$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d078457f-645f-305c-a39c-b54901ecbcb2.roa File: d078457f-645f-305c-a39c-b54901ecbcb2.roa (raw, json) Hash identifier: 89Zyu4muB8ZfXgiHoB2ihNfSZbZJCoPl3hwARZnD+Uo= Subject key identifier: F0:10:67:52:A4:E8:01:60:BC:81:8B:08:09:E8:5D:65:C1:11:E1:1E Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B3556EB2E803007F3C59D0200 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d078457f-645f-305c-a39c-b54901ecbcb2.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 23.90.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:eb:2e:80:30:07:f3:c5:9d:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=90678753-5983-43f2-8f54-f1f90d23b517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:30:94:39:40:95:7f:9c:ae:c3:da:f6:41: f1:9c:82:b6:58:d0:80:6b:13:e2:42:dc:27:e2:6d: a2:68:c7:09:43:01:43:55:17:fd:f5:73:a7:03:70: 0d:0e:30:d1:6c:2c:06:5d:39:55:60:e9:7a:92:bd: c9:dc:45:4b:fc:76:47:3d:ce:60:0e:ed:14:89:51: 66:88:2d:a4:08:7b:42:8b:ca:c6:52:75:94:14:9a: a2:69:a9:95:09:16:cc:2e:1e:b4:0d:e8:c4:86:03: 93:ce:b5:f5:d6:63:b7:ad:6d:97:9c:6c:10:41:a4: 57:de:5e:39:3c:fc:6f:36:d1:85:ac:8a:fe:19:f8: 35:e1:58:1d:6d:f3:48:bd:a3:ff:d9:c2:8c:67:fb: 34:b2:af:22:8c:51:77:1d:fd:a4:e6:fb:f9:d4:09: 05:e7:15:82:44:39:52:e5:2f:bb:d7:94:72:12:bf: bd:18:49:9f:2f:40:32:e1:85:9b:d0:76:c3:33:ea: ca:08:48:1e:22:75:15:22:eb:a0:f3:16:10:aa:26: 12:b9:e7:d3:8d:c1:c0:82:a5:69:8f:83:17:05:53: 32:9e:67:5b:f6:1a:5d:8c:be:57:65:05:df:3c:97: 30:24:5d:15:d5:b5:48:af:a0:90:8b:2b:17:bf:59: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:10:67:52:A4:E8:01:60:BC:81:8B:08:09:E8:5D:65:C1:11:E1:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d078457f-645f-305c-a39c-b54901ecbcb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b1:c8:0b:3d:17:a1:79:46:29:37:25:fb:cc:39:48:f6:c0: 95:b2:67:08:fd:fb:c0:81:d8:73:f4:59:b9:e8:e7:2a:8f:28: ff:43:b7:b2:34:2b:f9:17:ac:3c:73:ba:f7:85:b6:87:12:3a: 08:4f:da:cc:f9:0e:c5:88:09:01:45:c5:55:10:60:4a:27:4b: bf:96:9a:49:89:5f:3a:78:6c:7a:25:5b:b4:07:5a:dc:6d:6e: fc:6e:11:ae:69:66:1e:1a:88:ed:fd:9c:4e:52:3b:75:d4:1b: b3:bc:67:8b:0b:d3:fa:b2:69:7a:75:4e:36:73:e0:e3:2b:8e: 4b:a9:a8:d3:ba:92:10:13:41:a1:8b:ac:0a:f0:fa:d8:99:9f: 0e:9d:be:0b:81:b7:7d:ca:54:ae:e2:69:ba:99:f5:b5:25:06: e6:06:d4:54:36:87:67:f2:d8:56:46:4f:cc:dc:26:3e:02:14: fe:3b:e1:a8:88:ac:2a:db:ff:88:45:47:83:7c:87:e7:f8:94: 51:d3:69:ea:23:90:da:0c:de:8a:41:1b:0f:c6:c7:0b:dc:53: d1:2b:b0:ab:26:ad:20:2e:21:ae:8a:6a:6d:cb:61:88:fd:82: 64:b8:13:02:c2:80:58:88:5c:06:4b:cf:45:24:bc:33:1e:00: 5f:c0:18:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VusugDAH88WdAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OTA2Nzg3NTMtNTk4My00M2YyLThmNTQtZjFmOTBkMjNiNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHYwlDlAlX+crsPa9kHxnIK2WNCAaxPiQtwn 4m2iaMcJQwFDVRf99XOnA3ANDjDRbCwGXTlVYOl6kr3J3EVL/HZHPc5gDu0UiVFm iC2kCHtCi8rGUnWUFJqiaamVCRbMLh60DejEhgOTzrX11mO3rW2XnGwQQaRX3l45 PPxvNtGFrIr+Gfg14VgdbfNIvaP/2cKMZ/s0sq8ijFF3Hf2k5vv51AkF5xWCRDlS 5S+715RyEr+9GEmfL0Ay4YWb0HbDM+rKCEgeInUVIuug8xYQqiYSuefTjcHAgqVp j4MXBVMynmdb9hpdjL5XZQXfPJcwJF0V1bVIr6CQiysXv1ki1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAQZ1Kk6AFgvIGLCAnoXWXBEeEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDA3ODQ1N2YtNjQ1Zi0z MDVjLWEzOWMtYjU0OTAxZWNiY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+xyAs9F6F5Rik3JfvMOUj2wJWyZwj9+8CB2HP0Wbno5yqPKP9Dt7I0 K/kXrDxzuveFtocSOghP2sz5DsWICQFFxVUQYEonS7+WmkmJXzp4bHolW7QHWtxt bvxuEa5pZh4aiO39nE5SO3XUG7O8Z4sL0/qyaXp1TjZz4OMrjkupqNO6khATQaGL rArw+tiZnw6dvguBt33KVK7iabqZ9bUlBuYG1FQ2h2fy2FZGT8zcJj4CFP474aiI rCrb/4hFR4N8h+f4lFHTaeojkNoM3opBGw/GxwvcU9ErsKsmrSAuIa6Kam3LYYj9 gmS4EwLCgFiIXAZLz0UkvDMeAF/AGIk= -----END CERTIFICATE-----Generated at Tue Sep 16 04:26:47 2025 by rpki-client