$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa File: 189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa (raw, json) Hash identifier: cBi459Rp9KS92707yiGPxdQSdSYYvlXeJK8p8IuxNZM= Subject key identifier: 35:3F:89:59:61:08:C2:8B:0B:D1:86:1A:C0:0D:02:18:78:39:26:C6 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E785E06F78FCA5C2346400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 23.90.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:85:e0:6f:78:fc:a5:c2:34:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9688cca3-e9d6-431e-a9b5-daea9e202e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:fe:6e:36:74:6b:a0:71:d8:c4:e9:a2:7a: 68:a6:ed:8c:4d:1c:75:18:ca:0a:36:2c:cf:78:85: e8:79:e9:44:7c:34:f3:6d:6c:02:ea:7e:e6:79:34: be:d6:7c:17:8a:ec:53:d6:51:05:e1:bc:a4:30:8c: 58:4b:4e:63:b2:c6:58:7a:20:87:6b:3e:f7:cf:cd: ef:4c:26:b1:41:c2:de:f7:94:3c:bc:6f:45:de:92: d3:3c:de:8b:a2:1b:6a:eb:00:bd:30:a0:84:78:e0: ec:a3:40:04:7f:4c:47:06:e1:a5:5e:b7:9c:18:48: 71:a2:84:d1:e4:f6:c0:07:28:d2:b0:a9:f2:ef:31: 15:af:06:7d:16:dd:3f:6a:b5:3d:6b:b2:fa:9d:8a: 4b:6d:5e:56:e3:3d:66:f7:b0:8b:4c:4b:b8:42:a2: 35:08:59:e1:03:a3:4c:3f:a3:b9:af:fe:ca:94:5e: 0e:d3:cc:52:eb:c3:e2:2b:05:77:c5:01:da:52:33: 24:7c:22:3a:a3:19:a5:bb:fb:74:b4:37:cc:f8:ce: 0a:69:35:76:ad:3d:60:30:4d:62:04:ae:f1:95:06: 92:7c:58:59:96:bd:28:5d:6c:f2:be:0d:04:95:cd: 96:e2:9f:aa:28:37:5b:57:59:e4:6f:42:94:7e:c8: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3F:89:59:61:08:C2:8B:0B:D1:86:1A:C0:0D:02:18:78:39:26:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/189885ce-0da2-38e1-bf77-d3b5ec0c18bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:a3:b7:30:c1:60:d6:f1:02:9c:86:b3:46:6c:c4:f0:ae:fe: 34:5e:01:fa:42:c3:52:26:df:1d:65:33:36:69:79:49:c6:c6: 89:ce:1b:cb:0e:20:9d:7c:a6:6e:84:05:33:56:f1:e8:d3:a8: 2c:3f:3f:12:8e:ab:0f:1d:8b:38:3f:3d:4d:a3:8a:cf:3d:c5: bf:b7:c9:18:b0:ed:7e:7e:81:81:4e:07:1b:89:ea:b3:69:22: bf:d7:5f:fa:a2:f6:13:10:b7:5d:f1:f7:66:4e:a2:37:4f:bd: 6f:f1:1f:0a:35:75:37:8e:21:ad:82:30:6e:91:69:b0:35:9a: 1b:a2:1d:ec:95:34:10:f8:f7:fa:43:3a:94:2f:56:c3:93:fb: 0e:b5:fb:c4:65:8f:51:a4:6e:9f:e7:c6:ce:96:64:92:55:eb: ed:6c:6c:11:9f:79:33:5d:ac:ad:87:74:3b:7c:c3:5f:2d:a7: 89:81:9f:65:14:00:46:59:8b:6f:6f:57:b4:a1:25:00:84:8a: 47:1f:76:17:b9:f8:34:0e:b8:c2:b6:4d:46:e2:ef:78:10:8d: 15:55:c7:35:58:10:c1:de:ea:a1:e9:40:35:d6:d6:d5:c4:95: 84:2e:ee:c0:1a:9d:45:71:cd:7a:98:9f:db:92:3d:6c:95:a6: 47:b2:16:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54Xgb3j8pcI0ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTY4OGNjYTMtZTlkNi00MzFlLWE5YjUtZGFlYTllMjAyZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO/+bjZ0a6Bx2MTponpopu2MTRx1GMoKNizP eIXoeelEfDTzbWwC6n7meTS+1nwXiuxT1lEF4bykMIxYS05jssZYeiCHaz73z83v TCaxQcLe95Q8vG9F3pLTPN6Lohtq6wC9MKCEeODso0AEf0xHBuGlXrecGEhxooTR 5PbAByjSsKny7zEVrwZ9Ft0/arU9a7L6nYpLbV5W4z1m97CLTEu4QqI1CFnhA6NM P6O5r/7KlF4O08xS68PiKwV3xQHaUjMkfCI6oxmlu/t0tDfM+M4KaTV2rT1gME1i BK7xlQaSfFhZlr0oXWzyvg0Elc2W4p+qKDdbV1nkb0KUfsj0DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU/iVlhCMKLC9GGGsANAhh4OSbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMTg5ODg1Y2UtMGRhMi0z OGUxLWJmNzctZDNiNWVjMGMxOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSjtzDBYNbxApyGs0ZsxPCu/jReAfpCw1Im3x1lMzZpeUnGxonOG8sO IJ18pm6EBTNW8ejTqCw/PxKOqw8dizg/PU2jis89xb+3yRiw7X5+gYFOBxuJ6rNp Ir/XX/qi9hMQt13x92ZOojdPvW/xHwo1dTeOIa2CMG6RabA1mhuiHeyVNBD49/pD OpQvVsOT+w61+8Rlj1Gkbp/nxs6WZJJV6+1sbBGfeTNdrK2HdDt8w18tp4mBn2UU AEZZi29vV7ShJQCEikcfdhe5+DQOuMK2TUbi73gQjRVVxzVYEMHe6qHpQDXW1tXE lYQu7sAanUVxzXqYn9uSPWyVpkeyFvM= -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:17 2025 by rpki-client