$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0415a968-c73d-3e2b-b6c0-172537e9f23d.roa File: 0415a968-c73d-3e2b-b6c0-172537e9f23d.roa (raw, json) Hash identifier: YwmAi9CppMEpt+kxhWCwaamOA8RXDDmew4jUmC0F5v0= Subject key identifier: A5:52:94:DE:3E:A6:06:D2:96:61:7B:3B:0D:29:96:9E:35:68:32:FD Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA7884D7844B365E68CA7C000 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0415a968-c73d-3e2b-b6c0-172537e9f23d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16417 IP address blocks: 23.90.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:4d:78:44:b3:65:e6:8c:a7:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5723fe10-82cf-46d8-90e0-ea38400bc1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:6c:96:51:e7:ad:87:df:7e:b3:0a:48:ac: 66:b2:83:18:23:ad:2d:11:55:b4:c2:59:c2:d0:61: 6d:0b:b1:6c:76:5f:2c:22:8b:67:49:e4:56:cf:ee: d7:59:75:3e:3f:28:fe:b7:27:93:3e:d8:5e:6b:e2: 35:d1:29:50:f3:3b:7a:56:fe:c1:9f:b5:7f:d0:f6: 92:40:0b:d6:be:39:e7:ff:5f:1f:6c:cc:1e:29:7a: d6:3b:78:c2:52:ec:29:a8:ff:56:7c:14:be:6d:3c: 7f:83:a6:a9:fe:23:e2:04:5e:e3:2f:db:7e:a0:c1: 08:1d:86:73:79:19:95:ac:2a:75:0f:57:40:ca:b8: de:d6:d0:3a:9b:fc:48:74:6f:bc:b5:4d:22:d2:ab: b3:90:52:b7:f2:2c:e0:61:ff:0c:bf:36:50:d8:6f: f3:a2:d2:10:d9:9a:1a:5c:ac:5a:34:07:f0:c5:6b: cf:45:f0:82:fc:a3:23:a1:46:04:e0:6c:3b:c0:05: 5f:88:73:ca:49:5d:10:dc:78:02:50:33:ef:99:c1: 2d:e9:2f:8d:71:5d:4a:b5:0b:4d:ce:b2:c5:53:64: f0:3f:42:05:02:d8:68:ed:49:6e:d9:64:ff:5a:39: fc:44:64:f6:71:10:ef:48:20:05:17:db:3c:0e:9e: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:52:94:DE:3E:A6:06:D2:96:61:7B:3B:0D:29:96:9E:35:68:32:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0415a968-c73d-3e2b-b6c0-172537e9f23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:16:95:e4:62:e4:9a:e4:44:8d:d4:05:de:5e:9f:42:f6:6b: 45:ca:75:aa:ba:06:05:e6:78:61:f8:b2:83:5b:39:b5:ed:2c: 13:58:9d:26:fd:fb:da:1d:80:47:8b:30:13:04:5d:95:0c:44: d9:d0:08:99:c1:4d:b2:a2:09:79:47:b1:a9:64:8a:ac:10:d6: 54:d5:f5:94:05:59:a1:08:02:52:dd:0d:bc:00:ae:0e:d3:25: a8:c3:46:b2:9a:74:a9:9e:0f:ea:da:77:76:84:de:83:c4:cc: 94:34:12:a3:20:f9:ca:2d:e4:80:4d:26:21:26:7e:1c:c4:6b: c1:7a:76:37:d0:4c:ff:43:91:ed:2d:61:1c:56:73:5a:ed:c1: 3b:c9:86:fa:fc:21:48:24:f0:77:cf:e1:09:ad:c4:c4:02:5f: 27:8b:78:cc:6b:c3:e6:8f:73:97:8b:93:a0:a2:a2:80:e6:30: 93:8c:59:bf:fa:6d:21:dd:02:0b:1c:59:8f:15:37:90:2d:59: 55:02:d0:40:6c:24:fd:14:e9:fd:20:ad:f9:73:c3:21:e1:d8: 3b:11:20:c7:d2:0c:42:63:bd:6b:68:52:f5:01:dd:a1:4f:58: 5a:af:da:c4:d1:2f:aa:cb:42:3a:40:fa:33:a4:61:d2:81:08: 64:b9:50:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niE14RLNl5oynwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTcyM2ZlMTAtODJjZi00NmQ4LTkwZTAtZWEzODQwMGJjMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRBsllHnrYfffrMKSKxmsoMYI60tEVW0wlnC 0GFtC7Fsdl8sIotnSeRWz+7XWXU+Pyj+tyeTPthea+I10SlQ8zt6Vv7Bn7V/0PaS QAvWvjnn/18fbMweKXrWO3jCUuwpqP9WfBS+bTx/g6ap/iPiBF7jL9t+oMEIHYZz eRmVrCp1D1dAyrje1tA6m/xIdG+8tU0i0quzkFK38izgYf8MvzZQ2G/zotIQ2Zoa XKxaNAfwxWvPRfCC/KMjoUYE4Gw7wAVfiHPKSV0Q3HgCUDPvmcEt6S+NcV1KtQtN zrLFU2TwP0IFAtho7Ulu2WT/Wjn8RGT2cRDvSCAFF9s8Dp6bdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVSlN4+pgbSlmF7Ow0plp41aDL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDQxNWE5NjgtYzczZC0z ZTJiLWI2YzAtMTcyNTM3ZTlmMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAWleRi5JrkRI3UBd5en0L2a0XKdaq6BgXmeGH4soNbObXtLBNYnSb9 +9odgEeLMBMEXZUMRNnQCJnBTbKiCXlHsalkiqwQ1lTV9ZQFWaEIAlLdDbwArg7T JajDRrKadKmeD+rad3aE3oPEzJQ0EqMg+cot5IBNJiEmfhzEa8F6djfQTP9Dke0t YRxWc1rtwTvJhvr8IUgk8HfP4QmtxMQCXyeLeMxrw+aPc5eLk6CiooDmMJOMWb/6 bSHdAgscWY8VN5AtWVUC0EBsJP0U6f0grflzwyHh2DsRIMfSDEJjvWtoUvUB3aFP WFqv2sTRL6rLQjpA+jOkYdKBCGS5UO4= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:24 2026 by rpki-client