$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/aaacb076-92f6-3a56-be1e-7bc755a9876d.roa File: aaacb076-92f6-3a56-be1e-7bc755a9876d.roa (raw, json) Hash identifier: 6BYHGeyz40JOvZmcKuJ3nOJAlj4Mh4kYzlF1RId6Jr8= Subject key identifier: 67:8B:3A:E4:A2:DF:29:45:23:AA:37:3F:FE:FA:65:F4:41:52:93:ED Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584E921FAAD07C2A249CD717D5C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/aaacb076-92f6-3a56-be1e-7bc755a9876d.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 30215 IP address blocks: 23.90.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:aa:d0:7c:2a:24:9c:d7:17:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=26327f79-fd36-4a70-8846-4c18d588e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:2c:75:b3:f2:f1:36:2c:0c:c7:aa:5a:be: 73:a0:ff:55:e9:92:e3:8f:6b:bd:60:13:f2:bf:75: b0:a8:29:29:5d:e9:15:60:f1:64:c6:c1:97:ac:db: aa:42:b4:ff:c0:21:80:f6:ca:e7:34:84:54:47:ab: db:30:27:49:ad:01:18:59:29:7b:68:33:53:f7:bd: 8b:86:25:38:28:e2:ca:97:1d:47:82:b6:99:d3:f6: 38:86:9a:f4:d2:19:99:b9:f7:15:3c:91:0a:56:db: c8:d1:0a:59:96:01:d7:2e:22:95:71:4a:e6:3f:8b: 81:4b:4f:7e:d1:4c:f9:ce:98:fc:9f:3a:74:b1:98: 89:58:cc:b7:18:66:5a:4e:c5:3f:05:89:1a:16:ac: 24:94:fc:8a:d7:62:96:b4:c6:44:08:cf:d2:83:f8: 1a:e5:72:e8:4f:63:b5:e3:6c:b8:5e:f9:62:04:d4: a3:f6:3e:2e:29:9d:84:dd:6d:e9:7e:b7:51:ff:8b: 9e:bd:d6:ec:07:64:dd:fa:dc:07:2f:1a:01:d8:f3: 34:d1:b7:45:69:35:90:c7:70:1a:1f:63:f2:c4:f8: 0c:f5:b6:93:be:a1:d9:c0:54:b7:38:68:7d:36:06: ea:0f:d3:81:c6:60:15:50:73:71:24:2a:4c:df:5b: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8B:3A:E4:A2:DF:29:45:23:AA:37:3F:FE:FA:65:F4:41:52:93:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/aaacb076-92f6-3a56-be1e-7bc755a9876d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:89:42:14:56:d9:ae:63:0b:b4:db:80:77:a9:2f:a2:35:cd: 80:29:0f:2f:c3:31:5d:27:09:f3:4b:8b:ba:31:41:c9:91:07: e2:86:3f:8b:a0:7c:75:8d:c7:27:2a:32:d7:bc:f1:03:9b:e5: 07:83:f6:61:e1:d4:95:77:e3:5a:1a:e5:17:8d:dc:1e:cd:b3: 9d:f1:61:d1:d8:ca:c9:df:29:3d:63:2d:8c:38:c5:92:c6:d2: fa:4c:93:c3:2d:50:47:63:a1:6f:6a:d4:85:5d:3e:a9:c1:cb: fd:c5:1a:95:80:e0:17:f1:97:b3:b0:b9:c0:3f:99:ea:a1:b6: c1:37:f6:b6:16:2a:64:35:47:be:af:df:25:1f:f1:a1:08:fb: 4f:3b:bf:5e:d7:da:64:0e:44:ae:7b:ce:3e:e1:77:19:bd:f5: 21:54:d6:5c:05:58:94:5e:18:74:5b:5e:5f:ea:dc:97:f1:d8: 7d:09:f1:44:8b:ca:9e:f8:10:8c:9f:3b:ef:cc:7b:34:d0:08: b2:eb:25:80:6a:d8:ae:69:f2:19:2f:5b:29:de:64:a3:2e:ce: d2:58:03:2c:be:a4:e7:a1:43:85:71:64:ae:87:d6:86:4f:8a: 4b:c6:e2:50:03:2b:ec:45:91:a5:02:0c:c6:94:60:5f:60:18: ca:31:db:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6rQfCoknNcX1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk MjYzMjdmNzktZmQzNi00YTcwLTg4NDYtNGMxOGQ1ODhlMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxwsdbPy8TYsDMeqWr5zoP9V6ZLjj2u9YBPy v3WwqCkpXekVYPFkxsGXrNuqQrT/wCGA9srnNIRUR6vbMCdJrQEYWSl7aDNT972L hiU4KOLKlx1HgraZ0/Y4hpr00hmZufcVPJEKVtvI0QpZlgHXLiKVcUrmP4uBS09+ 0Uz5zpj8nzp0sZiJWMy3GGZaTsU/BYkaFqwklPyK12KWtMZECM/Sg/ga5XLoT2O1 42y4XvliBNSj9j4uKZ2E3W3pfrdR/4uevdbsB2Td+twHLxoB2PM00bdFaTWQx3Aa H2PyxPgM9baTvqHZwFS3OGh9NgbqD9OBxmAVUHNxJCpM31v/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeLOuSi3ylFI6o3P/76ZfRBUpPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYWFhY2IwNzYtOTJmNi0z YTU2LWJlMWUtN2JjNzU1YTk4NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKJQhRW2a5jC7TbgHepL6I1zYApDy/DMV0nCfNLi7oxQcmRB+KGP4ug fHWNxycqMte88QOb5QeD9mHh1JV341oa5ReN3B7Ns53xYdHYysnfKT1jLYw4xZLG 0vpMk8MtUEdjoW9q1IVdPqnBy/3FGpWA4Bfxl7OwucA/meqhtsE39rYWKmQ1R76v 3yUf8aEI+087v17X2mQORK57zj7hdxm99SFU1lwFWJReGHRbXl/q3Jfx2H0J8USL yp74EIyfO+/MezTQCLLrJYBq2K5p8hkvWyneZKMuztJYAyy+pOehQ4VxZK6H1oZP ikvG4lADK+xFkaUCDMaUYF9gGMox22Q= -----END CERTIFICATE-----Generated at Fri Jul 24 16:20:32 2026 by rpki-client