$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/855f8bd5-bbcd-3f0c-922b-9632f4ee8112.roa File: 855f8bd5-bbcd-3f0c-922b-9632f4ee8112.roa (raw, json) Hash identifier: n9AyX56iUlRPy29LpVM8Qm3gQthmZKBWkOqsAiXILLM= Subject key identifier: 28:09:B0:5C:31:4C:17:0F:A0:99:F6:D9:8B:DE:75:6F:9D:8B:91:33 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EAD1D5587E098092A000 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/855f8bd5-bbcd-3f0c-922b-9632f4ee8112.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 23.90.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ea:d1:d5:58:7e:09:80:92:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=4ce59a82-8148-4c79-9759-a04e0d8f5017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:aa:81:4e:db:4e:a4:eb:6c:d8:6e:9a:03: b3:aa:8e:b8:a0:20:bb:75:a8:f5:83:f5:82:d8:44: 5b:18:ef:e0:57:f9:ec:33:01:2c:53:69:ae:ae:bf: 66:24:4e:4c:dc:09:de:0f:c3:5b:b0:1e:6d:b7:2f: 56:f7:aa:c3:5c:b5:55:f6:48:e8:fa:7c:b5:65:6f: c6:15:9b:47:6d:8a:fe:cb:3b:4e:51:c6:b9:fd:f3: 9b:c2:97:6f:4e:36:ef:cd:31:8d:4b:20:02:1b:d1: d4:00:8b:95:11:64:08:c7:f9:60:d5:6c:75:8e:1c: f1:45:62:68:f7:24:99:79:22:8d:73:13:b4:78:04: 15:22:78:03:c8:ca:85:26:95:3e:3e:71:81:e3:94: 24:2a:66:61:8f:8f:05:a3:fc:42:f6:55:78:f9:3d: 14:43:5f:ca:74:65:90:37:b6:fd:5e:49:56:fb:3d: ba:18:25:87:9d:db:e8:5a:b6:b8:b4:72:8e:bf:68: 10:1f:9e:61:18:00:a3:7a:44:96:82:e9:16:51:5e: d1:ea:fc:8c:d6:89:d8:0e:d7:f8:51:2d:0d:74:39: 9d:96:f0:09:b0:0a:1b:f0:be:c5:b2:e1:88:e3:dc: c6:e5:ad:64:9e:8a:77:1e:50:14:bf:57:ea:ea:1f: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:09:B0:5C:31:4C:17:0F:A0:99:F6:D9:8B:DE:75:6F:9D:8B:91:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/855f8bd5-bbcd-3f0c-922b-9632f4ee8112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:03:09:ac:cc:21:fd:a0:c5:b3:2f:af:44:c9:99:39:34:35: 5b:d7:ad:79:d5:03:50:e1:23:9f:d8:78:5d:b8:d4:92:c0:31: 91:39:51:ee:00:7a:07:c0:36:72:6b:66:7d:52:0e:9b:eb:bb: d2:76:a0:4e:c9:fc:d2:60:d3:71:3c:c2:19:ac:5a:f0:3e:78: f5:e5:e3:52:d4:ad:ce:93:58:5e:6b:a6:f0:be:87:1b:a0:a9: 5b:10:1b:f4:08:71:a0:fd:5e:94:19:77:f5:2f:cc:6b:00:8d: 4e:49:72:f6:b3:4a:68:03:50:b6:cc:57:61:e3:a4:87:5e:50: 5a:c4:f6:93:81:ad:67:0b:d8:b3:a1:2c:2a:b5:d0:c0:7e:7d: 3e:61:14:a1:6a:d7:74:70:98:ee:82:49:37:29:69:f7:7d:99: 6b:20:6b:d5:7f:18:4d:e4:0a:3b:29:96:37:56:7b:1f:ba:3c: bb:fc:36:7e:09:d7:43:00:d7:a7:bf:80:e5:b8:2f:65:14:3f: 41:ad:f3:ce:ea:b0:4b:a6:fa:73:48:ce:b5:7a:6e:80:5a:8f: 00:d6:58:79:77:9c:8c:4c:d4:f0:d6:11:03:cb:c7:77:fc:07: 06:8f:ab:46:4a:34:30:67:b7:eb:67:ba:3d:50:03:d0:4b:a3: 73:83:bb:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VurR1Vh+CYCSoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NGNlNTlhODItODE0OC00Yzc5LTk3NTktYTA0ZTBkOGY1MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApneqgU7bTqTrbNhumgOzqo64oCC7daj1g/WC 2ERbGO/gV/nsMwEsU2murr9mJE5M3AneD8NbsB5tty9W96rDXLVV9kjo+ny1ZW/G FZtHbYr+yztOUca5/fObwpdvTjbvzTGNSyACG9HUAIuVEWQIx/lg1Wx1jhzxRWJo 9ySZeSKNcxO0eAQVIngDyMqFJpU+PnGB45QkKmZhj48Fo/xC9lV4+T0UQ1/KdGWQ N7b9XklW+z26GCWHndvoWra4tHKOv2gQH55hGACjekSWgukWUV7R6vyM1onYDtf4 US0NdDmdlvAJsAob8L7FsuGI49zG5a1knop3HlAUv1fq6h9zgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgJsFwxTBcPoJn22YvedW+di5EzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODU1ZjhiZDUtYmJjZC0z ZjBjLTkyMmItOTYzMmY0ZWU4MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1plMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEDCazMIf2gxbMvr0TJmTk0NVvXrXnVA1DhI5/YeF241JLAMZE5Ue4A egfANnJrZn1SDpvru9J2oE7J/NJg03E8whmsWvA+ePXl41LUrc6TWF5rpvC+hxug qVsQG/QIcaD9XpQZd/UvzGsAjU5JcvazSmgDULbMV2HjpIdeUFrE9pOBrWcL2LOh LCq10MB+fT5hFKFq13RwmO6CSTcpafd9mWsga9V/GE3kCjspljdWex+6PLv8Nn4J 10MA16e/gOW4L2UUP0Gt887qsEum+nNIzrV6boBajwDWWHl3nIxM1PDWEQPLx3f8 BwaPq0ZKNDBnt+tnuj1QA9BLo3ODuzo= -----END CERTIFICATE-----Generated at Tue Sep 16 02:30:01 2025 by rpki-client