$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa File: 02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa (raw, json) Hash identifier: ahQE6el2UDUztGNEugCyRjmoein2YwdXZgSh3gMWzZU= Subject key identifier: DB:3B:D0:36:26:13:10:84:34:47:AC:3F:BB:90:19:9F:4B:DC:1B:F1 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA49A8207DF993826CB900 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 23.90.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:49:a8:20:7d:f9:93:82:6c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=52af7df9-54c4-4550-a1b3-ed0e87987d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:fd:33:16:18:d1:c6:f3:92:07:57:99:d4: 68:63:21:f2:34:39:f0:0b:6c:f7:b6:8d:7c:d7:1c: fa:a3:fe:57:3f:ed:0d:df:55:a5:4f:4d:b8:03:0b: 1a:fa:61:ba:90:38:17:af:47:f7:55:43:60:f6:9f: 38:44:5d:8b:3f:fc:6e:f0:02:9a:e3:f7:e3:54:57: 14:40:23:6c:c1:4b:c8:32:b9:cd:2f:dc:25:eb:7e: f7:cb:5b:db:0a:46:d5:bd:27:bb:77:a4:e6:65:16: 62:b0:d9:2e:54:3e:a1:30:d8:25:f6:96:a2:e0:9a: 37:48:a3:b9:2a:97:94:31:e2:33:20:52:59:00:67: 4c:70:9a:79:76:2f:8c:61:0e:87:67:53:b0:fe:4c: 1a:0c:45:2f:a8:1f:69:fb:c7:d8:90:fd:be:d0:37: 3a:d3:bc:92:56:42:a2:f6:50:49:20:23:70:bd:88: 86:f4:a9:d9:3b:4c:aa:6d:4d:9b:e8:8a:10:18:c1: d6:da:3f:59:5a:12:62:f5:f9:5c:81:88:9e:c5:cf: a8:ca:a4:e7:97:9b:b9:93:69:12:78:f1:f2:e5:b4: 94:9b:eb:f4:c4:7a:74:b8:c2:81:fa:ac:f7:94:c0: e5:e9:9c:7f:65:54:30:94:85:61:c6:45:c5:7d:a7: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3B:D0:36:26:13:10:84:34:47:AC:3F:BB:90:19:9F:4B:DC:1B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02e845b8-505c-3d60-b2bf-fe20cf8756bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:11:21:9d:c0:44:e7:14:a9:12:d5:eb:98:1a:11:de:34:f3: 5c:23:25:12:21:26:03:ce:30:cc:6f:4a:7e:12:a1:2d:68:e2: be:fb:37:5d:c0:ce:31:c7:97:3d:f9:da:1b:bc:8a:9b:48:72: dd:63:c4:10:89:f2:bf:10:5b:57:47:96:ef:ae:04:97:83:f8: fd:dc:bd:f2:f6:6f:23:17:13:95:cf:4a:dc:85:59:30:54:5b: 84:14:1d:0a:5c:4b:9e:51:fb:a7:1d:dd:f6:f0:fc:b7:07:07: 2a:c3:cb:45:59:16:99:4e:0e:4d:1a:a7:93:fb:66:2a:c7:90: 4d:2c:5a:c5:3e:cd:ce:ed:64:e4:de:29:0b:ee:91:d6:1a:e4: f3:31:4e:38:c3:7f:d9:d3:73:e5:6b:26:1f:7d:7d:65:0b:a7: 41:39:83:b2:6d:1d:b4:e8:df:9d:28:d8:04:eb:dc:db:b8:99: 77:9d:31:b8:77:98:88:4a:f5:76:33:54:c6:4f:79:17:71:47: a7:60:7a:97:c0:fb:b9:0d:72:dc:25:e3:06:12:d7:24:53:92: c3:51:f3:c7:2a:67:ce:cc:a7:8b:e9:2e:e7:11:95:80:13:79: ed:6d:35:93:79:b9:1f:e7:41:72:9b:6e:4e:92:d7:94:f4:a2: 4d:86:86:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kmoIH35k4JsuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NTJhZjdkZjktNTRjNC00NTUwLWExYjMtZWQwZTg3OTg3ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRH9MxYY0cbzkgdXmdRoYyHyNDnwC2z3to18 1xz6o/5XP+0N31WlT024Awsa+mG6kDgXr0f3VUNg9p84RF2LP/xu8AKa4/fjVFcU QCNswUvIMrnNL9wl6373y1vbCkbVvSe7d6TmZRZisNkuVD6hMNgl9pai4Jo3SKO5 KpeUMeIzIFJZAGdMcJp5di+MYQ6HZ1Ow/kwaDEUvqB9p+8fYkP2+0Dc607ySVkKi 9lBJICNwvYiG9KnZO0yqbU2b6IoQGMHW2j9ZWhJi9flcgYiexc+oyqTnl5u5k2kS ePHy5bSUm+v0xHp0uMKB+qz3lMDl6Zx/ZVQwlIVhxkXFfafWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs70DYmExCENEesP7uQGZ9L3BvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDJlODQ1YjgtNTA1Yy0z ZDYwLWIyYmYtZmUyMGNmODc1NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwRIZ3AROcUqRLV65gaEd4081wjJRIhJgPOMMxvSn4SoS1o4r77N13A zjHHlz352hu8iptIct1jxBCJ8r8QW1dHlu+uBJeD+P3cvfL2byMXE5XPStyFWTBU W4QUHQpcS55R+6cd3fbw/LcHByrDy0VZFplODk0ap5P7ZirHkE0sWsU+zc7tZOTe KQvukdYa5PMxTjjDf9nTc+VrJh99fWULp0E5g7JtHbTo350o2ATr3Nu4mXedMbh3 mIhK9XYzVMZPeRdxR6dgepfA+7kNctwl4wYS1yRTksNR88cqZ87Mp4vpLucRlYAT ee1tNZN5uR/nQXKbbk6S15T0ok2GhlQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:22 2026 by rpki-client