$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa File: 59d408be-4188-3cb9-8162-6224102660ec.roa (raw, json) Hash identifier: 5ZQQwzpVIbeIMLdgs+TTN1RSSRN4ArbhRqebdl3tEAk= Subject key identifier: 8A:9E:82:67:84:FE:76:FA:8D:5E:97:3B:7E:BA:4A:C5:B7:C9:09:49 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584F42781C8E51FED77632C63040 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16417 IP address blocks: 23.90.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1c:8e:51:fe:d7:76:32:c6:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=a5f81512-0025-4e92-972b-d087ad785a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:c4:4a:96:e8:ef:dc:3c:3d:56:08:12:fe: 08:93:b9:93:d2:6e:ea:01:33:5c:8f:c6:3b:ad:1c: 56:8f:69:5c:2c:f1:8a:be:38:fb:fa:8d:42:2f:51: 87:a1:fd:be:0d:d3:15:0d:38:15:5e:41:79:c1:35: 93:da:b4:ae:c7:3e:15:ba:dd:ab:9a:7e:3e:8c:3f: 3c:7c:e6:c3:49:64:53:55:23:d5:c0:25:f5:fb:44: 88:a2:cf:e1:4c:68:45:b1:c4:fc:a3:9d:76:fc:04: 42:df:c6:29:b0:2b:c0:21:ce:ca:0c:3f:1e:36:df: b8:de:57:09:fe:0f:00:0b:00:f7:9c:42:ec:1f:28: d1:db:ec:a2:09:ac:64:86:30:5e:3a:a7:68:32:4d: bd:ea:0c:e7:a1:07:34:0c:70:9c:25:70:fb:b2:47: 60:e4:25:1d:db:1f:da:9b:33:c3:4c:19:99:24:10: ae:15:19:6c:06:cd:66:39:13:53:17:ed:1a:f3:63: ec:3d:53:3d:a1:c6:96:d3:9e:51:4e:4f:67:54:21: c2:44:c6:7a:bc:62:8c:5e:16:52:a4:a6:5f:ae:2e: 99:60:69:3b:8c:a4:6d:69:1b:04:87:be:ff:38:02: 60:fe:d6:c6:d5:78:fd:ae:d6:0a:f0:35:c0:ab:ac: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:82:67:84:FE:76:FA:8D:5E:97:3B:7E:BA:4A:C5:B7:C9:09:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:63:0d:88:3b:93:cd:1d:48:e4:23:91:2e:2c:ab:7a:88:7c: 2c:68:d7:b5:cd:0a:c0:69:0c:ff:6b:12:f1:33:67:d7:67:98: e1:44:13:84:08:5e:87:7a:cf:10:62:78:22:db:b9:1e:b9:b2: 0a:f6:e2:72:c7:7b:3a:1d:71:b4:27:5e:80:90:32:21:3f:0c: 33:3d:c2:5a:76:a9:35:aa:4e:69:cb:cf:cb:c5:1f:4c:73:aa: 24:6b:08:74:31:68:cc:ca:1e:9f:8c:fa:3b:34:94:7b:87:56: 48:ff:49:49:ad:38:df:b6:08:92:f6:88:67:43:15:5e:fd:a3: a0:e8:e1:3e:a8:7d:9f:86:58:ea:02:61:7e:be:fe:7b:0d:68: eb:43:f9:21:2f:62:2c:80:8a:5e:73:17:da:c9:09:c1:7e:79: 0e:63:a3:77:8d:24:39:1b:6d:ff:6a:ec:63:27:17:2d:33:ba: 70:02:41:c0:98:82:66:71:81:ef:36:42:52:9e:51:77:6d:7a: 76:50:c0:2c:24:eb:34:f3:85:42:04:dd:71:47:d6:99:96:31: cf:4a:e3:c7:91:5a:c8:e9:a3:5e:8a:e1:f7:e6:01:4d:cd:62: ab:7c:7d:24:22:9f:31:2f:ed:62:dd:aa:49:89:70:3a:bc:35: d6:e7:ce:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeByOUf7XdjLGMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YTVmODE1MTItMDAyNS00ZTkyLTk3MmItZDA4N2FkNzg1YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDjESpbo79w8PVYIEv4Ik7mT0m7qATNcj8Y7 rRxWj2lcLPGKvjj7+o1CL1GHof2+DdMVDTgVXkF5wTWT2rSuxz4Vut2rmn4+jD88 fObDSWRTVSPVwCX1+0SIos/hTGhFscT8o512/ARC38YpsCvAIc7KDD8eNt+43lcJ /g8ACwD3nELsHyjR2+yiCaxkhjBeOqdoMk296gznoQc0DHCcJXD7skdg5CUd2x/a mzPDTBmZJBCuFRlsBs1mORNTF+0a82PsPVM9ocaW055RTk9nVCHCRMZ6vGKMXhZS pKZfri6ZYGk7jKRtaRsEh77/OAJg/tbG1Xj9rtYK8DXAq6w6bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqegmeE/nb6jV6XO366SsW3yQlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTlkNDA4YmUtNDE4OC0z Y2I5LTgxNjItNjIyNDEwMjY2MGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1phMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExjDYg7k80dSOQjkS4sq3qIfCxo17XNCsBpDP9rEvEzZ9dnmOFEE4QI Xod6zxBieCLbuR65sgr24nLHezodcbQnXoCQMiE/DDM9wlp2qTWqTmnLz8vFH0xz qiRrCHQxaMzKHp+M+js0lHuHVkj/SUmtON+2CJL2iGdDFV79o6Do4T6ofZ+GWOoC YX6+/nsNaOtD+SEvYiyAil5zF9rJCcF+eQ5jo3eNJDkbbf9q7GMnFy0zunACQcCY gmZxge82QlKeUXdtenZQwCwk6zTzhUIE3XFH1pmWMc9K48eRWsjpo16K4ffmAU3N Yqt8fSQinzEv7WLdqkmJcDq8Ndbnzos= -----END CERTIFICATE-----Generated at Sat Oct 10 17:05:45 2026 by rpki-client