$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa File: ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa (raw, json) Hash identifier: hXmvnnhG5xuHpg5dtSGT8345Z053QsWerg+D8Go1910= Subject key identifier: A3:C3:BC:64:1C:7F:54:E8:BB:9A:90:2E:7C:5B:15:B4:66:15:80:FA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E6F3A4385B4DAA104BF794800 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 30238 IP address blocks: 23.90.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:43:85:b4:da:a1:04:bf:79:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=84d36b25-60f6-44d3-8480-f4cf76143af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:be:ae:82:61:66:d0:5a:b3:51:8e:81:66: a2:23:e0:2f:9f:58:62:58:07:a9:89:72:0d:d8:11: 60:16:21:bb:e3:a6:d5:77:13:18:72:58:59:8c:a0: f3:c3:6c:99:de:c5:5f:a9:64:08:90:e1:64:06:56: b2:b8:ee:1d:06:99:fb:cd:f0:16:6a:b2:6b:5f:2b: f9:92:12:18:25:38:a4:4e:26:1e:a9:e7:d0:3d:58: 2d:f3:03:13:56:a9:c4:f6:df:85:65:bb:82:a2:df: 4e:74:fa:5b:d5:81:63:d8:5f:eb:eb:b6:20:74:51: cf:7d:54:db:89:5c:21:e4:d0:47:ee:4a:9e:34:ef: c6:3e:66:56:9b:41:49:7c:93:0a:0c:4b:69:84:84: 05:88:2d:50:90:ed:41:60:ea:d1:c6:bb:be:28:16: eb:47:90:02:59:ad:a4:26:56:12:c6:10:38:4c:b5: 27:52:6a:a1:7d:15:80:ce:8e:f7:25:96:65:10:ae: 9f:69:40:4c:56:3c:23:7f:61:f2:f9:d9:fe:45:9e: ef:ca:1b:ee:c7:7f:0b:bf:d6:72:21:c7:b9:f5:cc: 96:1e:4f:97:b4:5e:0d:4f:0b:2f:0f:28:93:76:e8: fa:26:57:95:c7:e2:21:08:64:b9:2f:9f:6f:0f:18: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C3:BC:64:1C:7F:54:E8:BB:9A:90:2E:7C:5B:15:B4:66:15:80:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ddaa3ca2-12c9-37d1-9c54-3d9ca668877d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5a:a0:eb:e4:77:5e:f0:17:25:40:24:cb:64:46:71:bc:41: a6:a0:3c:77:62:17:8f:f2:83:27:7c:92:1a:d5:ff:0d:85:e4: d0:2f:74:d4:5f:a6:54:d2:18:91:af:dd:ec:d5:3a:c4:29:c5: f1:89:22:ec:79:91:5f:25:a2:6b:a9:46:31:8f:b8:e7:a0:c2: cc:1f:a0:91:75:91:f5:3f:6c:c0:57:73:2e:05:df:cc:71:31: d9:a6:ea:98:c0:44:b0:e0:9b:0a:a7:e8:88:ed:94:bf:d2:b9: 76:1f:3a:7b:54:56:59:54:2a:91:82:05:f6:0e:f4:a0:c0:b1: 64:cf:99:24:ce:59:cc:9e:a3:e2:a3:44:86:e7:63:ce:3d:55: 1e:66:12:04:a0:1c:06:fb:27:47:5e:b5:b4:85:bf:62:a8:26: 57:0b:e2:9b:9f:26:1d:77:75:72:8f:07:94:be:62:bd:5c:ba: f0:ca:fa:c7:da:24:a3:c2:47:f9:4a:2f:f9:fe:a5:2b:a7:0c: 75:a5:d4:90:bc:bc:a8:0a:af:7c:2b:ca:74:0a:f3:da:43:c8: ca:a9:e9:f2:6c:31:00:68:f0:2e:00:68:dd:dd:fe:ee:3f:a2: 17:ed:ed:ba:d6:5e:a7:1a:ad:4a:a7:68:cf:c2:f8:43:df:8e: e1:3d:02:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOkOFtNqhBL95SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ODRkMzZiMjUtNjBmNi00NGQzLTg0ODAtZjRjZjc2MTQzYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDG+roJhZtBas1GOgWaiI+Avn1hiWAepiXIN 2BFgFiG746bVdxMYclhZjKDzw2yZ3sVfqWQIkOFkBlayuO4dBpn7zfAWarJrXyv5 khIYJTikTiYeqefQPVgt8wMTVqnE9t+FZbuCot9OdPpb1YFj2F/r67YgdFHPfVTb iVwh5NBH7kqeNO/GPmZWm0FJfJMKDEtphIQFiC1QkO1BYOrRxru+KBbrR5ACWa2k JlYSxhA4TLUnUmqhfRWAzo73JZZlEK6faUBMVjwjf2Hy+dn+RZ7vyhvux38Lv9Zy Ice59cyWHk+XtF4NTwsvDyiTduj6JleVx+IhCGS5L59vDxh+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPDvGQcf1Tou5qQLnxbFbRmFYD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGRhYTNjYTItMTJjOS0z N2QxLTljNTQtM2Q5Y2E2Njg4NzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBaoOvkd17wFyVAJMtkRnG8QaagPHdiF4/ygyd8khrV/w2F5NAvdNRf plTSGJGv3ezVOsQpxfGJIux5kV8lomupRjGPuOegwswfoJF1kfU/bMBXcy4F38xx Mdmm6pjARLDgmwqn6IjtlL/SuXYfOntUVllUKpGCBfYO9KDAsWTPmSTOWcyeo+Kj RIbnY849VR5mEgSgHAb7J0detbSFv2KoJlcL4pufJh13dXKPB5S+Yr1cuvDK+sfa JKPCR/lKL/n+pSunDHWl1JC8vKgKr3wrynQK89pDyMqp6fJsMQBo8C4AaN3d/u4/ ohft7brWXqcarUqnaM/C+EPfjuE9AqI= -----END CERTIFICATE-----Generated at Tue Jul 14 11:55:24 2026 by rpki-client