$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/72360d54-6fd8-330e-b9c2-527921074636.roa File: 72360d54-6fd8-330e-b9c2-527921074636.roa (raw, json) Hash identifier: +G1e7pTJwcdoyecLNAnLnhDyKc0qkvUbDlbCLYMQuoo= Subject key identifier: 12:87:A7:DC:5D:CE:34:BA:AA:7C:02:BC:DA:29:53:AC:C4:24:51:A3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F31B7C2D64FDBF149E9873B00 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/72360d54-6fd8-330e-b9c2-527921074636.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 30215 IP address blocks: 23.90.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c2:d6:4f:db:f1:49:e9:87:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=6d6bd1f6-432a-4e7c-abfb-88f449e0bc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:35:30:93:6b:06:12:cc:c6:da:e0:99:38: 2d:5a:b7:fb:c0:d2:c7:3e:69:df:d2:b1:c8:5e:2f: de:47:04:22:bb:0e:cb:7e:3b:ea:78:a9:ee:b6:5a: 7e:96:f3:b0:56:fa:a9:40:b2:1c:f5:d3:97:fb:5c: 8e:6b:ee:fa:b7:96:42:a1:02:59:20:95:8b:e5:9f: b4:df:4e:00:f5:7d:1d:46:6e:e5:8b:4f:42:fa:4e: 48:a0:09:00:10:87:4e:17:97:52:3c:d3:f2:c5:60: aa:30:b5:84:c9:c2:6e:84:dd:f1:48:8b:4e:81:fc: a4:2c:68:72:23:8f:9e:26:67:58:ec:a1:66:56:74: 72:53:b2:ac:20:29:b5:85:c4:fb:2d:99:23:1b:c2: 67:8f:5a:f7:fb:95:b1:b2:6e:44:a3:4e:b1:22:1e: 9a:cd:41:a6:05:83:8a:dc:7b:36:d1:ad:6c:a3:5b: a9:2a:70:43:96:21:c2:51:87:d9:2a:36:8c:06:c2: 14:8f:83:5e:be:2c:35:40:6a:a8:99:ed:09:ec:09: 95:ea:b4:1c:2b:59:13:fb:fc:dc:06:21:cb:1c:26: 02:24:d1:77:4a:35:3f:20:c7:b9:27:86:f2:1b:56: 67:8a:3d:37:7b:b2:44:59:d7:4a:f9:75:b1:d7:70: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:87:A7:DC:5D:CE:34:BA:AA:7C:02:BC:DA:29:53:AC:C4:24:51:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/72360d54-6fd8-330e-b9c2-527921074636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f8:aa:7f:c6:b6:6e:ce:2d:76:be:80:a4:6b:9e:e7:57:ec: 05:ad:ba:61:f3:e1:20:82:53:6f:39:03:3d:b9:d1:a1:6b:e1: cf:76:27:82:6f:bb:ce:71:cc:48:51:dc:62:7d:4a:5b:08:60: ea:8c:fb:1a:4e:78:9a:5b:8d:71:a3:e3:20:7e:bd:b7:b4:2b: 8b:de:08:e9:ba:8d:d0:c7:de:36:ee:02:82:ef:e9:e7:8b:47: e9:4b:4f:8d:f2:c5:99:5b:20:07:e4:0d:47:db:45:fb:0d:3e: 84:98:ce:a4:11:a4:57:a8:16:11:99:81:9b:43:27:ec:c7:c5: 88:a6:de:ee:1f:b7:29:ec:d0:6f:c1:01:a9:da:c9:da:a6:f8: 7e:8b:fb:f0:47:7e:fe:0c:87:81:4c:24:5f:91:73:3e:09:24: 06:c9:cc:36:ec:40:f0:79:8c:64:44:39:8b:d0:03:2f:c1:2c: 00:b0:2a:7f:4d:70:6a:06:aa:83:ac:d3:b4:46:d6:c8:b3:9e: 27:97:3e:1e:78:9d:43:25:44:40:99:c8:17:f3:9e:c8:33:bb: c5:14:89:f7:1a:43:6c:61:ea:48:99:b3:0f:4d:92:d8:3d:f5: bf:c2:84:34:09:49:a4:d1:fc:65:47:5a:9d:4d:29:92:87:cc: 69:b6:97:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8LWT9vxSemHOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NmQ2YmQxZjYtNDMyYS00ZTdjLWFiZmItODhmNDQ5ZTBiYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJw1MJNrBhLMxtrgmTgtWrf7wNLHPmnf0rHI Xi/eRwQiuw7LfjvqeKnutlp+lvOwVvqpQLIc9dOX+1yOa+76t5ZCoQJZIJWL5Z+0 304A9X0dRm7li09C+k5IoAkAEIdOF5dSPNPyxWCqMLWEycJuhN3xSItOgfykLGhy I4+eJmdY7KFmVnRyU7KsICm1hcT7LZkjG8Jnj1r3+5Wxsm5Eo06xIh6azUGmBYOK 3Hs20a1so1upKnBDliHCUYfZKjaMBsIUj4Neviw1QGqome0J7AmV6rQcK1kT+/zc BiHLHCYCJNF3SjU/IMe5J4byG1Znij03e7JEWddK+XWx13BTXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKHp9xdzjS6qnwCvNopU6zEJFGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNzIzNjBkNTQtNmZkOC0z MzBlLWI5YzItNTI3OTIxMDc0NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1prMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr4qn/Gtm7OLXa+gKRrnudX7AWtumHz4SCCU285Az250aFr4c92J4Jv u85xzEhR3GJ9SlsIYOqM+xpOeJpbjXGj4yB+vbe0K4veCOm6jdDH3jbuAoLv6eeL R+lLT43yxZlbIAfkDUfbRfsNPoSYzqQRpFeoFhGZgZtDJ+zHxYim3u4ftyns0G/B Aanaydqm+H6L+/BHfv4Mh4FMJF+Rcz4JJAbJzDbsQPB5jGREOYvQAy/BLACwKn9N cGoGqoOs07RG1siznieXPh54nUMlRECZyBfznsgzu8UUifcaQ2xh6kiZsw9Nktg9 9b/ChDQJSaTR/GVHWp1NKZKHzGm2l/Q= -----END CERTIFICATE-----Generated at Sun Oct 4 17:52:07 2026 by rpki-client