$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7574274b-bc8c-3868-a2ed-524bb34a4250.roa File: 7574274b-bc8c-3868-a2ed-524bb34a4250.roa (raw, json) Hash identifier: 20z4tj7Z4Am9MhD518N4xLqbp3OPe5RL81THcs0C67s= Subject key identifier: B2:34:F9:6A:81:D9:E0:A5:B7:43:AA:3B:53:E2:4D:B6:A9:4C:FB:38 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F31B7C2F0DF3351EB4917E580 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7574274b-bc8c-3868-a2ed-524bb34a4250.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 30215 IP address blocks: 23.90.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c2:f0:df:33:51:eb:49:17:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=d849296a-04d8-4e45-8750-5d8d502ab92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:8c:e6:2b:0a:15:89:69:13:9b:e3:af:f9: c1:34:fa:f7:75:0f:bf:a1:46:be:f1:85:08:ec:52: 4e:58:7a:72:83:c6:5c:17:58:dd:77:88:65:52:05: 62:9f:7c:08:4c:dc:e0:95:80:0d:60:31:98:60:d3: 37:06:fe:dd:9e:7f:0f:ff:65:9e:01:f7:65:a9:6b: b6:50:36:9b:e2:b6:f5:a7:ca:87:a2:6d:14:7b:40: 2e:9a:21:af:b0:06:9a:ac:c0:fd:e3:b7:00:a6:40: 7a:ce:7c:fb:fb:3c:e9:d7:fc:50:d8:9e:c0:bc:d6: 6f:a1:ad:d5:82:47:66:25:f9:54:20:12:2b:44:fc: 12:06:f7:df:6d:df:79:0e:43:75:9c:ab:47:d2:d4: 38:40:31:7d:0e:54:3e:12:be:b9:5f:60:8c:a7:52: a9:7f:75:a6:b8:63:28:97:60:f2:fc:59:9d:69:f9: 4b:79:85:42:c7:6e:f4:50:6f:e3:a4:bb:6f:a4:b9: 67:83:87:d5:07:2a:72:e0:01:da:73:ab:4c:11:17: 88:2e:05:98:b1:6c:9b:79:90:19:80:82:c8:7d:6c: cc:22:7e:b3:20:b7:f1:92:44:29:1e:90:72:47:de: 29:01:95:e0:47:5d:ca:c6:62:a6:5b:79:cd:fd:f4: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:F9:6A:81:D9:E0:A5:B7:43:AA:3B:53:E2:4D:B6:A9:4C:FB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7574274b-bc8c-3868-a2ed-524bb34a4250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ea:45:a4:43:a3:ed:9f:00:7d:84:65:24:82:12:77:62:73: 3e:4e:eb:83:e0:3b:04:a2:6b:6c:c0:cf:b2:13:1a:67:ba:91: bd:68:62:2e:2d:e6:a9:02:04:ab:28:0c:67:ae:c6:ad:f0:61: 63:c5:f0:ab:e9:aa:86:be:9f:1f:a7:95:bb:1f:3e:d2:20:ba: 58:44:85:03:02:f4:f3:6a:7d:97:43:ef:f3:77:48:dc:d4:b7: d2:e4:c2:65:dd:bf:ac:84:46:ba:5d:cd:16:24:67:9c:b8:3c: b4:b9:da:93:f3:e7:91:a8:a2:45:34:2b:87:c5:aa:35:28:cd: 2c:69:6b:7f:b5:40:23:05:be:bf:2c:b1:66:cb:9c:cc:07:30: c7:ed:a0:86:9f:4d:05:bf:09:ff:a7:9d:d8:6c:99:1f:6a:f7: 6a:5d:f3:2c:fb:fb:9f:8c:f9:ad:61:c8:97:d7:5c:a2:f5:69: d6:36:5d:d9:c1:f1:f5:16:6f:6a:4f:58:fd:8d:a1:d3:4b:ae: 80:c1:b5:9a:19:c8:d8:1d:fb:18:a1:42:b9:04:e7:3d:12:6b: fc:6e:87:8e:5b:75:18:db:4c:bd:65:70:85:14:e2:c8:4b:d5: 0f:5b:2a:87:82:82:42:88:41:73:1a:a6:8f:66:b3:7d:81:aa: a4:02:0a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8Lw3zNR60kX5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDg0OTI5NmEtMDRkOC00ZTQ1LTg3NTAtNWQ4ZDUwMmFiOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgCM5isKFYlpE5vjr/nBNPr3dQ+/oUa+8YUI 7FJOWHpyg8ZcF1jdd4hlUgVin3wITNzglYANYDGYYNM3Bv7dnn8P/2WeAfdlqWu2 UDab4rb1p8qHom0Ue0AumiGvsAaarMD947cApkB6znz7+zzp1/xQ2J7AvNZvoa3V gkdmJflUIBIrRPwSBvffbd95DkN1nKtH0tQ4QDF9DlQ+Er65X2CMp1Kpf3WmuGMo l2Dy/FmdaflLeYVCx270UG/jpLtvpLlng4fVBypy4AHac6tMEReILgWYsWybeZAZ gILIfWzMIn6zILfxkkQpHpByR94pAZXgR13KxmKmW3nN/fTzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI0+WqB2eClt0OqO1PiTbapTPs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNzU3NDI3NGItYmM4Yy0z ODY4LWEyZWQtNTI0YmIzNGE0MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1ptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLqRaRDo+2fAH2EZSSCEndicz5O64PgOwSia2zAz7ITGme6kb1oYi4t 5qkCBKsoDGeuxq3wYWPF8Kvpqoa+nx+nlbsfPtIgulhEhQMC9PNqfZdD7/N3SNzU t9LkwmXdv6yERrpdzRYkZ5y4PLS52pPz55GookU0K4fFqjUozSxpa3+1QCMFvr8s sWbLnMwHMMftoIafTQW/Cf+nndhsmR9q92pd8yz7+5+M+a1hyJfXXKL1adY2XdnB 8fUWb2pPWP2NodNLroDBtZoZyNgd+xihQrkE5z0Sa/xuh45bdRjbTL1lcIUU4shL 1Q9bKoeCgkKIQXMapo9ms32BqqQCCqc= -----END CERTIFICATE-----Generated at Sat Oct 3 13:00:25 2026 by rpki-client