$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa File: 59d408be-4188-3cb9-8162-6224102660ec.roa (raw, json) Hash identifier: PnQClHYVN2Ya2DPWx5c8njsttXvv+KrcqhKJJx0C95o= Subject key identifier: B6:D6:84:54:AC:D5:6F:A6:88:52:C2:8D:50:5F:A5:8C:82:FE:C1:17 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A3E45AB6C189C17BBD053F710 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 16417 IP address blocks: 23.90.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:ab:6c:18:9c:17:bb:d0:53:f7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=acbaeb54-cca4-4a16-a65d-4664cd9b6946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:07:19:7b:fc:17:1c:42:73:9b:76:0a:fa: 7c:44:1e:f1:11:af:24:3e:0f:cb:5a:da:57:cc:fe: f1:92:29:fb:d7:20:e8:be:40:f7:86:5d:c4:b7:14: 65:a3:ce:68:af:e1:a4:a1:0c:b0:c3:6e:e8:de:6b: 47:1f:c9:1c:30:3d:61:7b:b5:31:25:0b:62:ee:4a: db:a5:21:5d:77:ef:84:f5:93:9f:2e:57:70:37:7a: b5:b6:27:15:b2:ca:7d:5e:e4:1c:4c:8c:62:d4:dd: 33:7f:65:4e:64:9b:e8:6d:52:e6:7a:71:f3:2b:12: 15:89:1f:6c:27:0f:1f:9b:a1:c6:41:ae:4a:17:84: f8:f0:69:c2:c5:06:5f:9e:08:96:03:8a:e9:e7:4a: 43:0a:31:ec:7a:c2:76:3a:45:1e:d7:1d:95:40:07: ae:68:69:fa:b9:75:e2:60:56:35:f3:d7:6e:72:42: 85:1f:e4:e2:ff:af:72:14:ad:be:f8:e5:f0:25:da: 74:cf:31:92:9b:4f:e4:3d:7b:d7:42:2a:79:08:20: 48:1e:b4:11:07:40:20:7f:82:ff:d4:14:27:6e:41: b7:b6:8c:42:87:c0:a5:80:23:5d:8b:fb:95:72:d5: 69:4b:9d:16:c5:58:c5:50:2b:48:99:96:45:cc:43: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D6:84:54:AC:D5:6F:A6:88:52:C2:8D:50:5F:A5:8C:82:FE:C1:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:10:8e:b8:1d:42:84:cc:17:d8:b8:2b:75:3d:b0:ac:9f:37: 9e:d5:fb:e3:2a:0b:b6:86:a3:85:db:60:c1:14:1e:1a:5b:e4: 9f:a3:cd:37:b1:75:f3:73:b9:f7:bd:c9:d6:63:f6:8a:4e:b4: 7b:e6:dc:b3:c2:2a:ca:a8:f6:69:00:0c:78:c7:fe:04:69:5e: 31:c7:52:ee:c7:66:92:f2:25:65:8f:fe:ab:37:39:a9:34:59: 60:1d:7a:9a:ea:3d:37:10:7f:59:ea:4e:c7:37:59:41:de:d9: db:19:d7:07:0a:4b:6c:f5:93:30:2c:df:97:16:93:1e:0f:b0: 8d:27:a5:cf:98:00:36:6f:2e:dd:87:72:45:be:bc:5a:38:32: cd:bb:0a:c3:bc:3a:93:b4:f6:1c:b7:e2:44:4f:79:b6:01:f0: 88:ed:30:f6:f3:f0:1f:33:ac:3a:91:f9:2b:6a:aa:12:3f:ab: 7a:86:0c:f5:c3:69:3d:e0:c3:a3:21:e4:1f:73:21:c0:2e:25: df:f6:c4:f4:ca:d0:1b:e9:7c:5b:cc:5f:33:1e:fd:9e:62:6f: 97:a0:37:6e:2c:0b:5e:03:3a:d9:eb:db:ba:85:e7:69:0f:f8: 1c:6a:18:f5:3f:0b:b2:20:55:74:1a:b7:ec:e5:f2:76:6a:a3: 8a:5b:e6:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RatsGJwXu9BT9xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk YWNiYWViNTQtY2NhNC00YTE2LWE2NWQtNDY2NGNkOWI2OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMQHGXv8FxxCc5t2Cvp8RB7xEa8kPg/LWtpX zP7xkin71yDovkD3hl3EtxRlo85or+GkoQyww27o3mtHH8kcMD1he7UxJQti7krb pSFdd++E9ZOfLldwN3q1ticVssp9XuQcTIxi1N0zf2VOZJvobVLmenHzKxIViR9s Jw8fm6HGQa5KF4T48GnCxQZfngiWA4rp50pDCjHsesJ2OkUe1x2VQAeuaGn6uXXi YFY189duckKFH+Ti/69yFK2++OXwJdp0zzGSm0/kPXvXQip5CCBIHrQRB0Agf4L/ 1BQnbkG3toxCh8ClgCNdi/uVctVpS50WxVjFUCtImZZFzEMNuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbWhFSs1W+miFLCjVBfpYyC/sEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTlkNDA4YmUtNDE4OC0z Y2I5LTgxNjItNjIyNDEwMjY2MGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1phMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMQjrgdQoTMF9i4K3U9sKyfN57V++MqC7aGo4XbYMEUHhpb5J+jzTex dfNzufe9ydZj9opOtHvm3LPCKsqo9mkADHjH/gRpXjHHUu7HZpLyJWWP/qs3Oak0 WWAdeprqPTcQf1nqTsc3WUHe2dsZ1wcKS2z1kzAs35cWkx4PsI0npc+YADZvLt2H ckW+vFo4Ms27CsO8OpO09hy34kRPebYB8IjtMPbz8B8zrDqR+StqqhI/q3qGDPXD aT3gw6Mh5B9zIcAuJd/2xPTK0BvpfFvMXzMe/Z5ib5egN24sC14DOtnr27qF52kP +BxqGPU/C7IgVXQat+zl8nZqo4pb5mY= -----END CERTIFICATE-----Generated at Tue Jul 1 21:47:51 2025 by rpki-client