$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa File: 68b55580-32ed-3f8d-a758-b42d0f07b627.roa (raw, json) Hash identifier: h/Myj5R3naihel1Rg8uMKeoYzh5ashz0JM9w0x+u1G4= Subject key identifier: CB:C5:CE:17:84:7D:67:DD:F7:45:0C:54:16:BA:0D:0B:E9:20:50:8C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1EF48D2C7D0644D56C20 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 23.90.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1e:f4:8d:2c:7d:06:44:d5:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=17b942f5-bbaf-41a1-a927-2cec4263d800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:e0:b3:e7:00:3a:59:5e:0d:e6:a2:5b:c7: 0c:21:c0:7e:02:86:be:72:92:ab:8d:41:f7:18:6f: 88:66:0c:1f:f5:f3:0a:ce:aa:f7:08:15:7f:53:95: 97:e5:70:52:0f:71:6c:43:b7:bf:d1:94:7b:72:e6: da:3c:10:ae:34:62:fb:16:b1:4a:b1:c3:1a:87:1a: 50:79:39:f5:38:59:0a:0b:fb:7f:19:13:d9:3c:50: 47:f4:6f:44:5d:6f:f4:05:3c:7e:03:bc:df:40:57: 83:c4:17:c7:19:ab:2e:06:84:df:50:1e:b3:8b:a7: d3:a2:b2:08:60:05:5e:89:2d:5e:74:1f:83:86:e8: b5:b3:08:21:1c:18:72:bf:80:df:87:c7:51:da:7a: 2f:55:c4:ad:4a:6e:ce:23:62:af:ec:f4:db:17:7a: 91:64:87:a1:96:d3:63:b6:11:b3:21:b4:26:6d:27: 23:ce:c6:2b:2e:34:9d:c6:92:42:49:6c:9e:a1:fd: 60:7e:32:42:5d:a9:3d:99:70:6f:6c:94:01:3b:99: af:8f:5b:d0:e7:b2:4f:7c:5f:ad:9c:20:c1:b9:c6: df:d9:1a:49:6f:e9:14:e0:20:a2:a7:7e:b1:b5:5c: 02:27:42:f7:e9:54:7d:9b:ac:cc:1d:dd:eb:47:54: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C5:CE:17:84:7D:67:DD:F7:45:0C:54:16:BA:0D:0B:E9:20:50:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/68b55580-32ed-3f8d-a758-b42d0f07b627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f4:b3:7f:25:35:f2:15:14:8e:4e:ec:13:ab:98:39:e8:21: 11:e2:16:35:99:ed:2e:1f:64:87:fb:15:4e:40:9a:0e:9d:6c: f9:bd:02:b8:81:0e:65:3c:4b:b4:ae:02:63:e5:48:03:dd:ec: bd:7c:37:c0:da:72:57:c8:90:31:a0:92:4d:65:f9:45:69:5e: 0b:b0:1a:dc:6f:81:18:cf:52:4b:92:a8:9d:1f:c5:31:bd:01: 0f:c8:4f:5a:1d:9d:f1:e6:04:95:18:86:08:89:d0:f9:61:b4: 98:9c:82:d5:06:46:14:46:97:82:c6:6d:37:a1:1e:27:44:00: 8c:69:37:a1:54:f6:35:89:e0:ce:08:ce:4c:76:6f:3a:c6:72: fd:b1:3d:f3:44:22:10:e2:dc:f5:98:92:63:7c:07:d1:c6:15: b6:5d:9f:2c:b2:54:64:f8:cd:75:27:e5:30:43:7c:2f:c4:a4: c5:7a:02:f3:ac:7a:e8:10:fd:f0:59:49:40:a2:d0:b2:d0:38: a5:4e:97:b9:e8:71:43:c2:c3:e8:a5:8f:75:1d:e7:78:83:f4: cd:00:4e:31:89:da:12:67:fe:58:4f:e5:91:82:ba:9e:1b:1a: 0c:d8:9c:87:b1:a4:a1:b4:19:f2:5b:3d:79:c7:61:12:17:48: 3f:c2:ec:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx70jSx9BkTVbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MTdiOTQyZjUtYmJhZi00MWExLWE5MjctMmNlYzQyNjNkODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsngs+cAOlleDeaiW8cMIcB+Aoa+cpKrjUH3 GG+IZgwf9fMKzqr3CBV/U5WX5XBSD3FsQ7e/0ZR7cubaPBCuNGL7FrFKscMahxpQ eTn1OFkKC/t/GRPZPFBH9G9EXW/0BTx+A7zfQFeDxBfHGasuBoTfUB6zi6fTorII YAVeiS1edB+Dhui1swghHBhyv4Dfh8dR2novVcStSm7OI2Kv7PTbF3qRZIehltNj thGzIbQmbScjzsYrLjSdxpJCSWyeof1gfjJCXak9mXBvbJQBO5mvj1vQ57JPfF+t nCDBucbf2RpJb+kU4CCip36xtVwCJ0L36VR9m6zMHd3rR1Tw2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvFzheEfWfd90UMVBa6DQvpIFCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNjhiNTU1ODAtMzJlZC0z ZjhkLWE3NTgtYjQyZDBmMDdiNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn0s38lNfIVFI5O7BOrmDnoIRHiFjWZ7S4fZIf7FU5Amg6dbPm9AriB DmU8S7SuAmPlSAPd7L18N8DaclfIkDGgkk1l+UVpXguwGtxvgRjPUkuSqJ0fxTG9 AQ/IT1odnfHmBJUYhgiJ0PlhtJicgtUGRhRGl4LGbTehHidEAIxpN6FU9jWJ4M4I zkx2bzrGcv2xPfNEIhDi3PWYkmN8B9HGFbZdnyyyVGT4zXUn5TBDfC/EpMV6AvOs eugQ/fBZSUCi0LLQOKVOl7nocUPCw+ilj3Ud53iD9M0ATjGJ2hJn/lhP5ZGCup4b GgzYnIexpKG0GfJbPXnHYRIXSD/C7LM= -----END CERTIFICATE-----Generated at Mon Jun 30 10:25:47 2025 by rpki-client