$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa File: 02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa (raw, json) Hash identifier: /PXvnIUksY7kUHW7u1o+nq0Wa4IAKu7zaBRf9yUIUro= Subject key identifier: 39:2E:18:C2:7E:9E:1F:1D:20:06:5A:F7:31:64:DB:29:12:6D:FE:63 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E785F24FDF71C7112EBD00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 23.90.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:85:f2:4f:df:71:c7:11:2e:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6e5b4dca-e845-4571-b431-fab7808f6f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:5b:c2:f2:42:4c:88:67:3b:db:b7:35:48: 2a:94:84:4d:f5:1e:eb:30:e2:24:8b:82:4d:d6:89: 5f:40:b5:25:42:fb:51:22:2d:83:ef:36:09:f0:00: 44:48:35:a7:0f:1b:12:4a:b7:21:d1:f3:1e:11:af: ad:18:24:50:f3:11:fe:7d:4b:b6:1e:f6:3a:91:57: 8f:9d:8d:3c:d0:a4:1e:66:d9:a5:48:fc:f5:aa:7e: a9:da:22:60:a4:f1:c1:69:ac:f8:23:2b:f2:e1:53: 5c:dd:9f:d3:95:15:f9:97:1a:d4:99:4b:c9:94:b2: e4:be:64:97:a3:4d:13:52:45:5c:9e:78:ce:b1:f1: e8:dd:fe:0a:4d:1c:f7:f4:ef:82:d6:6f:72:a5:c2: 57:94:83:79:b5:81:3d:94:66:08:fb:ed:da:04:44: 81:33:f3:c4:85:8c:10:8c:94:60:89:b1:a3:65:78: 3a:10:b1:69:89:77:5d:10:c4:48:22:2e:ef:9a:66: df:e4:d0:1a:08:49:a4:57:54:7e:66:b4:40:99:a5: a0:f8:01:44:4e:a5:e1:f8:67:a5:3f:ad:54:92:f6: 29:8b:03:2a:c3:fc:58:be:34:c0:66:74:c0:88:c4: b0:1f:b1:ef:13:f8:42:35:dc:a9:50:e5:91:d1:ce: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:18:C2:7E:9E:1F:1D:20:06:5A:F7:31:64:DB:29:12:6D:FE:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a2:8f:1a:1f:ea:f5:c2:a2:aa:b2:ce:7f:c4:51:e3:83:48: e4:38:d4:d6:d9:c3:93:49:6c:c5:b8:2b:8c:df:40:a4:11:bc: c1:29:2b:c0:43:2c:e9:a9:6a:11:17:c4:e5:f8:f1:8d:5c:62: 51:7d:32:1f:a3:fc:98:d0:1d:be:38:54:1f:90:22:13:a7:99: 26:52:42:61:4e:6d:6e:85:2d:b3:f8:ca:ff:d7:8e:e2:4c:b8: b0:5b:81:69:60:ef:07:3f:8f:49:57:03:dd:60:19:6a:df:0b: 81:a8:ca:c6:e9:03:1c:70:76:3c:3b:d0:03:d9:f1:85:30:14: 67:cf:af:11:c4:66:85:f9:03:aa:49:c8:3c:c6:66:65:0f:8e: c3:11:9c:b4:30:e0:7b:9c:72:e3:60:b6:eb:2a:fa:18:47:20: a7:31:db:fb:2c:c2:34:24:ad:f3:95:8c:69:8d:b6:08:78:0c: ef:ab:40:a0:56:d2:87:0a:d3:a0:87:42:4c:4a:f9:cd:3e:cb: 6c:41:dd:2a:00:72:04:6a:bd:66:1f:88:d0:3c:89:ec:eb:a3: a0:98:77:1f:c5:12:31:2f:e8:f4:f8:f8:43:66:a0:4a:5d:a8: 39:bd:69:db:d7:c3:ba:7a:0b:6d:a7:24:3e:dd:b5:35:a2:8e: 30:4d:39:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54XyT99xxxEuvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NmU1YjRkY2EtZTg0NS00NTcxLWI0MzEtZmFiNzgwOGY2ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoNbwvJCTIhnO9u3NUgqlIRN9R7rMOIki4JN 1olfQLUlQvtRIi2D7zYJ8ABESDWnDxsSSrch0fMeEa+tGCRQ8xH+fUu2HvY6kVeP nY080KQeZtmlSPz1qn6p2iJgpPHBaaz4Iyvy4VNc3Z/TlRX5lxrUmUvJlLLkvmSX o00TUkVcnnjOsfHo3f4KTRz39O+C1m9ypcJXlIN5tYE9lGYI++3aBESBM/PEhYwQ jJRgibGjZXg6ELFpiXddEMRIIi7vmmbf5NAaCEmkV1R+ZrRAmaWg+AFETqXh+Gel P61UkvYpiwMqw/xYvjTAZnTAiMSwH7HvE/hCNdypUOWR0c7uwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkuGMJ+nh8dIAZa9zFk2ykSbf5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDJlODQ1YjgtNTA1Yy0z ZDYwLWIyYmYtZmUyMGNmODc1NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWijxof6vXCoqqyzn/EUeODSOQ41NbZw5NJbMW4K4zfQKQRvMEpK8BD LOmpahEXxOX48Y1cYlF9Mh+j/JjQHb44VB+QIhOnmSZSQmFObW6FLbP4yv/XjuJM uLBbgWlg7wc/j0lXA91gGWrfC4GoysbpAxxwdjw70APZ8YUwFGfPrxHEZoX5A6pJ yDzGZmUPjsMRnLQw4HuccuNgtusq+hhHIKcx2/sswjQkrfOVjGmNtgh4DO+rQKBW 0ocK06CHQkxK+c0+y2xB3SoAcgRqvWYfiNA8iezro6CYdx/FEjEv6PT4+ENmoEpd qDm9advXw7p6C22nJD7dtTWijjBNOVA= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:38 2025 by rpki-client