr1Dat7/qSEEFx179a3FdBkgLTKN1c0+sc VY7DHoaO4pyvWQfkSEjXt+v9bEGXcdujIf2LaQbES/hNEM8ZP7qc5M+fDBryMpOb lqjS0enxy6TPU/1h3DJeIlkAvJOM4dOlUjeJlBD/s0BurYplztA/UAA7TvHDcSOW uPpALlq5ze3tDaxIqi2YFsLH2RkjDLtJEJM/+Ed0AEvv7FOD5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI48+Z/sHwtHNklYws07PC+GullVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDQxNWE5NjgtYzczZC0z ZTJiLWI2YzAtMTcyNTM3ZTlmMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyewx0Dh/xmty5YJDcrg6LV3lD2Ys67Ni6EHOhmlpkHJPCPMrBeH5cF rywKyEiIdUkpmrwICBWV+BI1dN7NVAboZjSrO5JSAHoISSMWuLITma4TBDlQVth/ /iDCLqfQIG+MCNuxUKHjIG/RQubX2QK+8IGoj1clKHZRO0CiKyhmWNJaiGJllDl6 WZ3O3Y82Yu1hywHuf4UrbI92D4+IlMU8CAJ2qg8Nbw7UkduVGUl5f/LDg6vYXqdk LNHLrquTomSHqDHnb2kL84kF3nAa61e4SitpXZlZ4F06l3fum7kn0fPXEdlE6qzY Wu8GQlRfA+s31VPVOFeIzeKqJZf/NXU= -----END CERTIFICATE-----Generated at Tue Sep 16 02:30:40 2025 by rpki-client