$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ef6a8228-54f2-3d74-b766-75528515eeb6.roa File: ef6a8228-54f2-3d74-b766-75528515eeb6.roa (raw, json) Hash identifier: WJ3zk9k8us9BrGDxN1BjSCjRWlo0S5eEp6aX60YzN9w= Subject key identifier: 6F:94:59:C5:DF:96:68:8C:10:59:CC:6B:27:16:49:FC:A7:71:11:E1 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AECC1465F8B9A9D09F1F1A310 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ef6a8228-54f2-3d74-b766-75528515eeb6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 23.90.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:46:5f:8b:9a:9d:09:f1:f1:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=315f272d-1a75-48da-a44d-e600a11b0454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c8:77:23:e2:e8:3c:39:df:75:23:07:e5:42: 20:ac:5e:bf:5f:2b:db:ee:d5:a8:1d:d8:c0:ae:9e: 79:f6:f0:9e:e4:5a:d6:34:00:78:40:73:58:d2:59: 87:61:b5:19:3f:04:38:c9:a3:20:82:13:c4:ad:b8: 25:37:13:ef:3d:01:bb:4a:90:9a:28:e2:cf:da:65: 62:29:20:ea:88:e3:e2:fd:1c:c0:78:49:7f:3a:6f: 99:e5:b0:3f:56:45:3b:ad:43:8b:86:f7:92:b6:11: b1:a0:1f:96:2f:bc:a4:06:4b:23:74:52:87:2b:16: f9:60:59:f3:aa:a0:1e:dc:01:5c:75:c2:d4:c2:5c: fc:ea:3b:f7:18:49:9f:29:d8:8c:ae:c0:df:b9:aa: 20:43:06:68:22:84:79:01:91:88:d4:ee:09:48:6d: e9:6c:ca:5a:8d:8c:f2:09:cd:8e:5e:6c:67:1f:e7: 31:29:f8:87:68:91:c1:6e:56:4a:8d:06:39:bc:6e: e0:6a:91:ed:d7:82:db:09:95:32:b9:61:5e:c6:4d: d0:19:e7:12:a1:ef:dc:05:90:16:9a:60:36:ae:5b: cb:52:48:b5:75:83:d9:45:a7:87:3a:7b:b9:6a:4d: de:54:5e:de:fd:24:2d:65:4a:cd:c0:bb:96:19:04: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:94:59:C5:DF:96:68:8C:10:59:CC:6B:27:16:49:FC:A7:71:11:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ef6a8228-54f2-3d74-b766-75528515eeb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bd:ce:04:c8:ec:d9:5a:e2:bf:0b:e9:38:b7:42:91:30:aa: 12:d4:d7:8a:5c:61:97:4b:00:51:89:9e:a8:4e:6b:f2:29:9b: 4d:21:46:f9:c9:2b:bd:b8:aa:f5:e3:14:64:94:fb:18:66:c3: 0e:ac:95:88:79:e4:27:f1:39:fb:fd:3f:fd:1a:25:9d:a6:a3: 05:44:b9:bb:8e:ef:4d:ed:f6:2b:92:e1:32:23:a2:51:e6:36: 21:4f:67:8a:71:52:e5:e7:c6:ea:79:42:c9:c7:77:99:e2:e7: 0b:b4:d0:90:5f:b3:41:db:bd:57:a6:bd:88:3a:d8:0e:98:98: e2:d5:d4:f3:c3:93:70:4e:53:1f:74:a5:5a:1c:fd:32:a0:ac: 3e:a9:6b:b6:87:e8:94:ab:b8:5e:b8:9d:3e:f5:e0:1f:52:4e: 2d:70:fd:10:05:98:fb:2c:40:9a:c9:99:4f:12:ea:ce:6c:ef: c7:04:89:6b:75:f0:f1:38:8c:cc:14:b2:5b:c7:05:de:b0:1b: a3:c0:88:dc:34:1f:05:d8:3a:07:6b:89:75:c0:da:1b:ca:87: 82:b2:85:1c:6a:3c:e4:41:c1:24:21:d2:87:4f:f9:94:b7:6b: da:1b:57:9b:e3:9d:f5:3a:b3:61:73:6a:ab:98:e8:2d:2f:eb: 96:c4:b0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUZfi5qdCfHxoxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzE1ZjI3MmQtMWE3NS00OGRhLWE0NGQtZTYwMGExMWIwNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8h3I+LoPDnfdSMH5UIgrF6/Xyvb7tWoHdjA rp559vCe5FrWNAB4QHNY0lmHYbUZPwQ4yaMgghPErbglNxPvPQG7SpCaKOLP2mVi KSDqiOPi/RzAeEl/Om+Z5bA/VkU7rUOLhveSthGxoB+WL7ykBksjdFKHKxb5YFnz qqAe3AFcdcLUwlz86jv3GEmfKdiMrsDfuaogQwZoIoR5AZGI1O4JSG3pbMpajYzy Cc2OXmxnH+cxKfiHaJHBblZKjQY5vG7gapHt14LbCZUyuWFexk3QGecSoe/cBZAW mmA2rlvLUki1dYPZRaeHOnu5ak3eVF7e/SQtZUrNwLuWGQT23wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+UWcXflmiMEFnMaycWSfyncRHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZWY2YTgyMjgtNTRmMi0z ZDc0LWI3NjYtNzU1Mjg1MTVlZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm9zgTI7Nla4r8L6Ti3QpEwqhLU14pcYZdLAFGJnqhOa/Ipm00hRvnJ K724qvXjFGSU+xhmww6slYh55CfxOfv9P/0aJZ2mowVEubuO703t9iuS4TIjolHm NiFPZ4pxUuXnxup5QsnHd5ni5wu00JBfs0HbvVemvYg62A6YmOLV1PPDk3BOUx90 pVoc/TKgrD6pa7aH6JSruF64nT714B9STi1w/RAFmPssQJrJmU8S6s5s78cEiWt1 8PE4jMwUslvHBd6wG6PAiNw0HwXYOgdriXXA2hvKh4KyhRxqPORBwSQh0odP+ZS3 a9obV5vjnfU6s2FzaquY6C0v65bEsOQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:33 2025 by rpki-client