$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa File: f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa (raw, json) Hash identifier: vH8CoaoeZsP8rBI8a6JIQnzSFLq4+PcqiAmCFeDxiKo= Subject key identifier: 4C:43:22:20:83:B6:F4:42:77:51:73:91:09:91:7C:F2:C0:44:62:EF Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EFCACCD4235732B7AA77BD740 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 30238 IP address blocks: 23.90.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cd:42:35:73:2b:7a:a7:7b:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=1f4288e6-68f3-40f5-8c29-4047c4c7b4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bd:cb:2e:e3:27:8c:7c:d8:ce:02:fa:f2:43: 2c:7b:14:a5:8e:be:a3:cb:49:81:76:a5:ff:f7:dd: fd:30:15:65:3c:64:be:92:3b:0b:84:db:c7:df:dc: 27:fc:a8:0a:1c:3e:25:34:fa:e2:39:1b:9d:d8:84: 1e:0d:84:a0:86:a1:28:1c:04:f1:79:05:02:af:b6: 99:a7:08:76:3c:64:f7:6a:d4:53:58:c8:4b:fd:b2: e6:ca:27:69:27:52:f4:e4:42:23:64:18:52:53:0e: a4:3b:dd:8f:e0:e2:a2:b9:e9:c1:25:f3:e2:a0:87: 97:dc:b8:76:9b:16:92:c8:0a:47:0b:5f:00:bf:7a: de:83:e9:b2:ab:94:cf:52:37:3a:14:6c:df:bd:7e: 79:e1:1e:47:46:51:00:0e:3f:a9:37:f6:ec:4d:61: 92:15:61:12:c9:c9:25:01:51:ea:9a:81:09:72:08: 2e:98:f2:5f:27:f1:69:49:cf:f1:95:1c:60:fc:1e: 52:2c:d7:1b:cd:1f:9e:6a:fb:94:0c:00:fd:a7:ec: a7:e9:ed:0c:55:76:9a:0a:48:c0:e1:d1:6d:ab:cd: 84:8c:de:0b:d2:58:ef:42:c0:ed:5e:4f:98:be:1d: af:ab:5a:66:29:79:56:6f:45:a5:f7:1c:55:7e:0f: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:22:20:83:B6:F4:42:77:51:73:91:09:91:7C:F2:C0:44:62:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f3660e2a-4abf-3393-afe0-29cb65d4c57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:3e:05:15:50:5f:09:63:b7:83:81:d5:ab:da:94:cc:fd:c0: 09:a4:f4:7f:85:2f:4a:4a:80:c7:29:d4:05:0d:07:ff:67:3f: 8b:ba:7c:2b:bd:3b:25:74:dd:68:b0:f1:df:a9:15:87:05:d9: 6c:ab:49:e2:99:f1:31:47:f7:c1:1c:e6:85:49:4d:db:76:0a: 6d:c5:27:95:62:37:ca:e0:e3:df:07:b3:ee:1e:2f:18:2e:d0: d3:a8:c2:41:69:60:93:c6:89:7e:f7:4a:83:a9:d2:c0:d7:bf: 99:46:d0:79:d8:60:0b:b1:c5:e8:fe:8c:a6:da:1b:17:07:cd: 56:5c:60:9a:fe:28:c0:76:f2:c3:56:4e:a0:a1:84:10:ff:d5: c2:67:12:db:c0:90:0f:f4:c4:f9:d2:e9:91:43:6f:2b:2f:6a: 6d:05:2e:77:02:64:d8:5e:75:3f:26:ca:a0:1d:fa:f5:32:8a: c0:31:e4:eb:98:68:ea:7e:a6:66:1b:a8:c1:af:d2:c0:bb:2d: 1e:19:06:88:13:35:80:e4:d5:1d:b5:7e:28:fd:ba:83:51:b0: 7b:f3:38:95:9e:c3:29:5b:a8:c9:9a:d4:c9:ca:d8:89:79:32: 0e:a4:fb:fe:f8:bb:38:c6:5c:6f:de:90:22:2c:93:7f:b4:ad: 6f:c9:e0:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rM1CNXMreqd710AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MWY0Mjg4ZTYtNjhmMy00MGY1LThjMjktNDA0N2M0YzdiNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL3LLuMnjHzYzgL68kMsexSljr6jy0mBdqX/ 9939MBVlPGS+kjsLhNvH39wn/KgKHD4lNPriORud2IQeDYSghqEoHATxeQUCr7aZ pwh2PGT3atRTWMhL/bLmyidpJ1L05EIjZBhSUw6kO92P4OKiuenBJfPioIeX3Lh2 mxaSyApHC18Av3reg+myq5TPUjc6FGzfvX554R5HRlEADj+pN/bsTWGSFWESyckl AVHqmoEJcggumPJfJ/FpSc/xlRxg/B5SLNcbzR+eavuUDAD9p+yn6e0MVXaaCkjA 4dFtq82EjN4L0ljvQsDtXk+Yvh2vq1pmKXlWb0Wl9xxVfg909QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExDIiCDtvRCd1FzkQmRfPLARGLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZjM2NjBlMmEtNGFiZi0z MzkzLWFmZTAtMjljYjY1ZDRjNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQ+BRVQXwljt4OB1avalMz9wAmk9H+FL0pKgMcp1AUNB/9nP4u6fCu9 OyV03Wiw8d+pFYcF2WyrSeKZ8TFH98Ec5oVJTdt2Cm3FJ5ViN8rg498Hs+4eLxgu 0NOowkFpYJPGiX73SoOp0sDXv5lG0HnYYAuxxej+jKbaGxcHzVZcYJr+KMB28sNW TqChhBD/1cJnEtvAkA/0xPnS6ZFDbysvam0FLncCZNhedT8myqAd+vUyisAx5OuY aOp+pmYbqMGv0sC7LR4ZBogTNYDk1R21fij9uoNRsHvzOJWewylbqMma1MnK2Il5 Mg6k+/74uzjGXG/ekCIsk3+0rW/J4AU= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:02 2026 by rpki-client