$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa File: 189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa (raw, json) Hash identifier: DYzG6gMTY5k3V0cGb+p+3RMqxlonlG8qMrr8PK90L/M= Subject key identifier: 53:CC:DB:58:DF:84:E6:AC:9E:48:00:C3:E7:BC:6B:C1:76:F2:66:6D Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA498F29EC0221EA31CE20 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 23.90.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:49:8f:29:ec:02:21:ea:31:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3d59e907-0dea-4ab5-84fc-5b9468b9f452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:f9:11:b2:f7:e9:2e:d2:07:e0:e0:f2:a8: 02:43:dc:b1:7c:41:01:9e:7a:6f:b2:aa:1c:16:50: e0:16:82:74:db:09:d5:3b:9e:aa:a5:56:15:1c:62: 09:83:61:51:5e:10:0f:4e:94:b8:93:e3:e2:28:3c: 75:9d:b5:87:e5:73:c0:51:d5:cf:2d:b0:a8:dc:03: d1:c5:3d:23:04:8d:c2:12:81:d8:b8:8a:37:2e:c0: 47:9c:a1:49:ee:33:40:97:7f:17:38:b2:ab:21:a9: 25:00:94:9b:ff:1a:58:10:4b:b4:63:b7:5e:f5:60: b7:c8:9e:7e:1f:d1:a8:e2:b4:b6:9e:d1:17:b9:7d: c5:eb:0d:17:82:a0:9d:38:b1:2f:20:ff:ca:a4:01: 8a:43:70:e8:5d:ca:cc:52:62:e4:a8:a5:23:ed:fa: 79:00:dd:96:c0:35:6e:5a:f0:6a:d6:0c:67:9d:64: 8f:d4:4d:4f:3f:16:95:fe:4c:ca:f5:5b:0f:82:d6: 16:92:30:54:6f:6b:95:f8:b5:dd:bc:08:0a:18:63: 05:15:5c:94:fd:de:6d:1c:57:c3:24:6c:e0:0c:f0: d3:a2:8b:db:bc:dc:ee:f1:81:31:a7:dc:34:db:1f: 7d:81:5a:07:15:c9:d0:e7:aa:b0:d6:5f:1c:69:00: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CC:DB:58:DF:84:E6:AC:9E:48:00:C3:E7:BC:6B:C1:76:F2:66:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:47:11:36:d1:d6:36:18:1f:2c:82:a5:5b:4a:9b:0a:c5:86: be:1f:7a:d1:d1:14:cd:f2:29:21:fc:af:8a:57:79:18:39:ec: e5:ff:b2:4b:1f:95:8c:03:6a:6f:47:24:1b:7d:67:46:7e:65: a3:56:84:c0:d3:f8:6a:f0:44:e6:2b:5a:85:8a:fd:80:2a:66: 14:31:07:11:a8:4d:8e:4e:77:ea:ff:ce:06:12:10:93:9a:61: 83:e4:37:26:b3:d3:d6:c4:4f:0d:c0:40:f5:37:94:e9:e8:a2: ef:81:c0:1f:8f:f1:3f:fd:8a:a1:8d:81:b0:5b:5d:06:cc:05: 96:df:28:13:a7:78:8e:4c:dd:7e:f4:04:b6:ac:81:fd:2a:b9: d6:25:67:a7:7c:fc:e7:37:83:69:68:32:db:d3:52:40:e8:8d: 33:b9:a1:21:27:24:1f:e6:f1:f8:65:1f:a0:ca:b3:7d:c1:7e: f3:07:a3:4e:b3:16:20:c5:80:cd:d3:37:da:89:96:82:b4:75: 4d:4e:88:ea:90:24:7c:78:16:48:9f:06:c8:45:b9:dd:5c:e3: ce:f0:cc:ea:21:c8:6d:25:c1:ab:fa:64:e3:25:6c:dc:47:49: 43:14:6f:d9:e6:7d:1f:fc:d4:2d:39:b2:1d:29:91:25:c0:6e: 1a:e2:30:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kmPKewCIeoxziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk M2Q1OWU5MDctMGRlYS00YWI1LTg0ZmMtNWI5NDY4YjlmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVj5EbL36S7SB+Dg8qgCQ9yxfEEBnnpvsqoc FlDgFoJ02wnVO56qpVYVHGIJg2FRXhAPTpS4k+PiKDx1nbWH5XPAUdXPLbCo3APR xT0jBI3CEoHYuIo3LsBHnKFJ7jNAl38XOLKrIaklAJSb/xpYEEu0Y7de9WC3yJ5+ H9Go4rS2ntEXuX3F6w0XgqCdOLEvIP/KpAGKQ3DoXcrMUmLkqKUj7fp5AN2WwDVu WvBq1gxnnWSP1E1PPxaV/kzK9VsPgtYWkjBUb2uV+LXdvAgKGGMFFVyU/d5tHFfD JGzgDPDToovbvNzu8YExp9w02x99gVoHFcnQ56qw1l8caQCktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPM21jfhOasnkgAw+e8a8F28mZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTg5ODg1Y2UtMGRhMi0z OGUxLWJmNzctZDNiNWVjMGMxOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlHETbR1jYYHyyCpVtKmwrFhr4fetHRFM3yKSH8r4pXeRg57OX/sksf lYwDam9HJBt9Z0Z+ZaNWhMDT+GrwROYrWoWK/YAqZhQxBxGoTY5Od+r/zgYSEJOa YYPkNyaz09bETw3AQPU3lOnoou+BwB+P8T/9iqGNgbBbXQbMBZbfKBOneI5M3X70 BLasgf0qudYlZ6d8/Oc3g2loMtvTUkDojTO5oSEnJB/m8fhlH6DKs33BfvMHo06z FiDFgM3TN9qJloK0dU1OiOqQJHx4FkifBshFud1c487wzOohyG0lwav6ZOMlbNxH SUMUb9nmfR/81C05sh0pkSXAbhriMDQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:21 2026 by rpki-client