$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa File: 24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa (raw, json) Hash identifier: aBv7N+Q93yBLCOp65nvckC2/WJL565us+U66MtVWsok= Subject key identifier: 5E:44:35:62:07:DC:DE:C5:EB:D5:0A:BD:5E:E3:C6:CA:20:71:32:F6 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584E6144A76CE66F05CD83065180 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 396982 IP address blocks: 23.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:a7:6c:e6:6f:05:cd:83:06:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=7fe73040-9fee-455f-95ac-efd46c9a22d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:33:13:78:7d:5e:00:dd:04:92:27:cd:42: 1f:ef:39:5f:19:d6:e9:54:dd:2f:59:20:a1:29:74: a5:1d:c2:a7:b0:35:6d:99:bf:e1:38:48:d0:df:45: c1:f5:c3:20:8c:46:0e:92:7c:bf:8d:2f:76:31:0e: 07:4a:84:ca:6a:b0:da:60:80:ad:7c:aa:37:34:33: a3:8c:64:d6:b2:7e:c6:6f:56:3d:72:ae:71:41:c0: 14:a1:03:4a:cb:50:a8:af:ee:40:d9:84:34:93:a6: e4:42:21:f5:2e:e7:6b:86:e2:31:0c:62:63:29:4c: 5c:70:b2:54:8b:37:26:7b:c9:08:ff:24:09:e9:e6: 08:9d:95:31:59:fe:24:13:b5:65:e6:5f:51:0a:ca: d2:68:f4:7a:6e:1b:4e:e1:6e:db:63:83:d9:2f:cf: 68:99:e8:09:3e:e7:32:b3:e7:b8:02:7f:e7:5a:a6: fd:4f:52:6d:05:a1:c1:3e:0e:cf:0a:21:0b:6f:8c: 67:81:78:58:84:1b:40:c5:46:0e:65:8e:d9:bd:81: 70:0b:c8:bc:fb:c4:14:9a:66:8a:19:1b:09:c8:78: ca:0d:8c:9e:f7:ea:a2:c1:bc:e7:63:3a:fb:42:f9: 3d:7d:f6:a3:2d:08:eb:e0:4d:bf:e9:21:c8:51:7d: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:44:35:62:07:DC:DE:C5:EB:D5:0A:BD:5E:E3:C6:CA:20:71:32:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:16:73:52:f7:c8:6e:8e:fd:93:24:c7:99:88:f6:dd:d1:35: 02:2d:35:a7:39:de:57:8f:c1:29:12:06:bc:e1:4d:1a:91:36: 1f:76:94:11:0b:42:55:46:ea:a4:04:18:fd:24:67:33:8e:32: 54:3c:40:13:4f:29:5c:55:7d:81:f1:5f:0c:9b:a8:86:4f:f5: 01:44:b2:b4:6f:d6:e2:a7:17:04:56:97:e4:f7:08:ef:34:6a: f7:18:44:79:23:ac:55:88:14:5e:43:37:bd:8b:37:c0:b8:07: 84:e8:95:37:b7:91:26:08:17:50:34:6c:8f:43:dd:6d:55:a1: 70:6a:6e:3b:92:ea:b8:0e:21:67:16:c8:00:57:31:07:65:98: e1:ee:51:11:e6:32:46:6d:cf:59:ae:b3:98:4c:f6:65:7c:f6: 6b:d4:f6:65:3d:d2:d3:75:0a:73:5c:e7:f7:9e:a0:64:a2:57: ef:46:a6:1b:2c:9f:dd:a8:52:92:37:d4:d6:09:10:7c:ab:69: 91:5c:60:e8:ce:68:e1:43:fe:05:a6:09:61:06:16:8c:c6:ba: 5a:b8:a5:05:2e:23:b6:36:b8:a8:0c:9d:01:74:fb:05:6c:0e: 31:5d:bd:69:28:c5:7d:0e:35:0a:44:3a:3d:5b:5e:e0:e7:be: cb:c4:aa:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRKds5m8FzYMGUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk N2ZlNzMwNDAtOWZlZS00NTVmLTk1YWMtZWZkNDZjOWEyMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKkzE3h9XgDdBJInzUIf7zlfGdbpVN0vWSCh KXSlHcKnsDVtmb/hOEjQ30XB9cMgjEYOkny/jS92MQ4HSoTKarDaYICtfKo3NDOj jGTWsn7Gb1Y9cq5xQcAUoQNKy1Cor+5A2YQ0k6bkQiH1LudrhuIxDGJjKUxccLJU izcme8kI/yQJ6eYInZUxWf4kE7Vl5l9RCsrSaPR6bhtO4W7bY4PZL89omegJPucy s+e4An/nWqb9T1JtBaHBPg7PCiELb4xngXhYhBtAxUYOZY7ZvYFwC8i8+8QUmmaK GRsJyHjKDYye9+qiwbznYzr7Qvk9ffajLQjr4E2/6SHIUX3XHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5ENWIH3N7F69UKvV7jxsogcTL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMjQyNzM5MzMtY2M1YS0z NmMxLTliZjktY2FmZWQ1ZTdhN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkWc1L3yG6O/ZMkx5mI9t3RNQItNac53lePwSkSBrzhTRqRNh92lBEL QlVG6qQEGP0kZzOOMlQ8QBNPKVxVfYHxXwybqIZP9QFEsrRv1uKnFwRWl+T3CO80 avcYRHkjrFWIFF5DN72LN8C4B4TolTe3kSYIF1A0bI9D3W1VoXBqbjuS6rgOIWcW yABXMQdlmOHuURHmMkZtz1mus5hM9mV89mvU9mU90tN1CnNc5/eeoGSiV+9Gphss n92oUpI31NYJEHyraZFcYOjOaOFD/gWmCWEGFozGulq4pQUuI7Y2uKgMnQF0+wVs DjFdvWkoxX0ONQpEOj1bXuDnvsvEqmY= -----END CERTIFICATE-----Generated at Mon Jul 20 01:16:23 2026 by rpki-client