$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/96854358-4dea-3365-8054-49f3298d62eb.roa File: 96854358-4dea-3365-8054-49f3298d62eb.roa (raw, json) Hash identifier: xKqh3epsy9/QAHLZeHXSFHTMBPp285r0nK007D1vwZg= Subject key identifier: AC:E0:5F:32:98:3A:44:B1:33:CC:7F:8C:E3:60:DD:5E:9A:52:C2:C9 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EA0155004D98A506109D2A880 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/96854358-4dea-3365-8054-49f3298d62eb.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 16417 IP address blocks: 23.90.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:50:04:d9:8a:50:61:09:d2:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=f8e05e44-ec39-4ba4-a069-d4d274dc5e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:41:c7:84:42:21:a8:a7:d3:dc:7f:f7:92: ee:55:34:d0:c8:cf:73:3f:30:9e:b2:49:35:0d:00: a8:22:15:a1:0f:cb:7e:86:10:e2:fd:42:a7:fa:95: f9:31:bc:a7:10:62:4a:7e:c9:9d:99:71:3d:09:dd: 5d:5c:cd:d4:e6:cd:76:32:d9:d9:5b:5d:a8:03:01: fa:7d:e2:2e:79:57:69:ce:30:86:11:c8:a3:b7:43: 69:c4:17:73:59:de:88:d2:ec:74:ab:c3:de:82:e5: 71:5b:86:7b:9d:47:97:78:5e:17:5c:d2:91:67:58: 1a:09:3e:48:a0:17:ab:90:5c:ad:20:1c:c0:aa:9a: b6:a7:ae:9c:4c:1f:e3:a4:a7:83:26:b2:df:c3:eb: 42:26:a4:7c:87:38:4c:bf:32:e5:30:1b:17:b9:9c: a3:24:15:2c:6c:21:4a:0f:9c:bb:b5:73:a9:00:4f: 07:c2:fd:af:0a:d6:72:b1:21:98:fc:51:4c:d9:56: 29:41:4d:c5:b5:51:97:db:b3:ea:f5:ba:bb:3c:59: 3e:04:1a:72:d1:2d:40:9e:93:87:d3:8b:d3:0e:ee: 58:9e:30:26:26:db:44:06:bb:7e:25:50:cc:f7:5e: 2c:7f:56:c8:5c:04:bf:f8:b1:c0:b2:21:f5:ee:f3: 9e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E0:5F:32:98:3A:44:B1:33:CC:7F:8C:E3:60:DD:5E:9A:52:C2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/96854358-4dea-3365-8054-49f3298d62eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:87:cf:f4:4d:32:f7:7a:59:37:2e:df:90:ca:91:e1:b7:37: 07:8a:22:66:05:6b:6f:ba:c5:2c:ab:80:74:22:b4:10:f3:32: cd:c2:50:3e:76:37:87:6c:27:39:12:cb:e8:33:3d:fb:be:e7: 9c:c9:fc:0d:34:19:2e:d7:b5:c2:be:f1:0d:78:7f:51:1a:c1: e7:d0:65:1c:9d:10:6b:0c:ff:85:42:2b:59:5b:a8:23:bc:df: 4d:c2:b3:ab:ed:fe:b9:85:8f:82:59:65:69:d3:e9:f2:e7:86: 44:34:c0:cf:8a:f8:c3:14:7d:c5:3c:6e:38:dc:b6:51:84:04: 70:57:23:80:34:24:b0:13:60:ba:d2:98:ca:d7:de:29:61:cd: b9:c7:53:03:0c:c1:40:2c:37:30:61:13:85:6b:9e:36:7f:de: df:fb:e5:7d:53:1a:a4:fa:72:a1:be:17:c6:c4:6e:a5:34:31: b7:7b:ae:ef:d8:2a:57:52:23:2e:3c:07:ef:9b:45:24:c0:50: a4:18:2e:7c:84:f3:b9:11:a0:a7:62:fe:2d:5d:d1:1a:f7:7d: c7:cf:6d:0e:0f:7c:68:ab:69:ed:78:6e:ac:33:73:a8:56:62: aa:50:53:62:41:52:78:ac:c4:a7:0e:92:b8:7f:a6:4b:60:ff: fd:73:93:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFVAE2YpQYQnSqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZjhlMDVlNDQtZWMzOS00YmE0LWEwNjktZDRkMjc0ZGM1ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOpBx4RCIain09x/95LuVTTQyM9zPzCeskk1 DQCoIhWhD8t+hhDi/UKn+pX5MbynEGJKfsmdmXE9Cd1dXM3U5s12MtnZW12oAwH6 feIueVdpzjCGEcijt0NpxBdzWd6I0ux0q8PeguVxW4Z7nUeXeF4XXNKRZ1gaCT5I oBerkFytIBzAqpq2p66cTB/jpKeDJrLfw+tCJqR8hzhMvzLlMBsXuZyjJBUsbCFK D5y7tXOpAE8Hwv2vCtZysSGY/FFM2VYpQU3FtVGX27Pq9bq7PFk+BBpy0S1AnpOH 04vTDu5YnjAmJttEBrt+JVDM914sf1bIXAS/+LHAsiH17vOe5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzgXzKYOkSxM8x/jONg3V6aUsLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOTY4NTQzNTgtNGRlYS0z MzY1LTgwNTQtNDlmMzI5OGQ2MmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyHz/RNMvd6WTcu35DKkeG3NweKImYFa2+6xSyrgHQitBDzMs3CUD52 N4dsJzkSy+gzPfu+55zJ/A00GS7XtcK+8Q14f1EawefQZRydEGsM/4VCK1lbqCO8 303Cs6vt/rmFj4JZZWnT6fLnhkQ0wM+K+MMUfcU8bjjctlGEBHBXI4A0JLATYLrS mMrX3ilhzbnHUwMMwUAsNzBhE4VrnjZ/3t/75X1TGqT6cqG+F8bEbqU0Mbd7ru/Y KldSIy48B++bRSTAUKQYLnyE87kRoKdi/i1d0Rr3fcfPbQ4PfGirae14bqwzc6hW YqpQU2JBUnisxKcOkrh/pktg//1zk6A= -----END CERTIFICATE-----Generated at Sat Sep 12 14:27:25 2026 by rpki-client