$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa File: a455dd01-9d1c-3f67-be86-99d30a672de5.roa (raw, json) Hash identifier: ocqqVgLvh8TUgrTPldqEuzvjgXOoRj2EJItMF8zWmeE= Subject key identifier: 73:58:BF:35:46:97:03:3F:7F:60:DA:E3:F0:6B:9A:2A:04:56:A2:16 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584A549B1F0A3A85231552269B58 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 16417 IP address blocks: 23.90.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:1f:0a:3a:85:23:15:52:26:9b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=a6ad3da1-cfbe-4263-9e4d-93393861a700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:02:ed:b3:7f:aa:a7:e9:5a:6a:51:b3:8b: 1b:b5:d5:75:e1:34:7f:55:5e:40:40:91:97:10:73: 4c:12:30:20:61:9f:d6:8f:3b:ab:ac:8c:3b:73:f7: 07:91:a9:9a:ac:83:16:bb:17:95:a3:06:ff:fc:36: 76:4d:e5:1a:ba:f5:35:26:59:07:e5:5b:5b:78:9e: f5:c5:52:8b:b7:9a:9b:be:71:80:f5:84:a3:d8:5f: 32:58:de:95:64:74:01:6e:63:f0:67:f3:a3:e4:79: bf:07:b3:02:00:58:6e:18:2f:72:22:19:17:b7:b7: b0:da:60:ac:b3:b7:49:71:a7:33:68:47:be:3c:e8: 8a:8f:a5:cc:48:9a:1b:f6:8e:bc:3e:b9:ba:04:b4: b3:68:a2:74:10:09:4f:a2:18:f1:0f:ac:4f:a8:80: 90:d6:12:3b:70:c7:0c:67:33:fa:86:ea:fd:92:8d: e1:e9:f3:2d:e1:94:b7:60:86:de:4f:c4:b1:17:fe: ff:2c:82:ff:6f:5d:98:76:3e:02:0a:72:c7:d9:1c: 51:1e:d9:ed:95:d3:d1:ed:c5:91:6b:dc:15:9e:78: 3f:a1:7d:b1:d0:6d:76:49:53:5f:62:68:82:9d:27: 4a:70:c1:09:2f:76:24:e3:b0:5d:36:3e:12:81:01: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:BF:35:46:97:03:3F:7F:60:DA:E3:F0:6B:9A:2A:04:56:A2:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:67:ed:3e:38:da:d3:f0:98:e4:a7:a8:53:06:59:a5:78:91: f1:e9:91:72:13:91:41:30:dc:dd:82:3f:8f:83:48:8a:e4:72: 31:50:17:60:79:e6:ec:a7:6c:c0:f7:1d:ac:76:96:73:81:0f: d4:cf:8b:45:0d:3e:94:34:6d:24:b5:d3:1c:8b:9c:d7:03:5f: eb:87:cd:11:a6:dd:00:c6:71:ef:55:59:ea:e7:55:05:78:83: 32:c7:9d:fd:85:65:fb:c2:cb:78:be:9d:15:2d:e5:57:d0:23: 11:16:20:44:2b:26:01:4b:3d:31:8a:fd:9c:f5:55:69:17:a1: b9:eb:dc:e9:bd:35:21:df:a7:ea:6f:32:59:a9:b1:47:3c:e9: de:eb:1f:78:f7:44:fd:83:9d:32:0e:53:71:2c:e0:9b:da:6a: af:a9:71:06:f3:26:dd:6d:7b:08:ef:87:3a:50:0c:b8:c9:f6: 53:50:b3:3f:47:97:d2:f0:0a:83:c6:ce:85:6c:e0:62:bf:7c: 01:9d:34:84:a1:cb:50:b9:63:4a:4f:c9:eb:3c:f1:54:d9:2a: 6a:5f:53:01:39:d2:79:9c:0c:4f:66:24:c4:da:0f:f6:85:76: f5:34:dd:ba:2d:1a:6a:f0:be:9c:d6:f3:87:2b:bc:9f:f1:bd: d8:90:da:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx8KOoUjFVImm1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk YTZhZDNkYTEtY2ZiZS00MjYzLTllNGQtOTMzOTM4NjFhNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxykC7bN/qqfpWmpRs4sbtdV14TR/VV5AQJGX EHNMEjAgYZ/WjzurrIw7c/cHkamarIMWuxeVowb//DZ2TeUauvU1JlkH5VtbeJ71 xVKLt5qbvnGA9YSj2F8yWN6VZHQBbmPwZ/Oj5Hm/B7MCAFhuGC9yIhkXt7ew2mCs s7dJcaczaEe+POiKj6XMSJob9o68Prm6BLSzaKJ0EAlPohjxD6xPqICQ1hI7cMcM ZzP6hur9ko3h6fMt4ZS3YIbeT8SxF/7/LIL/b12Ydj4CCnLH2RxRHtntldPR7cWR a9wVnng/oX2x0G12SVNfYmiCnSdKcMEJL3Yk47BdNj4SgQH3rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNYvzVGlwM/f2Da4/BrmioEVqIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTQ1NWRkMDEtOWQxYy0z ZjY3LWJlODYtOTlkMzBhNjcyZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANn7T442tPwmOSnqFMGWaV4kfHpkXITkUEw3N2CP4+DSIrkcjFQF2B5 5uynbMD3Hax2lnOBD9TPi0UNPpQ0bSS10xyLnNcDX+uHzRGm3QDGce9VWernVQV4 gzLHnf2FZfvCy3i+nRUt5VfQIxEWIEQrJgFLPTGK/Zz1VWkXobnr3Om9NSHfp+pv MlmpsUc86d7rH3j3RP2DnTIOU3Es4Jvaaq+pcQbzJt1tewjvhzpQDLjJ9lNQsz9H l9LwCoPGzoVs4GK/fAGdNIShy1C5Y0pPyes88VTZKmpfUwE50nmcDE9mJMTaD/aF dvU03botGmrwvpzW84crvJ/xvdiQ2t8= -----END CERTIFICATE-----Generated at Mon Jun 30 03:58:24 2025 by rpki-client