$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f7899b95-da81-34f1-ae4f-454087ede12d.roa File: f7899b95-da81-34f1-ae4f-454087ede12d.roa (raw, json) Hash identifier: 8l79JCjyRO+f3XxKtgdGw4oA6DwMFR+oTUzs4D7FAhQ= Subject key identifier: 47:0B:B4:25:65:E0:E2:97:C6:9B:AB:E2:B6:BB:09:E6:34:B8:82:35 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B84E785BC1346E42D3092D560 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f7899b95-da81-34f1-ae4f-454087ede12d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16417 IP address blocks: 23.90.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:85:bc:13:46:e4:2d:30:92:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=93549f3f-a57b-4b00-a661-d68e0c4ff581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:a2:a3:49:f4:85:7f:3e:1b:5c:a6:8f:e3: 91:99:92:47:76:46:4c:c7:db:d9:74:0c:0a:a1:86: a9:b7:eb:90:35:be:ef:f5:7d:43:05:8b:6c:4f:37: a3:9f:07:12:3d:bd:5a:19:e9:d0:1e:c3:c2:5a:ac: 13:0d:e0:01:68:85:0d:9c:58:10:ea:a9:c6:0f:ea: 43:19:06:4e:ed:a4:b3:2f:aa:3b:13:75:79:7d:ac: 68:20:9f:55:f5:0f:5f:06:69:8d:2e:0b:38:22:a7: 8d:8e:64:11:eb:76:de:7f:2f:99:7b:3f:2e:86:ac: c9:bc:b9:8b:66:c0:3e:89:4d:57:ee:04:13:08:3b: 7c:9b:97:35:23:78:57:4d:08:df:15:2b:c9:97:f6: 00:d2:89:ba:05:41:97:c8:c8:c6:51:96:96:07:ec: ee:52:db:a9:08:89:a9:8a:a5:60:3a:5f:81:b3:e3: 32:b4:de:9e:7a:fa:49:82:74:f3:92:f1:6c:61:1f: 7b:07:6c:71:7c:d7:86:2b:0b:1c:3a:e6:97:da:c3: 8c:ca:8b:ce:84:75:66:5e:8b:45:19:8e:7d:d8:c3: c9:ed:40:c2:0f:c8:fb:df:9e:13:49:c9:5d:6c:f8: 2f:b7:e7:61:ca:51:28:2a:ee:c2:73:e0:dd:f2:6e: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0B:B4:25:65:E0:E2:97:C6:9B:AB:E2:B6:BB:09:E6:34:B8:82:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f7899b95-da81-34f1-ae4f-454087ede12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:63:9b:4f:32:bb:d2:84:c2:11:35:45:27:2e:6e:70:45:d3: 97:a7:2a:12:98:83:e1:49:99:bc:6d:b8:7e:ab:e6:1d:2c:77: 2c:bd:74:48:fd:85:0b:78:97:c1:5b:e4:02:4d:b4:5d:3c:e3: 91:cc:92:12:1f:23:ee:eb:5a:07:33:1d:5d:8e:fb:c2:db:9e: 9a:ae:31:e7:65:8c:55:a4:68:d5:72:6f:63:a5:66:eb:08:ad: 35:2b:fe:0b:73:a1:97:91:db:b6:55:cf:eb:46:14:47:a9:42: ea:ce:34:2e:34:37:d7:84:dc:ec:b0:b8:f7:ff:7d:37:65:ec: de:0e:45:69:09:65:13:d3:60:ce:ab:93:af:9c:33:25:48:eb: 40:99:60:6a:d2:a2:29:66:b1:24:14:40:3d:f2:75:d0:dd:e7: da:b0:26:ad:71:b7:8f:24:35:91:a1:41:77:39:ce:5d:0d:c3: 63:f0:b9:0d:5a:c1:8c:1b:31:e1:9c:c2:c1:8e:2b:2f:be:a1: 34:6a:cf:65:02:41:8c:6d:48:ea:f0:b8:e5:16:bc:97:94:5b: 1c:be:28:fb:5b:5c:a6:37:b9:1f:40:c1:a2:cb:b4:aa:6c:23: 31:3f:04:34:33:55:cd:c4:ba:f5:cf:10:6f:55:0d:22:71:08: 98:33:22:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54W8E0bkLTCS1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTM1NDlmM2YtYTU3Yi00YjAwLWE2NjEtZDY4ZTBjNGZmNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0paio0n0hX8+G1ymj+ORmZJHdkZMx9vZdAwK oYapt+uQNb7v9X1DBYtsTzejnwcSPb1aGenQHsPCWqwTDeABaIUNnFgQ6qnGD+pD GQZO7aSzL6o7E3V5faxoIJ9V9Q9fBmmNLgs4IqeNjmQR63befy+Zez8uhqzJvLmL ZsA+iU1X7gQTCDt8m5c1I3hXTQjfFSvJl/YA0om6BUGXyMjGUZaWB+zuUtupCImp iqVgOl+Bs+MytN6eevpJgnTzkvFsYR97B2xxfNeGKwscOuaX2sOMyovOhHVmXotF GY592MPJ7UDCD8j7354TScldbPgvt+dhylEoKu7Cc+Dd8m6qfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcLtCVl4OKXxpur4ra7CeY0uII1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZjc4OTliOTUtZGE4MS0z NGYxLWFlNGYtNDU0MDg3ZWRlMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxjm08yu9KEwhE1RScubnBF05enKhKYg+FJmbxtuH6r5h0sdyy9dEj9 hQt4l8Fb5AJNtF0845HMkhIfI+7rWgczHV2O+8LbnpquMedljFWkaNVyb2OlZusI rTUr/gtzoZeR27ZVz+tGFEepQurONC40N9eE3OywuPf/fTdl7N4ORWkJZRPTYM6r k6+cMyVI60CZYGrSoilmsSQUQD3yddDd59qwJq1xt48kNZGhQXc5zl0Nw2PwuQ1a wYwbMeGcwsGOKy++oTRqz2UCQYxtSOrwuOUWvJeUWxy+KPtbXKY3uR9AwaLLtKps IzE/BDQzVc3EuvXPEG9VDSJxCJgzIoo= -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:18 2025 by rpki-client