$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa File: fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa (raw, json) Hash identifier: gMixLF40o7NcAXh9ciAI5qJqHX5y1rRAZf59ymA7OP0= Subject key identifier: 1F:07:24:C4:65:B5:71:22:4C:55:69:4A:37:D3:35:41:89:95:F6:C8 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BB88D278C29DC31E6E35F0600 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 30238 IP address blocks: 23.90.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:27:8c:29:dc:31:e6:e3:5f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=013c8b80-16be-4210-9f8f-4fedf4eefaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:39:2d:d6:01:92:d3:5c:cc:5c:6a:d0:fb:98: 5c:d8:a1:d6:f8:0b:4c:97:84:5b:88:54:f4:1a:60: e3:cb:35:97:df:57:fd:6c:b0:02:e7:61:ec:87:f6: 9a:1e:49:15:19:85:76:f9:53:4a:15:0f:39:62:e5: 8b:36:86:16:13:1f:e1:53:19:ff:24:c7:a6:da:4a: 8d:e8:fd:7e:c1:4e:1c:21:94:46:25:2e:02:ec:66: 16:c5:1e:1b:f4:59:58:e6:fe:6c:4c:7d:52:0e:ef: eb:83:32:25:10:d7:54:61:a5:2b:f0:7f:c5:23:8b: 79:9b:85:b0:72:e9:62:91:87:29:3c:93:06:bd:22: 45:f3:95:4f:df:4d:dd:24:74:42:24:44:f0:df:1d: 0d:0c:54:ef:7d:57:2f:11:17:aa:33:87:aa:50:5e: 2c:57:9d:4b:6d:ac:01:e6:4c:70:cc:90:0f:65:77: 82:d1:fb:8a:0b:cf:3a:f1:64:ff:f6:bb:58:fa:54: 3e:61:79:37:f6:12:02:b7:ed:34:ea:ce:78:95:71: 78:3a:db:28:6c:8d:d2:8c:35:e7:9c:1d:84:1a:81: 79:25:3e:8d:73:7d:88:d8:15:4e:85:f9:5c:82:c9: ea:19:56:8a:eb:e6:c6:c5:b1:14:70:7a:36:01:41: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:07:24:C4:65:B5:71:22:4C:55:69:4A:37:D3:35:41:89:95:F6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/fe62eae1-c6f2-3be7-9c47-4049f6da8442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a7:48:f1:b9:2c:d0:0b:ec:a5:cf:20:b9:6e:a9:4e:27:a0: ea:ab:52:6d:c3:2f:20:81:57:ee:28:b4:8f:52:ba:f6:48:1e: 6f:04:60:ff:d6:97:fb:59:db:8b:b9:98:a9:59:60:c8:17:0c: a7:ed:17:40:04:74:2c:44:9c:2e:0f:5e:76:1c:d5:77:1f:7c: ae:47:3d:1f:1b:dd:46:95:f6:4f:f0:bf:06:25:7d:54:19:0d: 3a:f7:06:8e:19:32:3f:b8:ea:d5:30:3c:ce:48:bf:62:25:88: a4:7e:48:bb:ea:92:66:b9:ab:c9:57:88:56:69:2c:49:67:33: 54:27:9a:2e:fd:19:e4:88:61:6a:89:4c:95:ba:e5:52:29:ec: 13:bf:9e:18:4a:b3:66:a6:24:93:f2:0e:43:aa:1a:a8:a0:e0: b4:30:f7:98:0f:b9:b8:5e:b5:07:7f:56:fb:43:de:a3:c3:7c: eb:40:7d:56:35:42:a3:c0:3a:5b:ea:3b:28:65:07:d7:d5:35: 9f:17:52:7d:4f:2f:98:0c:8f:37:74:bb:a2:29:98:05:00:81: 77:4a:12:14:5b:15:32:06:89:99:44:2e:67:8d:e3:07:50:4f: 21:2c:d2:7c:b3:ab:d4:96:10:39:0a:b1:a7:69:33:65:96:44: f7:81:a3:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSeMKdwx5uNfBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDEzYzhiODAtMTZiZS00MjEwLTlmOGYtNGZlZGY0ZWVmYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzkt1gGS01zMXGrQ+5hc2KHW+AtMl4RbiFT0 GmDjyzWX31f9bLAC52Hsh/aaHkkVGYV2+VNKFQ85YuWLNoYWEx/hUxn/JMem2kqN 6P1+wU4cIZRGJS4C7GYWxR4b9FlY5v5sTH1SDu/rgzIlENdUYaUr8H/FI4t5m4Ww culikYcpPJMGvSJF85VP303dJHRCJETw3x0NDFTvfVcvEReqM4eqUF4sV51LbawB 5kxwzJAPZXeC0fuKC8868WT/9rtY+lQ+YXk39hICt+006s54lXF4OtsobI3SjDXn nB2EGoF5JT6Nc32I2BVOhflcgsnqGVaK6+bGxbEUcHo2AUHw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8HJMRltXEiTFVpSjfTNUGJlfbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZmU2MmVhZTEtYzZmMi0z YmU3LTljNDctNDA0OWY2ZGE4NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1ppMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABenSPG5LNAL7KXPILluqU4noOqrUm3DLyCBV+4otI9SuvZIHm8EYP/W l/tZ24u5mKlZYMgXDKftF0AEdCxEnC4PXnYc1XcffK5HPR8b3UaV9k/wvwYlfVQZ DTr3Bo4ZMj+46tUwPM5Iv2IliKR+SLvqkma5q8lXiFZpLElnM1Qnmi79GeSIYWqJ TJW65VIp7BO/nhhKs2amJJPyDkOqGqig4LQw95gPubhetQd/VvtD3qPDfOtAfVY1 QqPAOlvqOyhlB9fVNZ8XUn1PL5gMjzd0u6IpmAUAgXdKEhRbFTIGiZlELmeN4wdQ TyEs0nyzq9SWEDkKsadpM2WWRPeBo9I= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:56 2025 by rpki-client