$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa File: b657d4b5-4b44-3212-ae06-094b356a68b1.roa (raw, json) Hash identifier: 9ULrlSST02P8GFkbBk4pD43RYbtS31sHHq3+OBP3Rxk= Subject key identifier: 86:95:09:13:CE:5A:47:FC:86:06:7C:AE:D7:23:E3:C6:76:AC:DE:A3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC1468356E1939E31A0B000 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 23.90.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:46:83:56:e1:93:9e:31:a0:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5030bf43-bd2b-42ac-822b-161f4b1e099c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:c5:9e:48:f4:5b:7f:68:ea:98:3b:50:b0: a1:10:c5:3c:96:b3:36:d3:95:e3:23:51:14:26:3a: 93:29:08:7a:77:f6:57:d7:7a:09:d5:8e:3f:16:bd: 55:3f:2f:a2:b2:53:1d:6f:67:4d:7c:c3:51:36:34: 4c:4c:63:ef:9f:38:d5:db:1f:d9:37:e2:2d:e2:c1: 5e:ef:bd:2e:42:e2:b8:a4:d4:ab:8a:9e:e7:5b:25: 43:3a:9f:23:68:0f:26:ca:90:1e:c8:40:13:2d:72: 89:cd:82:61:9b:02:a4:35:d7:60:45:82:16:72:fd: 4a:f6:24:96:6d:5b:d6:15:a3:4d:c5:62:ef:67:94: fa:83:1c:54:4a:f9:d0:04:3b:a1:05:53:2c:61:e7: 43:01:29:08:81:22:83:61:72:67:a6:3e:96:b2:4f: f3:77:c8:c7:f6:d7:5b:f3:7f:96:05:a5:a1:5e:be: 95:19:2c:4b:9d:0a:65:ed:de:58:77:6f:d3:06:90: 69:19:02:6b:08:c3:8a:b9:ac:37:d2:8b:54:6b:e9: 20:86:07:69:be:3f:55:91:08:a9:a3:1a:f0:4e:35: 4e:92:77:c5:33:94:ad:dc:df:89:d5:c7:fb:a5:8e: 1f:cc:e6:b2:88:77:44:aa:1f:e7:f9:03:63:71:1b: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:09:13:CE:5A:47:FC:86:06:7C:AE:D7:23:E3:C6:76:AC:DE:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:25:2f:9c:91:bf:e5:70:17:c7:ab:c5:31:91:28:35:17:7c: 9c:fe:cd:2f:66:d1:21:ec:49:48:a4:3e:54:6e:0b:70:de:9f: 59:77:50:74:e2:6e:0c:c5:90:70:63:db:64:d5:65:5a:c4:7b: c4:ea:3c:ab:7f:39:7c:85:03:36:e2:f4:ba:29:49:74:33:86: 13:0e:be:e3:dc:76:33:3d:26:5c:b4:ec:c1:3a:60:12:d0:05: 03:3e:86:0b:d3:d7:0d:9d:8b:8f:d9:be:0e:20:27:39:fe:7a: 52:36:b3:1d:b8:93:01:76:2f:bf:34:e8:d7:ff:53:f2:04:5e: c4:58:1c:d5:14:b5:2d:6d:38:76:b7:74:9c:24:a0:ee:0b:35: f9:14:ce:f2:24:53:c6:e4:4a:1d:6a:7a:5a:4f:28:49:d0:b2: f9:1b:59:1e:0d:99:7c:1a:13:81:ca:37:1e:63:77:aa:1e:af: 16:b0:94:49:78:4f:ef:3b:25:7b:07:0b:cb:83:94:02:7e:ec: 08:e0:20:f6:be:1c:9b:07:9b:65:5a:65:79:5c:b3:51:30:6c: d3:01:16:bf:d2:a6:71:e3:0d:00:38:42:fc:21:b1:07:71:e0: 54:7f:44:2d:b9:cb:c8:35:41:2e:7b:d5:33:4d:f6:ef:e9:0b: 47:a4:69:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUaDVuGTnjGgsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTAzMGJmNDMtYmQyYi00MmFjLTgyMmItMTYxZjRiMWUwOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6zFnkj0W39o6pg7ULChEMU8lrM205XjI1EU JjqTKQh6d/ZX13oJ1Y4/Fr1VPy+islMdb2dNfMNRNjRMTGPvnzjV2x/ZN+It4sFe 770uQuK4pNSrip7nWyVDOp8jaA8mypAeyEATLXKJzYJhmwKkNddgRYIWcv1K9iSW bVvWFaNNxWLvZ5T6gxxUSvnQBDuhBVMsYedDASkIgSKDYXJnpj6Wsk/zd8jH9tdb 83+WBaWhXr6VGSxLnQpl7d5Yd2/TBpBpGQJrCMOKuaw30otUa+kghgdpvj9VkQip oxrwTjVOknfFM5St3N+J1cf7pY4fzOayiHdEqh/n+QNjcRtg2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaVCRPOWkf8hgZ8rtcj48Z2rN6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjY1N2Q0YjUtNGI0NC0z MjEyLWFlMDYtMDk0YjM1NmE2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEclL5yRv+VwF8erxTGRKDUXfJz+zS9m0SHsSUikPlRuC3Den1l3UHTi bgzFkHBj22TVZVrEe8TqPKt/OXyFAzbi9LopSXQzhhMOvuPcdjM9Jly07ME6YBLQ BQM+hgvT1w2di4/Zvg4gJzn+elI2sx24kwF2L7806Nf/U/IEXsRYHNUUtS1tOHa3 dJwkoO4LNfkUzvIkU8bkSh1qelpPKEnQsvkbWR4NmXwaE4HKNx5jd6oerxawlEl4 T+87JXsHC8uDlAJ+7AjgIPa+HJsHm2VaZXlcs1EwbNMBFr/SpnHjDQA4QvwhsQdx 4FR/RC25y8g1QS571TNN9u/pC0ekaRQ= -----END CERTIFICATE-----Generated at Sun Aug 24 06:13:46 2025 by rpki-client