$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa File: 1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa (raw, json) Hash identifier: /aaNBm6d8QhJ9l9UByArqx4nnpIpXlbXmxYHxCB5p/I= Subject key identifier: 96:CA:77:7C:DD:4D:1F:6A:C2:31:D9:A1:17:07:6A:14:13:A6:F1:CC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A2D858CFCBBCB2C93FEF8DC40 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 30215 IP address blocks: 23.90.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:8c:fc:bb:cb:2c:93:fe:f8:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=cd0fbb94-a9f4-415b-835b-4c509f0ef368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:c3:16:4b:65:f5:18:e6:bc:97:b2:45:46: 39:23:48:03:b0:ad:b0:16:f2:32:91:ed:ed:0c:33: 35:60:c5:9a:e5:ee:36:9f:74:fd:6c:91:87:53:50: ac:e9:16:87:c7:a5:c4:7b:4d:3e:8d:7a:48:ec:97: 5e:a0:35:e2:60:4c:96:87:94:ed:37:16:02:61:d2: 95:bb:4f:b6:27:0c:bd:1b:0e:61:a8:ba:8f:88:17: 09:4f:8a:b8:cf:cb:b4:67:0d:23:ad:13:20:b2:d9: 73:61:2c:d4:b3:23:3c:a6:7b:6b:3d:c2:d2:49:66: 42:68:59:6e:ac:50:80:34:d0:35:da:d4:0d:92:64: 90:6c:de:9b:27:3c:26:6e:95:d5:ae:a9:4a:4c:60: be:98:a4:2f:5c:be:9d:03:93:e7:21:93:08:98:fd: f2:cc:27:cb:ef:f2:0d:17:92:9d:1b:d4:f6:52:ae: 7d:ce:8a:1b:ad:11:68:66:b1:f3:b0:03:bc:d7:d7: a6:6e:89:c5:9b:9a:49:d2:38:de:f6:bf:cf:55:9c: 3e:2d:21:44:3d:95:1e:6f:c0:1f:d4:1f:97:06:23: 51:d5:08:7e:33:00:2e:0e:72:2b:9b:ea:13:85:05: 86:05:f9:21:35:b4:6c:6b:18:b6:55:2c:9d:b9:d5: 4b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:77:7C:DD:4D:1F:6A:C2:31:D9:A1:17:07:6A:14:13:A6:F1:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:20:d2:85:89:ce:e7:12:0f:d9:83:ca:23:92:b5:41:84:ab: dc:be:5a:d5:a5:ca:af:24:b4:3b:00:c2:26:95:d1:3e:0a:71: cc:0e:94:01:e6:a1:9e:44:12:b3:3b:25:d6:02:20:56:c4:a7: 53:4a:de:a2:06:8a:47:a8:f2:f5:3a:55:db:7f:41:98:8d:7d: 43:f2:f1:60:ec:37:82:c4:37:10:4a:ae:c2:ec:6f:a1:1e:dc: 3c:3a:0f:c7:45:58:28:bc:16:0a:29:81:a6:fe:01:13:94:be: 38:4d:81:fa:55:40:a4:e8:2e:b1:e1:3d:b4:00:c4:f4:ab:10: c1:ba:b8:d9:37:4b:f3:ff:cc:e4:44:f5:d4:f5:b4:5d:00:cb: 0e:e6:a8:1d:4b:b6:f5:61:35:60:cc:e4:e2:40:36:16:17:56: 05:2c:83:b3:09:27:55:c3:20:c9:68:81:14:42:e8:31:94:54: 8d:46:f9:e5:82:5b:aa:ab:05:0a:32:c9:28:49:f8:65:4a:1d: 64:a1:80:65:b1:e7:7d:25:d9:da:93:a7:5d:83:c1:19:db:bc: ad:b9:e1:40:6f:33:0b:00:1e:b6:10:26:eb:ee:ca:2c:82:90: 89:88:01:b5:82:8f:12:55:4c:be:3c:09:e8:8e:2c:90:65:20: a8:d1:2d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYz8u8ssk/743EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk Y2QwZmJiOTQtYTlmNC00MTViLTgzNWItNGM1MDlmMGVmMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOjDFktl9RjmvJeyRUY5I0gDsK2wFvIyke3t DDM1YMWa5e42n3T9bJGHU1Cs6RaHx6XEe00+jXpI7JdeoDXiYEyWh5TtNxYCYdKV u0+2Jwy9Gw5hqLqPiBcJT4q4z8u0Zw0jrRMgstlzYSzUsyM8pntrPcLSSWZCaFlu rFCANNA12tQNkmSQbN6bJzwmbpXVrqlKTGC+mKQvXL6dA5PnIZMImP3yzCfL7/IN F5KdG9T2Uq59zoobrRFoZrHzsAO819embonFm5pJ0jje9r/PVZw+LSFEPZUeb8Af 1B+XBiNR1Qh+MwAuDnIrm+oThQWGBfkhNbRsaxi2VSydudVLDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbKd3zdTR9qwjHZoRcHahQTpvHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMWMzMzE2MDAtZmEwZC0z MGE0LWI4MWEtMmZkYjM3ZmYxOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIg0oWJzucSD9mDyiOStUGEq9y+WtWlyq8ktDsAwiaV0T4KccwOlAHm oZ5EErM7JdYCIFbEp1NK3qIGikeo8vU6Vdt/QZiNfUPy8WDsN4LENxBKrsLsb6Ee 3Dw6D8dFWCi8Fgopgab+AROUvjhNgfpVQKToLrHhPbQAxPSrEMG6uNk3S/P/zORE 9dT1tF0Ayw7mqB1LtvVhNWDM5OJANhYXVgUsg7MJJ1XDIMlogRRC6DGUVI1G+eWC W6qrBQoyyShJ+GVKHWShgGWx530l2dqTp12DwRnbvK254UBvMwsAHrYQJuvuyiyC kImIAbWCjxJVTL48CeiOLJBlIKjRLfI= -----END CERTIFICATE-----Generated at Mon Jun 30 04:50:05 2025 by rpki-client