
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa
File: 24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa (raw, json)
Hash identifier: gX6DdDaUgcQQ9hlEP1d6rNiCTjBMwahppsHatUA0vUI=
Subject key identifier: 5C:B5:E5:4A:5A:F8:B2:CA:53:9F:4B:F3:AE:4A:C0:F3:75:70:A1:29
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F4328584D80FFE02EE62D5AD45E164880
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 396982
IP address blocks: 23.89.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:80:ff:e0:2e:e6:2d:5a:d4:5e:16:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=b6be7025-83e8-47da-8e3c-43909e8f838b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:a4:63:a0:19:a6:df:3d:70:fc:a1:b0:c3:
a1:9a:9c:92:9f:8f:4c:10:dc:19:36:60:b3:6b:4c:
99:5a:37:ca:12:69:80:c6:63:0c:3e:a2:bd:bc:a1:
f7:1f:ad:18:7c:40:8c:7d:09:61:10:ec:d1:17:fc:
d7:a6:7c:95:ba:de:9f:48:71:3e:bd:52:25:35:05:
35:68:05:35:47:8d:fa:8a:91:3c:00:34:77:65:69:
06:f3:51:5f:10:cc:14:3f:01:a1:9e:a7:3f:15:31:
6a:6d:39:a0:61:33:34:2c:dc:07:6d:48:4a:34:1e:
1f:d6:a4:c7:b7:ff:49:39:84:ce:fd:7f:2a:4c:e9:
13:32:21:58:42:e4:02:25:dd:58:74:72:ef:a1:d8:
07:f0:f5:2a:0a:db:8e:c0:3d:cc:0a:04:92:c3:e4:
14:23:72:2c:8f:9e:33:9e:ba:b8:cc:30:94:00:48:
b9:10:e9:88:84:0b:53:8a:12:4c:5a:d0:1f:d0:00:
a9:a3:76:25:a1:f7:8f:71:a0:54:63:67:8d:74:ac:
97:c5:0a:f1:fd:af:82:fd:12:20:d9:09:44:4d:ce:
27:da:75:ad:5b:35:e4:b5:2b:fb:71:bb:10:4a:d2:
94:5e:a8:07:c2:74:33:ca:b1:cc:8e:91:47:03:c1:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:E5:4A:5A:F8:B2:CA:53:9F:4B:F3:AE:4A:C0:F3:75:70:A1:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.89.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ec:b6:33:a1:dc:0e:35:5b:70:f3:73:be:a5:5e:20:c8:92:
22:cd:0a:11:6e:92:bf:c7:11:42:27:56:e9:8f:4f:87:55:34:
9f:33:90:ba:8d:3f:f9:2d:e1:8b:45:06:94:1f:9f:7c:3c:b1:
5f:00:44:9d:77:e2:47:d2:e0:ea:13:ee:15:7c:9b:53:65:93:
be:d5:65:2a:05:ce:2e:2a:f6:a8:7a:dd:8b:aa:28:aa:8e:94:
00:97:8f:0f:1a:c0:5d:53:f2:88:79:b0:5b:4f:15:8f:20:cf:
56:95:7a:b4:91:32:6e:65:70:44:d1:43:d6:c9:2c:e7:61:2f:
86:f6:c1:a5:a3:25:61:e2:7c:0c:ce:88:49:4b:6f:16:b7:d6:
83:2f:b6:48:4b:f0:f8:ac:07:4e:88:74:89:17:9c:42:27:7e:
d1:38:c3:07:b4:4a:37:2a:9b:b8:72:d1:0a:9d:7c:b6:04:f7:
07:af:e1:68:6f:60:ee:e9:4d:4b:54:a9:b5:8b:4e:c8:39:28:
ab:fe:b9:f8:0e:bc:d6:1e:3d:c2:b1:6f:53:84:e1:b9:f2:54:
56:2e:4b:8a:5d:da:93:a3:f3:3a:55:73:06:2d:87:3f:66:85:
3b:38:54:24:a0:ae:03:52:06:4c:3e:d4:e0:83:e9:1b:49:25:
be:84:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:07:11 2026 by rpki-client