$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa File: 1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa (raw, json) Hash identifier: 53jKq71CDEhfMJtze8rAYIQRf3HHlCAJpNNQ9L5huK0= Subject key identifier: 4F:46:DF:45:67:81:95:9E:F3:51:F4:A3:C2:FC:E3:7D:A6:36:22:54 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F31B7C2E34D22E15D7BD61780 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 30215 IP address blocks: 23.90.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c2:e3:4d:22:e1:5d:7b:d6:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=cb72dc23-5709-4f59-9c22-8ab85cdb55da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:70:71:a2:67:4b:40:68:e2:b1:72:ab:28: 0b:45:5d:58:d8:7c:dd:31:eb:85:37:cb:26:d4:31: ac:f4:18:92:34:c9:72:0e:64:1e:fd:38:27:15:73: ec:c3:ab:9d:dd:64:0b:e2:b6:3e:53:93:ec:f6:8a: 65:84:6e:94:ae:7f:30:92:d0:2a:ab:43:bf:a1:b7: 1e:ba:07:ee:68:a1:c9:aa:b5:ba:af:0a:21:6f:92: a4:62:e1:64:3f:b8:10:d7:bd:2e:d9:51:01:fd:00: 3a:8c:f3:17:17:3a:ca:d1:04:2f:e4:42:b9:9e:d0: d0:0b:f5:56:d7:1a:87:3d:c4:83:8c:86:d0:5c:74: 44:06:ee:f0:0f:1b:61:dc:37:78:57:ad:cd:59:8c: 17:dd:25:49:51:66:58:34:fb:b7:67:de:e0:18:bf: e2:1c:18:36:dc:d3:c4:fd:fd:68:57:9c:ba:a2:82: cf:96:0c:f2:5d:85:a6:2f:b8:f8:b0:41:a9:5a:a8: 86:87:be:d6:5c:80:1f:3b:83:55:92:ed:d8:d4:63: 41:57:93:aa:a9:0c:9a:54:4c:ba:b5:ea:2e:a4:d6: 4a:20:9c:ac:54:98:a4:80:61:81:b4:46:c1:67:c8: ce:37:7a:4e:26:1b:c2:53:be:22:3f:0c:d5:a4:66: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:DF:45:67:81:95:9E:F3:51:F4:A3:C2:FC:E3:7D:A6:36:22:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ab:28:f0:ac:7a:c8:32:db:ca:02:01:48:8e:8a:70:54:74: 6e:90:b0:76:82:72:f7:f6:b8:3f:df:8d:c4:b1:b6:77:70:d0: b6:d3:6d:9f:52:8e:b6:42:51:42:3f:ab:6a:d3:55:5a:fd:e2: e1:d1:55:46:4a:67:a4:e6:13:cb:34:d2:03:ff:71:61:15:87: 78:41:11:78:54:b7:e5:76:28:12:00:99:38:dc:0b:74:6c:4c: df:57:bf:ee:f6:c5:33:96:22:ff:c9:6a:23:10:fa:76:cd:1d: d8:c4:0b:40:19:4e:97:f7:7d:64:e0:73:78:17:44:3a:41:e1: ec:aa:a9:ea:75:da:f4:89:41:27:33:c3:b5:ab:d3:13:19:d3: cc:1b:2f:2e:42:48:38:48:98:3d:66:b7:38:00:e6:47:4d:21: ba:f3:a4:aa:10:04:a3:c2:d3:6f:c0:30:16:83:c8:ab:61:42: c9:f2:ed:14:b4:59:cd:e6:66:5b:21:c3:61:f0:51:d1:20:8c: fd:67:2c:93:4b:ee:78:de:5d:5f:89:59:b5:01:35:ab:10:d0: 1c:22:6e:5f:04:aa:a0:e6:a9:dc:a3:95:a2:bf:1e:2c:f5:f0: 89:2b:74:75:71:90:fc:1f:af:f7:bc:02:c6:8c:68:0c:37:45: 4e:86:c3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8LjTSLhXXvWF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk Y2I3MmRjMjMtNTcwOS00ZjU5LTljMjItOGFiODVjZGI1NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKtwcaJnS0Bo4rFyqygLRV1Y2HzdMeuFN8sm 1DGs9BiSNMlyDmQe/TgnFXPsw6ud3WQL4rY+U5Ps9oplhG6Urn8wktAqq0O/obce ugfuaKHJqrW6rwohb5KkYuFkP7gQ170u2VEB/QA6jPMXFzrK0QQv5EK5ntDQC/VW 1xqHPcSDjIbQXHREBu7wDxth3Dd4V63NWYwX3SVJUWZYNPu3Z97gGL/iHBg23NPE /f1oV5y6ooLPlgzyXYWmL7j4sEGpWqiGh77WXIAfO4NVku3Y1GNBV5OqqQyaVEy6 teoupNZKIJysVJikgGGBtEbBZ8jON3pOJhvCU74iPwzVpGajMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9G30VngZWe81H0o8L8432mNiJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMWMzMzE2MDAtZmEwZC0z MGE0LWI4MWEtMmZkYjM3ZmYxOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqrKPCsesgy28oCAUiOinBUdG6QsHaCcvf2uD/fjcSxtndw0LbTbZ9S jrZCUUI/q2rTVVr94uHRVUZKZ6TmE8s00gP/cWEVh3hBEXhUt+V2KBIAmTjcC3Rs TN9Xv+72xTOWIv/JaiMQ+nbNHdjEC0AZTpf3fWTgc3gXRDpB4eyqqep12vSJQScz w7Wr0xMZ08wbLy5CSDhImD1mtzgA5kdNIbrzpKoQBKPC02/AMBaDyKthQsny7RS0 Wc3mZlshw2HwUdEgjP1nLJNL7njeXV+JWbUBNasQ0Bwibl8EqqDmqdyjlaK/Hiz1 8IkrdHVxkPwfr/e8AsaMaAw3RU6GwxI= -----END CERTIFICATE-----Generated at Sat Sep 26 10:48:19 2026 by rpki-client