$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa File: 24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa (raw, json) Hash identifier: 4Yu2g9RuSOy3tZjaP7BxuQvLV3Q5+mhRNfkv7jfliq4= Subject key identifier: 10:0B:34:F5:3F:DC:AA:35:05:33:19:80:8A:47:7F:FB:1A:80:86:4A Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584ADECBABFF802EED3E338A4080 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 396982 IP address blocks: 23.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:ab:ff:80:2e:ed:3e:33:8a:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=cf1bb022-7a4c-4f50-9e99-06fbc21ef190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:36:e9:ef:8b:fe:0d:83:5f:e9:c0:d0:f3: 82:7b:f6:8e:58:67:d4:4b:b8:f2:c8:eb:9a:3e:32: ba:49:c5:51:a9:2f:51:a9:ee:3a:00:2a:f0:cf:8f: 4c:8c:38:95:fc:2e:4d:5b:f4:38:d3:e6:b4:25:7c: 19:90:b9:ad:ec:80:e7:83:cc:9d:c6:72:0c:80:ef: d4:46:bc:16:9f:da:4b:69:1e:a1:b7:ba:90:d8:60: 48:04:45:3a:0b:49:8e:10:dd:c9:1d:1c:6e:98:26: 95:6e:cc:dc:b5:d7:89:09:ce:21:31:ad:f0:57:01: 00:e9:03:b5:d0:4a:ea:9d:70:a2:c3:2a:a9:6d:35: b4:e9:4c:d7:63:bf:86:d7:5b:29:43:29:1d:34:cc: e9:49:ac:cc:dd:6d:e1:91:84:ef:51:d4:a8:66:74: 5e:f1:b8:93:d8:22:f8:ab:b3:51:76:9d:d5:a4:c8: 53:8a:bc:23:34:da:7b:75:68:2f:cb:6e:58:3f:9e: 9b:81:4b:ee:35:2e:51:a9:1d:c7:96:3d:17:33:f3: 1c:31:3f:64:00:8a:69:b4:c1:1b:f3:c9:76:34:1f: 30:cb:52:32:5b:c3:da:b4:8f:60:b9:c9:36:8a:94: 59:53:59:85:34:85:3e:11:f6:22:61:84:96:8a:04: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:34:F5:3F:DC:AA:35:05:33:19:80:8A:47:7F:FB:1A:80:86:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:96:ad:1e:46:7e:04:a6:2f:f5:ba:1d:b9:75:a6:93:b9:b1: d4:66:f5:45:61:e1:25:9e:93:20:cc:f9:71:50:f1:01:dd:09: f0:c6:74:d0:33:4d:fa:26:37:6a:81:80:06:7a:30:43:87:a6: 9e:84:77:6c:32:e2:26:08:42:cd:78:47:12:3f:46:c0:d7:fd: 5f:ff:48:dc:4b:e9:f8:c4:ef:62:77:01:12:be:d1:ab:d3:9c: 5d:5d:03:dd:2e:d4:01:76:52:b5:be:b9:7b:85:ec:e2:1e:b8: c2:24:e4:df:6d:80:0e:ab:95:ea:19:b2:db:55:71:50:8d:21: 5f:38:16:cc:f4:3b:36:0a:fe:7b:fe:86:28:63:eb:a4:04:0b: db:8a:eb:52:50:c1:84:1f:e4:b3:c4:5d:f5:f0:9e:6a:1b:98: 19:78:90:61:f4:54:c5:91:db:40:e3:88:18:f3:36:71:26:32: bb:32:43:a3:41:76:03:6d:54:51:25:50:6f:5b:ec:3c:c0:73: fb:74:f2:6c:2a:93:71:59:01:f4:55:5a:74:85:02:37:2d:86: cc:58:48:f8:5e:27:57:ab:76:51:4d:90:14:a8:ad:2d:ec:5b: 59:4c:01:56:80:07:5f:76:d7:1a:24:40:f7:04:68:ff:b4:d9: ec:7f:da:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey6v/gC7tPjOKQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2YxYmIwMjItN2E0Yy00ZjUwLTllOTktMDZmYmMyMWVmMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGs26e+L/g2DX+nA0POCe/aOWGfUS7jyyOua PjK6ScVRqS9Rqe46ACrwz49MjDiV/C5NW/Q40+a0JXwZkLmt7IDng8ydxnIMgO/U RrwWn9pLaR6ht7qQ2GBIBEU6C0mOEN3JHRxumCaVbszctdeJCc4hMa3wVwEA6QO1 0ErqnXCiwyqpbTW06UzXY7+G11spQykdNMzpSazM3W3hkYTvUdSoZnRe8biT2CL4 q7NRdp3VpMhTirwjNNp7dWgvy25YP56bgUvuNS5RqR3Hlj0XM/McMT9kAIpptMEb 88l2NB8wy1IyW8PatI9guck2ipRZU1mFNIU+EfYiYYSWigQb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBALNPU/3Ko1BTMZgIpHf/sagIZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMjQyNzM5MzMtY2M1YS0z NmMxLTliZjktY2FmZWQ1ZTdhN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWWrR5GfgSmL/W6Hbl1ppO5sdRm9UVh4SWekyDM+XFQ8QHdCfDGdNAz TfomN2qBgAZ6MEOHpp6Ed2wy4iYIQs14RxI/RsDX/V//SNxL6fjE72J3ARK+0avT nF1dA90u1AF2UrW+uXuF7OIeuMIk5N9tgA6rleoZsttVcVCNIV84Fsz0OzYK/nv+ hihj66QEC9uK61JQwYQf5LPEXfXwnmobmBl4kGH0VMWR20DjiBjzNnEmMrsyQ6NB dgNtVFElUG9b7DzAc/t08mwqk3FZAfRVWnSFAjcthsxYSPheJ1erdlFNkBSorS3s W1lMAVaAB1921xokQPcEaP+02ex/2sM= -----END CERTIFICATE-----Generated at Wed Aug 20 08:42:15 2025 by rpki-client