$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa File: 59d408be-4188-3cb9-8162-6224102660ec.roa (raw, json) Hash identifier: cXxV+tpPsPisRlICWGuBiT82ewF1mGbC3MB23ZLRFk4= Subject key identifier: 1C:BB:F0:5A:19:51:F3:B7:8F:88:85:E8:EC:B5:1D:C8:F9:83:E8:09 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B1F017682F927495707CE4B00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 23.90.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:76:82:f9:27:49:57:07:ce:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=94792d5b-bac7-4c5c-804e-19fa49ce84db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:ed:cd:99:bb:22:94:35:57:10:7f:13:d5: 6f:e7:9b:cd:63:f6:96:f5:a7:9a:67:39:cc:79:36: b7:33:b0:cd:77:99:89:29:2a:cb:f7:f0:8f:cf:95: 30:af:87:3f:93:53:e3:16:d7:ce:c1:09:4c:09:f4: 8b:28:95:37:53:c8:d9:ab:c7:d5:71:d3:43:5a:c4: 74:76:96:09:da:17:b1:40:04:8c:e6:4f:6c:b4:f3: d3:16:24:a2:71:7f:08:a7:f6:68:21:9d:ad:ab:8d: 07:df:72:d8:8f:31:8e:b7:26:43:85:4f:88:ac:5b: 3d:63:d7:1b:9d:04:d1:50:dd:3d:44:e7:39:37:ac: 00:60:b1:d0:60:1b:c3:c2:15:df:3c:05:f3:29:03: 88:10:21:8d:bf:ab:8d:7e:f8:17:06:96:a2:3a:70: 61:4f:c7:ca:35:a2:ff:37:bc:4a:86:5f:60:53:7f: ec:c9:eb:ff:b6:e4:30:6f:db:9a:c6:a9:46:7c:e4: a8:01:9b:01:db:7c:1b:fb:ee:58:da:e7:d8:6d:02: 38:c1:2d:1f:61:c0:39:02:5b:e2:d5:c5:17:ed:c9: a1:c1:f7:4a:25:7d:8d:07:89:fc:1b:4d:76:c2:50: f2:08:32:21:65:3a:de:ea:30:57:f9:7e:23:e4:1c: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BB:F0:5A:19:51:F3:B7:8F:88:85:E8:EC:B5:1D:C8:F9:83:E8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:86:48:52:53:b6:44:b4:52:73:a3:c5:66:ab:20:30:57:68: 1a:9d:f0:dd:dc:c5:f0:84:89:85:fd:d9:e3:f7:df:b3:55:29: 3a:b6:70:86:36:c5:21:31:40:a0:aa:58:17:ca:a1:71:d0:e2: 63:eb:b5:9c:30:5f:05:f1:a8:d8:94:4d:ad:b3:e0:fa:54:f1: 80:ae:59:67:8e:2d:15:3f:a2:41:31:16:94:7f:7c:3d:2b:a4: 4c:9c:a3:34:b2:a2:4e:32:07:fb:f7:26:02:f6:ef:d3:29:b9: f4:b0:73:70:61:8a:e6:a5:0a:de:5a:79:ab:fe:25:39:79:10: e0:7c:9a:d4:50:63:a6:39:7f:32:9b:17:73:1a:70:05:44:ce: 88:be:75:3b:c3:31:be:8e:c7:5f:fa:04:97:50:3d:6f:04:fa: 19:62:45:28:b4:c4:d6:e9:4b:73:15:70:0d:b4:7e:b9:dc:0c: 79:99:5d:6f:36:f7:86:49:58:46:0d:26:11:67:3f:ce:d9:04: 72:6f:dc:41:55:07:89:87:d3:93:48:46:da:fd:aa:92:75:46: 5e:1a:c4:07:4e:6f:98:8d:61:e6:9f:77:ee:79:9e:fa:39:9b: 6d:2b:6b:cc:d3:5d:b7:d4:fc:f0:6c:fb:e7:61:de:66:cb:55: cb:c2:bf:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXaC+SdJVwfOSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTQ3OTJkNWItYmFjNy00YzVjLTgwNGUtMTlmYTQ5Y2U4NGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfDtzZm7IpQ1VxB/E9Vv55vNY/aW9aeaZznM eTa3M7DNd5mJKSrL9/CPz5Uwr4c/k1PjFtfOwQlMCfSLKJU3U8jZq8fVcdNDWsR0 dpYJ2hexQASM5k9stPPTFiSicX8Ip/ZoIZ2tq40H33LYjzGOtyZDhU+IrFs9Y9cb nQTRUN09ROc5N6wAYLHQYBvDwhXfPAXzKQOIECGNv6uNfvgXBpaiOnBhT8fKNaL/ N7xKhl9gU3/syev/tuQwb9uaxqlGfOSoAZsB23wb++5Y2ufYbQI4wS0fYcA5Alvi 1cUX7cmhwfdKJX2NB4n8G012wlDyCDIhZTre6jBX+X4j5BwX2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy78FoZUfO3j4iF6Oy1Hcj5g+gJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTlkNDA4YmUtNDE4OC0z Y2I5LTgxNjItNjIyNDEwMjY2MGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1phMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyGSFJTtkS0UnOjxWarIDBXaBqd8N3cxfCEiYX92eP337NVKTq2cIY2 xSExQKCqWBfKoXHQ4mPrtZwwXwXxqNiUTa2z4PpU8YCuWWeOLRU/okExFpR/fD0r pEycozSyok4yB/v3JgL279MpufSwc3BhiualCt5aeav+JTl5EOB8mtRQY6Y5fzKb F3MacAVEzoi+dTvDMb6Ox1/6BJdQPW8E+hliRSi0xNbpS3MVcA20frncDHmZXW82 94ZJWEYNJhFnP87ZBHJv3EFVB4mH05NIRtr9qpJ1Rl4axAdOb5iNYeafd+55nvo5 m20ra8zTXbfU/PBs++dh3mbLVcvCvyk= -----END CERTIFICATE-----Generated at Tue Sep 16 02:39:05 2025 by rpki-client