$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa File: a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa (raw, json) Hash identifier: 7PDxx1/+JM5BXA+Qf+lMqeE2dZIM19KFdHgLlIAbB0k= Subject key identifier: 29:A4:C0:1A:6D:D2:CA:24:2A:96:B9:7A:81:0F:6C:81:B5:60:4C:7C Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC1469761B5D26D75B2CFF0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 23.90.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:46:97:61:b5:d2:6d:75:b2:cf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8aa73b2b-b6d1-4188-852f-e7c85a33eec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:12:ab:0a:92:a5:9c:e9:3c:70:3e:90:a0: c8:f6:3f:d1:aa:65:ca:35:c5:cc:bf:1a:44:2d:fb: 8e:a8:8d:51:96:7c:4d:b7:6c:75:13:2d:aa:ec:c1: 4e:dc:33:af:f2:ef:a6:a2:3e:c6:73:bc:5a:7d:9b: 63:05:5d:31:a7:d5:35:4e:63:f4:f8:8a:e8:53:ad: 7c:cf:4d:1b:96:c8:87:18:bd:07:2b:f5:79:34:62: 4c:96:45:f9:64:dd:41:2b:59:83:5b:13:38:60:76: d9:5f:35:38:bb:30:2d:11:e8:d2:02:8d:6f:d7:26: dc:03:19:da:b4:46:a9:0d:a4:a5:0c:d3:69:fd:a8: 93:42:95:08:17:74:f1:86:91:fb:23:98:41:37:08: 5b:b2:e2:30:b4:d2:84:c9:6e:a2:1d:d1:b5:c1:98: 8f:7b:d3:cb:1a:56:15:06:0d:ea:a2:b2:be:2b:34: b7:40:ce:76:5c:17:cb:79:7c:57:31:b3:84:26:99: db:00:ba:6a:99:74:08:60:19:6e:55:68:be:73:4d: bd:13:56:37:49:8d:05:51:fb:0b:29:e0:09:c0:de: 7d:48:a3:ff:c1:6c:64:ad:30:5c:46:bd:c0:48:06: ba:6c:79:09:f9:02:14:e3:5a:08:f6:85:72:45:ab: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:C0:1A:6D:D2:CA:24:2A:96:B9:7A:81:0F:6C:81:B5:60:4C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a70fb99f-5c0e-374c-a9d5-8da9b4ca5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:30:3b:2e:47:38:45:1c:b9:11:2b:b4:9a:f3:8e:aa:3b:c1: 83:94:41:4b:35:41:c2:74:98:1a:5c:07:cf:cf:b5:2a:2d:17: ad:59:d7:9e:1c:11:20:7b:ce:74:ab:e4:53:41:3c:d3:2b:f6: 36:11:d2:52:b2:0b:98:a0:f6:dd:ca:6b:40:68:6a:70:6e:7d: bf:c4:5a:5e:ca:09:57:fc:34:17:df:69:35:86:7f:34:e5:3b: 51:fe:b7:24:52:72:93:19:45:b3:22:15:2b:86:8d:8e:fa:d8: 06:9c:d2:a8:e9:c4:d5:32:7c:00:99:0b:21:ff:34:6a:7e:64: ef:29:ba:b1:d1:7c:8f:04:d8:c4:b5:28:46:26:bd:15:d2:09: 26:f0:48:f8:41:81:99:0a:41:03:5d:d3:e7:a5:35:b4:d6:cb: ea:c4:be:9b:81:af:75:ab:f7:17:cb:fc:28:df:9a:9c:89:16: 11:66:56:b5:57:82:e4:3c:72:9e:28:34:3e:fd:d2:98:d9:5f: e9:5c:51:8d:74:0c:f1:11:c8:08:75:d3:4f:e8:9b:99:f2:23: f8:5f:7b:18:b0:27:cf:c2:28:c9:f3:9a:cd:43:18:dc:ab:c5: 8d:8a:41:cd:f5:84:7e:e9:6c:af:ca:49:96:54:0e:52:85:e5: 90:4d:06:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUaXYbXSbXWyz/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGFhNzNiMmItYjZkMS00MTg4LTg1MmYtZTdjODVhMzNlZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjsSqwqSpZzpPHA+kKDI9j/RqmXKNcXMvxpE LfuOqI1RlnxNt2x1Ey2q7MFO3DOv8u+moj7Gc7xafZtjBV0xp9U1TmP0+IroU618 z00blsiHGL0HK/V5NGJMlkX5ZN1BK1mDWxM4YHbZXzU4uzAtEejSAo1v1ybcAxna tEapDaSlDNNp/aiTQpUIF3TxhpH7I5hBNwhbsuIwtNKEyW6iHdG1wZiPe9PLGlYV Bg3qorK+KzS3QM52XBfLeXxXMbOEJpnbALpqmXQIYBluVWi+c029E1Y3SY0FUfsL KeAJwN59SKP/wWxkrTBcRr3ASAa6bHkJ+QIU41oI9oVyRat5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmkwBpt0sokKpa5eoEPbIG1YEx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTcwZmI5OWYtNWMwZS0z NzRjLWE5ZDUtOGRhOWI0Y2E1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJowOy5HOEUcuRErtJrzjqo7wYOUQUs1QcJ0mBpcB8/PtSotF61Z154c ESB7znSr5FNBPNMr9jYR0lKyC5ig9t3Ka0BoanBufb/EWl7KCVf8NBffaTWGfzTl O1H+tyRScpMZRbMiFSuGjY762Aac0qjpxNUyfACZCyH/NGp+ZO8purHRfI8E2MS1 KEYmvRXSCSbwSPhBgZkKQQNd0+elNbTWy+rEvpuBr3Wr9xfL/CjfmpyJFhFmVrVX guQ8cp4oND790pjZX+lcUY10DPERyAh100/om5nyI/hfexiwJ8/CKMnzms1DGNyr xY2KQc31hH7pbK/KSZZUDlKF5ZBNBq4= -----END CERTIFICATE-----Generated at Sun Aug 24 04:18:03 2025 by rpki-client