$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f7899b95-da81-34f1-ae4f-454087ede12d.roa File: f7899b95-da81-34f1-ae4f-454087ede12d.roa (raw, json) Hash identifier: RTffFkvhu0AWJ0EaUfO+rfiETwDVXFnMcQ0y1AO9TSM= Subject key identifier: 2D:47:4B:D5:FD:E5:46:EA:8F:AD:3F:C0:2D:1D:3B:9A:69:4A:71:47 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D44FA495BABDB2F80FA5F1400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f7899b95-da81-34f1-ae4f-454087ede12d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16417 IP address blocks: 23.90.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:49:5b:ab:db:2f:80:fa:5f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=e1bb25c4-ed0c-4af4-9df4-76b8ac49a091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:86:c5:a9:bb:e0:26:8d:d5:fd:7d:15:86: ad:a6:47:43:54:34:45:75:0a:c6:58:7d:c8:71:f0: b1:a5:98:a4:7f:83:90:b3:7e:98:b1:ce:13:3f:3b: 24:e2:3f:dc:37:0a:45:d8:56:28:40:ee:73:8e:e3: d5:de:7d:0b:ab:85:e1:52:e3:66:ff:39:81:10:bd: 9a:52:ff:05:2c:fa:50:11:4d:6a:a2:f9:98:ab:0c: 62:68:a2:ae:06:0c:33:21:b2:73:68:2d:fb:9e:ba: a7:90:af:ad:42:92:44:5b:8f:cf:3f:a5:a6:1c:c4: 90:ab:88:52:5b:d4:55:a9:30:7f:74:12:27:76:89: 04:86:15:e3:da:ac:95:9f:fd:c8:90:25:74:e8:95: 3e:bc:f4:98:92:5a:00:01:31:9b:18:f9:a4:b4:2a: 54:b4:e5:6f:51:8c:b4:ff:fd:e2:6b:85:02:40:1f: 5e:22:6a:1b:44:c2:50:2e:a8:c8:3f:9e:ba:c9:cc: b5:59:44:da:b8:42:86:64:32:9a:34:80:e5:63:61: 70:12:b8:ae:7f:68:3c:8c:b0:69:8f:c2:7c:da:4b: 67:35:eb:df:37:a1:a1:41:c1:99:63:2b:b2:c5:a8: a7:9b:1f:18:51:bf:52:89:34:f2:c5:1c:06:c9:39: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:47:4B:D5:FD:E5:46:EA:8F:AD:3F:C0:2D:1D:3B:9A:69:4A:71:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f7899b95-da81-34f1-ae4f-454087ede12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:51:d9:55:15:d4:e1:ca:2c:a8:cb:cf:b6:57:8f:d7:ca:b9: e5:ca:e6:cc:8d:6d:dc:ab:0f:0d:19:b8:fa:e0:58:8f:88:1d: dd:dd:fc:00:6b:d6:d1:35:c9:7c:4f:cc:d1:97:a0:92:b8:fb: c7:2e:a9:ec:94:ee:51:ea:df:4f:97:39:7e:95:a3:85:8f:d8: f0:f7:ae:16:e4:c1:0a:ef:68:a1:e6:e8:7d:7d:72:68:51:41: e6:12:36:75:e8:52:3a:b8:78:47:52:b2:b4:c4:12:9a:a3:ed: f3:ea:e2:e8:45:a0:03:ee:05:de:6e:ea:4a:b7:85:e3:4a:30: 75:82:c4:d6:8d:4e:82:91:88:5d:ed:a0:b0:6d:1c:a8:05:1b: c0:11:32:ac:f4:99:30:45:56:8c:9d:3f:a8:ae:c9:9d:c8:f3: d3:86:46:79:3a:a9:6f:e8:18:db:0e:7b:61:ad:c4:15:48:ae: e6:54:bf:67:51:17:b9:cf:2e:cc:fc:48:2c:ff:74:5d:92:b6: 39:26:0b:f0:cd:f7:93:76:6c:d9:00:9c:9d:5e:ff:d3:e5:d3: 27:e1:67:c1:67:08:77:9d:af:e1:15:d4:ca:7e:3b:c5:36:d6: 11:de:21:66:1f:18:33:ca:4b:0f:d3:74:33:fd:92:8a:c2:bb: 9d:a6:9e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+klbq9svgPpfFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZTFiYjI1YzQtZWQwYy00YWY0LTlkZjQtNzZiOGFjNDlhMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB2Gxam74CaN1f19FYatpkdDVDRFdQrGWH3I cfCxpZikf4OQs36Ysc4TPzsk4j/cNwpF2FYoQO5zjuPV3n0Lq4XhUuNm/zmBEL2a Uv8FLPpQEU1qovmYqwxiaKKuBgwzIbJzaC37nrqnkK+tQpJEW4/PP6WmHMSQq4hS W9RVqTB/dBIndokEhhXj2qyVn/3IkCV06JU+vPSYkloAATGbGPmktCpUtOVvUYy0 //3ia4UCQB9eImobRMJQLqjIP566ycy1WUTauEKGZDKaNIDlY2FwEriuf2g8jLBp j8J82ktnNevfN6GhQcGZYyuyxainmx8YUb9SiTTyxRwGyTnvCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1HS9X95Ubqj60/wC0dO5ppSnFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZjc4OTliOTUtZGE4MS0z NGYxLWFlNGYtNDU0MDg3ZWRlMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1pjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5R2VUV1OHKLKjLz7ZXj9fKueXK5syNbdyrDw0ZuPrgWI+IHd3d/ABr 1tE1yXxPzNGXoJK4+8cuqeyU7lHq30+XOX6Vo4WP2PD3rhbkwQrvaKHm6H19cmhR QeYSNnXoUjq4eEdSsrTEEpqj7fPq4uhFoAPuBd5u6kq3heNKMHWCxNaNToKRiF3t oLBtHKgFG8ARMqz0mTBFVoydP6iuyZ3I89OGRnk6qW/oGNsOe2GtxBVIruZUv2dR F7nPLsz8SCz/dF2StjkmC/DN95N2bNkAnJ1e/9Pl0yfhZ8FnCHedr+EV1Mp+O8U2 1hHeIWYfGDPKSw/TdDP9korCu52mnrs= -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:18 2026 by rpki-client