$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa File: b657d4b5-4b44-3212-ae06-094b356a68b1.roa (raw, json) Hash identifier: YGmTN0Y+fXGo8r+d7yOrljETu60QWM+Y3YyF+N3yZ5o= Subject key identifier: 44:9A:C7:1C:BE:30:24:AD:A4:4D:F1:C7:89:AD:57:74:77:86:23:F3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D8EF580731C03A97C061B03C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 30238 IP address blocks: 23.90.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:80:73:1c:03:a9:7c:06:1b:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ab563db0-c0b4-47a7-a0e2-16c5405b204c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:53:9e:e4:c3:40:4f:f9:dd:13:f7:18:d6:05: da:d7:7b:f0:b3:d9:f0:3b:a6:69:02:43:13:be:fe: 32:d5:0e:b1:64:d2:72:02:cc:fb:b9:b1:3e:46:a5: b2:34:02:2b:9c:bd:c2:58:2d:26:b2:9f:b7:ec:42: 89:15:e8:39:fb:ae:24:9f:32:ef:ed:b6:90:48:f0: 72:04:26:e6:61:d1:d3:29:31:29:44:0e:8e:3d:97: 77:af:fe:4f:50:7c:cd:c0:39:46:b7:ab:9a:76:c7: 42:78:b9:fa:a2:2f:c2:99:79:7c:78:93:84:42:97: e5:32:27:54:26:03:0f:ab:15:cc:3c:ce:16:0a:d4: 0e:89:42:74:b3:7c:22:25:26:8d:21:b5:de:00:79: 15:ab:d1:a4:16:2c:af:06:a5:a4:87:a8:5f:e1:3f: a0:09:86:ee:1e:f9:94:fd:5e:86:bc:78:dc:2e:e2: 9b:f2:2e:18:67:bd:7a:60:4b:9e:30:03:96:58:44: 1c:12:42:67:14:ad:42:c9:66:bc:f9:b9:b9:26:05: 0f:d2:71:42:e9:3d:6a:53:28:15:0c:c6:3b:38:c6: 71:50:5a:78:fd:bb:9e:7f:23:e1:c4:82:6f:d9:9f: c4:1d:80:86:f0:5d:55:03:34:19:ab:3c:b0:c8:d0: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9A:C7:1C:BE:30:24:AD:A4:4D:F1:C7:89:AD:57:74:77:86:23:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b657d4b5-4b44-3212-ae06-094b356a68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:67:cf:6c:b5:ea:b5:38:4a:b8:02:26:13:89:59:63:42:1a: 92:22:ea:0a:dd:91:c1:bd:3e:1e:e5:f8:c6:00:80:e6:86:c4: 18:00:b2:53:f4:39:ac:81:9e:41:53:51:b8:c5:be:86:76:04: 75:3d:03:1b:23:ae:a2:33:af:3e:26:86:33:3b:4f:ed:a4:42: d0:50:bc:59:4d:10:03:3d:1e:e7:ed:3d:b6:d4:a2:7a:bb:75: 7c:55:e0:48:74:74:11:af:b1:60:2b:26:9e:98:58:f1:d8:5b: a2:fe:32:d3:6f:fe:3e:09:40:ca:da:d2:a0:0f:ee:23:ea:54: 3c:95:81:bc:f7:2e:2d:bc:0f:57:c3:24:e7:b2:69:7e:58:d0: b3:05:12:7c:02:63:bb:5e:7f:70:77:a3:58:2c:6f:81:fb:f2: 4c:6b:d0:24:98:ce:de:ef:11:73:6b:f5:4a:ad:d6:c7:da:27: fe:74:93:d0:77:1e:65:4d:7a:27:b6:09:6e:65:d1:b0:54:96: 17:ef:48:7b:f1:40:fc:b8:08:79:30:90:b4:b8:d6:71:d0:65: b7:e8:73:32:63:21:d6:37:f7:21:97:63:00:1d:4f:35:1f:01: 52:49:f4:13:63:2e:b0:b5:c3:0e:fe:51:8c:5c:44:7d:cf:92: 19:ed:83:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9YBzHAOpfAYbA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWI1NjNkYjAtYzBiNC00N2E3LWEwZTItMTZjNTQwNWIyMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FOe5MNAT/ndE/cY1gXa13vws9nwO6ZpAkMT vv4y1Q6xZNJyAsz7ubE+RqWyNAIrnL3CWC0msp+37EKJFeg5+64knzLv7baQSPBy BCbmYdHTKTEpRA6OPZd3r/5PUHzNwDlGt6uadsdCeLn6oi/CmXl8eJOEQpflMidU JgMPqxXMPM4WCtQOiUJ0s3wiJSaNIbXeAHkVq9GkFiyvBqWkh6hf4T+gCYbuHvmU /V6GvHjcLuKb8i4YZ716YEueMAOWWEQcEkJnFK1CyWa8+bm5JgUP0nFC6T1qUygV DMY7OMZxUFp4/buefyPhxIJv2Z/EHYCG8F1VAzQZqzywyNCWCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESaxxy+MCStpE3xx4mtV3R3hiPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjY1N2Q0YjUtNGI0NC0z MjEyLWFlMDYtMDk0YjM1NmE2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9nz2y16rU4SrgCJhOJWWNCGpIi6grdkcG9Ph7l+MYAgOaGxBgAslP0 OayBnkFTUbjFvoZ2BHU9AxsjrqIzrz4mhjM7T+2kQtBQvFlNEAM9HuftPbbUonq7 dXxV4Eh0dBGvsWArJp6YWPHYW6L+MtNv/j4JQMra0qAP7iPqVDyVgbz3Li28D1fD JOeyaX5Y0LMFEnwCY7tef3B3o1gsb4H78kxr0CSYzt7vEXNr9Uqt1sfaJ/50k9B3 HmVNeie2CW5l0bBUlhfvSHvxQPy4CHkwkLS41nHQZbfoczJjIdY39yGXYwAdTzUf AVJJ9BNjLrC1ww7+UYxcRH3Pkhntg0I= -----END CERTIFICATE-----Generated at Wed May 13 14:32:41 2026 by rpki-client