$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa File: ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa (raw, json) Hash identifier: jEA48pvPOyHcfSFi0jG5t7o+/BnnyCWeJEccup/OaCU= Subject key identifier: 28:B9:57:B4:89:07:EE:C5:95:9F:E8:92:63:71:DB:F6:C8:14:DF:43 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F119D1266BDD70C58FE46F980 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 30238 IP address blocks: 23.90.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:12:66:bd:d7:0c:58:fe:46:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7d0ae8b6-2ce3-4698-afc3-34b3a8a07ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:88:eb:8f:f1:cb:16:f0:88:50:5b:ce:09: b0:3b:9b:41:fe:ce:2c:a8:55:78:3a:0a:ea:38:98: b3:86:db:78:3c:0a:68:27:99:f4:56:9e:a4:dc:b6: e8:84:0c:3d:7b:be:01:18:d9:59:9e:f7:7a:04:55: 64:bc:c1:b4:95:c9:bf:cc:df:00:2a:f0:27:44:bf: d2:67:91:e8:9d:82:4a:89:ea:1f:dd:4d:a2:15:00: f2:94:3b:00:00:5c:fe:93:71:34:d4:e4:63:27:67: 8f:df:7b:5d:a0:a9:e1:e3:66:bc:e9:1d:b5:ba:07: 92:41:c9:c0:2c:aa:b9:d8:63:54:ee:c4:01:33:a8: 74:a4:8f:13:f5:c9:9e:d0:83:14:e3:a4:b0:3e:f1: c8:af:90:fb:14:f8:8b:28:bd:bd:0b:d9:62:c8:d5: 5c:a6:72:e3:18:cc:de:6a:f3:fd:48:7a:83:9c:d7: da:b0:e6:7f:7d:5e:ff:63:1c:7d:04:71:6f:79:02: a3:17:c5:1d:89:f0:76:25:b7:79:92:59:e8:2f:21: e6:88:b0:e5:9c:66:69:c7:40:9e:16:8d:13:84:ca: 08:bd:f3:ff:e0:46:fd:08:fd:86:5a:48:06:42:1a: f5:7f:eb:9d:84:87:b4:93:cb:c6:21:6b:ee:6d:79: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:57:B4:89:07:EE:C5:95:9F:E8:92:63:71:DB:F6:C8:14:DF:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:bc:19:0d:05:e1:0d:08:c1:8b:60:0d:00:e1:be:9b:58:b4: c5:72:c4:96:26:84:9f:f4:02:84:6c:32:8f:e6:59:23:19:4d: 82:cf:c5:17:b0:1a:46:fa:58:7a:ee:19:37:ad:91:ee:03:61: 8c:3c:52:7f:2e:93:50:fc:a7:32:e8:15:8a:db:b4:42:8b:9a: 20:74:65:aa:44:12:15:71:46:e1:1c:af:6c:bc:69:7e:47:f4: 32:2e:91:3d:37:c4:44:2d:98:2f:11:88:69:9d:4c:f8:6a:af: 4b:40:3f:3f:2e:7d:f8:c0:7a:94:7b:1b:2a:9f:7c:01:90:20: 5e:1f:5b:6e:03:fd:ce:a5:09:51:ff:4c:7d:6a:b6:32:9c:13: aa:98:35:ca:eb:ae:85:d0:fa:b1:67:04:55:7c:b9:72:41:dc: c6:5a:d6:ae:ba:ba:11:b4:f7:52:00:bb:08:0f:92:ce:6e:05: f4:19:7f:56:76:b5:35:2d:07:d3:dc:f4:59:42:e0:e0:a2:b8: b9:17:d5:b4:4e:dc:5c:52:93:9f:71:4c:77:0a:8c:79:ba:01: 1e:e5:9b:11:33:61:ba:9f:d4:f7:53:5c:77:4a:2c:6b:94:68: 24:bf:7c:52:1d:37:5a:4c:89:e1:5e:a2:1f:34:72:fc:70:c4: ea:35:f2:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRJmvdcMWP5G+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk N2QwYWU4YjYtMmNlMy00Njk4LWFmYzMtMzRiM2E4YTA3Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGI64/xyxbwiFBbzgmwO5tB/s4sqFV4Ogrq OJizhtt4PApoJ5n0Vp6k3LbohAw9e74BGNlZnvd6BFVkvMG0lcm/zN8AKvAnRL/S Z5HonYJKieof3U2iFQDylDsAAFz+k3E01ORjJ2eP33tdoKnh42a86R21ugeSQcnA LKq52GNU7sQBM6h0pI8T9cme0IMU46SwPvHIr5D7FPiLKL29C9liyNVcpnLjGMze avP9SHqDnNfasOZ/fV7/Yxx9BHFveQKjF8UdifB2Jbd5klnoLyHmiLDlnGZpx0Ce Fo0ThMoIvfP/4Eb9CP2GWkgGQhr1f+udhIe0k8vGIWvubXn07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi5V7SJB+7FlZ/okmNx2/bIFN9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGRhYTNjYTItMTJjOS0z N2QxLTljNTQtM2Q5Y2E2Njg4NzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm8GQ0F4Q0IwYtgDQDhvptYtMVyxJYmhJ/0AoRsMo/mWSMZTYLPxRew Gkb6WHruGTetke4DYYw8Un8uk1D8pzLoFYrbtEKLmiB0ZapEEhVxRuEcr2y8aX5H 9DIukT03xEQtmC8RiGmdTPhqr0tAPz8uffjAepR7GyqffAGQIF4fW24D/c6lCVH/ TH1qtjKcE6qYNcrrroXQ+rFnBFV8uXJB3MZa1q66uhG091IAuwgPks5uBfQZf1Z2 tTUtB9Pc9FlC4OCiuLkX1bRO3FxSk59xTHcKjHm6AR7lmxEzYbqf1PdTXHdKLGuU aCS/fFIdN1pMieFeoh80cvxwxOo18jo= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:01 2026 by rpki-client