$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59412b15-50dc-36f1-8e63-7656aba8e042.roa File: 59412b15-50dc-36f1-8e63-7656aba8e042.roa (raw, json) Hash identifier: p3IOaoU5zTirlIUlrABzzrO34LSqjbaOlGr65Tphe4o= Subject key identifier: AB:D1:F7:01:93:EF:FC:78:EE:27:3A:92:9C:F0:6C:28:4E:18:75:57 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AD7D1236807697AD5034D9380 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59412b15-50dc-36f1-8e63-7656aba8e042.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 30238 IP address blocks: 23.90.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:23:68:07:69:7a:d5:03:4d:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=40f3fcf7-32ec-4462-86a4-fbddfabb5c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:ac:34:8f:73:97:a3:b5:50:eb:85:9a:af: 67:b5:59:af:95:f1:f9:4d:6e:a8:18:79:07:53:85: 52:1b:eb:f6:b6:cc:20:2a:8b:ae:b7:e5:99:5f:91: b9:06:af:ca:d1:09:a7:e9:8d:0e:89:e5:d8:19:79: 65:a9:e6:d3:77:84:c8:f8:ce:90:53:b1:22:21:f6: 91:76:25:82:03:d1:53:73:a8:3f:5a:7d:5f:3f:04: af:b1:5b:74:34:b7:2a:96:f3:84:60:e0:a3:8d:6e: 59:b4:84:11:98:71:a2:97:b0:6e:20:a9:8e:99:be: ad:7e:9e:46:0b:5e:6c:d1:a8:e6:99:e1:01:73:8d: 5f:17:66:d1:d4:1f:73:4a:5e:0c:7c:e5:22:7c:c9: 5c:ac:37:6b:e0:97:61:1e:7b:82:36:1c:98:82:09: 89:a4:ce:ff:cb:27:3d:46:53:31:92:a2:71:8c:d9: 23:10:18:d6:a3:cc:de:d0:83:ec:58:a7:39:20:ab: 49:7b:8a:13:42:db:f5:9c:6a:dc:26:de:07:71:61: 53:f0:89:3a:78:52:28:78:22:5c:ad:66:90:6e:26: 0d:64:45:69:04:c2:11:06:28:40:2d:1d:3e:36:85: 94:ea:91:e3:ec:a4:fb:ee:c5:91:e9:a5:91:35:34: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D1:F7:01:93:EF:FC:78:EE:27:3A:92:9C:F0:6C:28:4E:18:75:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59412b15-50dc-36f1-8e63-7656aba8e042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3e:9d:95:1a:27:ae:c7:36:c9:bc:52:da:29:db:81:15:95: a2:35:ab:61:15:88:4b:44:0c:05:0c:a1:7f:b3:43:cc:fd:cc: 1b:f1:53:b0:b3:ef:b4:cb:48:65:f1:a8:ce:59:21:d3:ff:47: c2:37:b0:fd:27:44:31:8a:23:4d:56:17:ec:1b:36:f2:f9:19: 29:b5:ae:ed:3f:54:55:d4:39:7c:56:37:53:e1:c1:9d:6d:0d: e9:d7:bb:e2:7f:bc:8f:d6:0b:22:f2:6d:e5:19:7a:ed:03:ba: 38:48:a3:e3:b3:47:6c:27:f5:16:31:11:e1:47:22:2a:57:7e: 3d:62:f3:9a:f7:da:19:f6:e4:85:d1:b0:05:73:f4:58:e3:08: 1f:db:a9:9a:65:43:2a:84:3e:c6:88:1d:7b:d5:41:8a:92:d9: 35:a3:1c:4e:d4:82:fd:30:5f:91:e1:ce:1d:a6:54:36:1f:77: 01:d2:7d:61:ca:51:8a:c9:7b:f2:aa:5e:d3:31:c5:ca:52:7e: e7:18:90:19:33:18:9c:37:2d:37:c5:96:75:9a:01:96:16:50: 84:90:7e:7b:2e:87:d4:4d:f6:ec:f8:04:6a:2b:00:95:c8:2c: 37:29:7c:7f:4d:58:ce:8a:66:9f:ec:fa:71:d9:d3:29:6e:0e: 89:d5:09:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SNoB2l61QNNk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NDBmM2ZjZjctMzJlYy00NDYyLTg2YTQtZmJkZGZhYmI1YzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS+sNI9zl6O1UOuFmq9ntVmvlfH5TW6oGHkH U4VSG+v2tswgKouut+WZX5G5Bq/K0Qmn6Y0OieXYGXllqebTd4TI+M6QU7EiIfaR diWCA9FTc6g/Wn1fPwSvsVt0NLcqlvOEYOCjjW5ZtIQRmHGil7BuIKmOmb6tfp5G C15s0ajmmeEBc41fF2bR1B9zSl4MfOUifMlcrDdr4JdhHnuCNhyYggmJpM7/yyc9 RlMxkqJxjNkjEBjWo8ze0IPsWKc5IKtJe4oTQtv1nGrcJt4HcWFT8Ik6eFIoeCJc rWaQbiYNZEVpBMIRBihALR0+NoWU6pHj7KT77sWR6aWRNTQu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvR9wGT7/x47ic6kpzwbChOGHVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTk0MTJiMTUtNTBkYy0z NmYxLThlNjMtNzY1NmFiYThlMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1puMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo+nZUaJ67HNsm8Utop24EVlaI1q2EViEtEDAUMoX+zQ8z9zBvxU7Cz 77TLSGXxqM5ZIdP/R8I3sP0nRDGKI01WF+wbNvL5GSm1ru0/VFXUOXxWN1PhwZ1t DenXu+J/vI/WCyLybeUZeu0DujhIo+OzR2wn9RYxEeFHIipXfj1i85r32hn25IXR sAVz9FjjCB/bqZplQyqEPsaIHXvVQYqS2TWjHE7Ugv0wX5Hhzh2mVDYfdwHSfWHK UYrJe/KqXtMxxcpSfucYkBkzGJw3LTfFlnWaAZYWUISQfnsuh9RN9uz4BGorAJXI LDcpfH9NWM6KZp/s+nHZ0yluDonVCXI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:14 2025 by rpki-client