$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5f155141-cd7e-3263-8ddb-2f10c458e45f.roa File: 5f155141-cd7e-3263-8ddb-2f10c458e45f.roa (raw, json) Hash identifier: oGhpfhmLoQ1zgPmHx8C4nfvAsIdH2jNX/Xexjf8K89I= Subject key identifier: 93:E5:D8:5F:7C:FA:40:83:38:DE:FC:64:A8:D1:08:2A:D3:64:07:F8 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285849C4D4CA723C1E8F4258B36E80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5f155141-cd7e-3263-8ddb-2f10c458e45f.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16417 IP address blocks: 23.90.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:ca:72:3c:1e:8f:42:58:b3:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=e3929626-68e8-45f9-bb9d-dbe297bb1cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:24:a5:1a:0a:d5:b1:c5:69:2d:76:af:63: 05:e5:5f:aa:22:b3:57:30:da:07:c8:5f:83:e9:76: 05:8e:e4:3c:e9:09:be:41:9b:ad:ba:0a:39:6b:ac: 22:fb:92:13:99:f1:c8:8b:91:7a:09:13:68:51:af: 9a:02:ce:d0:b9:b6:e1:66:07:1d:59:87:59:1e:b0: 2b:ac:fa:a3:65:29:d0:7a:4d:dc:06:2e:25:f5:38: 57:fc:d0:c4:51:8d:c5:82:ca:ef:f7:4b:6b:76:bf: b7:d9:95:0b:8c:da:fe:2a:a9:ce:96:a8:c6:6e:6c: 31:85:e8:70:67:6e:79:91:55:c7:0f:3d:11:97:cf: ca:a8:25:6a:56:31:42:24:a5:0d:06:d6:6a:14:90: 2c:57:3d:7e:de:07:f5:79:0b:ad:be:41:90:e8:b9: ac:cb:3d:a5:be:7b:3c:ca:40:72:e8:ec:40:65:4f: d8:d0:e1:2c:fd:91:e5:36:df:0a:8c:80:7b:b0:73: fd:0b:ef:81:a6:3c:07:76:72:e6:b9:75:51:81:b0: af:de:b4:da:66:e0:64:de:46:29:7d:5c:d7:6f:07: 9e:f0:f5:b8:62:b4:e6:cb:d4:cd:86:6d:66:86:5c: 95:5f:27:b2:1d:2c:0e:99:3f:07:e3:74:a9:20:c4: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E5:D8:5F:7C:FA:40:83:38:DE:FC:64:A8:D1:08:2A:D3:64:07:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/5f155141-cd7e-3263-8ddb-2f10c458e45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:83:f8:79:8a:aa:d0:05:5f:68:14:78:65:33:1f:b9:d6:a9: bb:86:8a:90:51:06:fb:bd:51:40:ec:5a:c3:93:a9:7a:66:bb: 38:aa:8d:b7:d3:ec:2c:ac:e3:bb:22:f2:14:fe:b0:c3:9d:fc: 81:59:e9:aa:8e:bc:b5:60:70:cb:29:63:67:4e:21:b0:90:55: 46:cd:f9:1a:b1:49:fb:7b:91:e8:b5:38:c1:a8:5a:ff:e8:49: cf:1c:37:31:48:dd:7f:62:e3:0a:d4:15:fa:74:2e:60:99:e7: 49:8b:c9:c1:97:7f:ef:be:4d:90:d5:25:5d:d4:4d:c1:32:64: 17:33:9e:3e:7c:15:da:89:c2:51:f3:f9:2e:f7:2b:3f:28:4e: 1b:1a:05:28:d2:95:4f:93:00:7e:12:78:54:4d:7b:bb:79:1c: 39:ef:23:96:d4:86:a0:05:18:a2:38:13:76:ce:fb:73:fb:44: 32:c2:36:6b:ce:80:a6:68:47:08:91:a6:26:f1:4d:61:08:5f: 31:71:e9:7e:4d:98:4a:c6:03:d4:1e:ee:b8:30:97:62:4e:5d: 93:3a:af:22:91:35:fc:19:13:d0:6e:ed:ac:e8:8b:75:26:44: ee:0a:7a:81:fa:b1:d3:6b:7d:98:99:34:a1:3d:85:ef:65:39: 19:ed:8a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MpyPB6PQlizboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZTM5Mjk2MjYtNjhlOC00NWY5LWJiOWQtZGJlMjk3YmIxY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv50kpRoK1bHFaS12r2MF5V+qIrNXMNoHyF+D 6XYFjuQ86Qm+QZutugo5a6wi+5ITmfHIi5F6CRNoUa+aAs7QubbhZgcdWYdZHrAr rPqjZSnQek3cBi4l9ThX/NDEUY3Fgsrv90trdr+32ZULjNr+KqnOlqjGbmwxhehw Z255kVXHDz0Rl8/KqCVqVjFCJKUNBtZqFJAsVz1+3gf1eQutvkGQ6Lmsyz2lvns8 ykBy6OxAZU/Y0OEs/ZHlNt8KjIB7sHP9C++BpjwHdnLmuXVRgbCv3rTaZuBk3kYp fVzXbwee8PW4YrTmy9TNhm1mhlyVXyeyHSwOmT8H43SpIMS/9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPl2F98+kCDON78ZKjRCCrTZAf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNWYxNTUxNDEtY2Q3ZS0z MjYzLThkZGItMmYxMGM0NThlNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWD+HmKqtAFX2gUeGUzH7nWqbuGipBRBvu9UUDsWsOTqXpmuziqjbfT 7Cys47si8hT+sMOd/IFZ6aqOvLVgcMspY2dOIbCQVUbN+RqxSft7kei1OMGoWv/o Sc8cNzFI3X9i4wrUFfp0LmCZ50mLycGXf+++TZDVJV3UTcEyZBcznj58FdqJwlHz +S73Kz8oThsaBSjSlU+TAH4SeFRNe7t5HDnvI5bUhqAFGKI4E3bO+3P7RDLCNmvO gKZoRwiRpibxTWEIXzFx6X5NmErGA9Qe7rgwl2JOXZM6ryKRNfwZE9Bu7azoi3Um RO4KeoH6sdNrfZiZNKE9he9lORntijA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:31:27 2025 by rpki-client