$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa File: 24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa (raw, json) Hash identifier: DFtBNLR5nbcm/3c6KJYPkV1pm+C3YsjzIbH3sf5Mwvw= Subject key identifier: 38:01:35:1A:11:E5:19:0A:8F:F9:DD:E1:EE:D2:2D:88:98:D3:A2:76 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584F03A77A1141F515515D18C280 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396982 IP address blocks: 23.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:7a:11:41:f5:15:51:5d:18:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=054cacf5-09c0-4589-9b0a-03e7e7d9cd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:64:e1:75:cd:53:ea:a7:c6:be:52:7b:c4: 73:51:05:81:82:91:fb:86:3d:07:94:f1:4f:d4:74: 35:73:5d:ad:cc:f8:7b:13:15:53:0d:9d:65:5f:4d: bb:51:2f:fd:3e:63:12:41:c2:2f:e5:ff:19:b0:6a: 46:83:2f:5c:78:df:d7:0b:2a:60:52:50:06:37:58: b3:df:b2:19:46:d0:5f:25:50:41:67:f9:8e:e6:60: 1c:7a:31:60:bb:ea:2c:37:39:8b:0e:4c:2e:01:0c: cc:19:c0:40:01:6d:64:81:63:73:41:dc:a6:c8:27: a4:0c:26:99:bb:63:3b:99:d2:5b:f9:6c:ef:af:a3: dd:06:49:0f:db:0b:8e:a0:a7:42:c1:5f:dd:d4:6f: b4:33:8d:9c:50:a0:55:40:29:83:9f:51:c6:a2:36: 5a:ab:27:da:aa:e7:d0:6e:eb:e4:bb:1c:9b:c0:e2: 07:73:7d:99:f9:5f:3c:a4:ab:03:4d:79:a1:12:9e: 01:a7:76:e8:4f:68:95:a6:b3:50:af:c8:39:e6:58: 12:13:41:7f:36:f3:53:f4:49:8b:b5:11:46:09:40: 95:5c:8c:32:00:56:77:c5:41:a1:59:03:b9:25:c3: bc:5b:90:f5:ad:67:9e:be:e7:01:0a:dc:03:38:e9: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:01:35:1A:11:E5:19:0A:8F:F9:DD:E1:EE:D2:2D:88:98:D3:A2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d5:7e:89:65:30:0a:08:70:e2:00:0d:c6:0d:a7:1d:ef:55: 98:fc:19:72:d0:11:e0:95:60:9e:40:18:06:50:5d:28:9d:4f: c3:fc:75:21:b5:34:8b:95:94:68:bd:1c:f8:fa:23:d8:02:14: 56:f0:3f:72:27:48:df:12:7d:2d:b9:72:79:5c:db:eb:d0:09: 99:48:5d:61:02:94:d7:14:dd:17:c3:4f:69:63:fc:5f:72:83: 1d:f0:2d:72:31:df:05:c3:df:ff:d1:3d:39:b4:07:09:ab:13: 29:87:19:71:64:08:e8:f5:62:c8:ea:53:b9:ce:48:d9:1c:e2: 45:8c:91:73:84:41:79:c2:a9:2a:b4:57:99:de:50:7f:8c:c4: d3:13:5d:ec:a8:d6:34:eb:e8:d4:b0:75:df:ec:ac:bc:03:67: 98:9f:87:eb:64:d4:f4:c9:a0:e2:7d:70:8f:79:f6:b0:e2:10: 75:c0:00:91:0b:68:d4:f1:53:39:9f:ff:60:f5:89:f0:70:1e: 2f:23:d6:10:5c:89:42:87:9c:a3:5d:9b:bc:d6:ab:17:3c:b9: 3c:e6:08:ce:6c:58:48:89:0e:6f:5e:df:df:48:dd:90:3c:1a: a0:1d:ab:97:32:b0:33:3c:ba:25:15:b3:2b:48:5c:39:1f:43: 1b:a5:12:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp3oRQfUVUV0YwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MDU0Y2FjZjUtMDljMC00NTg5LTliMGEtMDNlN2U3ZDljZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupVk4XXNU+qnxr5Se8RzUQWBgpH7hj0HlPFP 1HQ1c12tzPh7ExVTDZ1lX027US/9PmMSQcIv5f8ZsGpGgy9ceN/XCypgUlAGN1iz 37IZRtBfJVBBZ/mO5mAcejFgu+osNzmLDkwuAQzMGcBAAW1kgWNzQdymyCekDCaZ u2M7mdJb+Wzvr6PdBkkP2wuOoKdCwV/d1G+0M42cUKBVQCmDn1HGojZaqyfaqufQ buvkuxybwOIHc32Z+V88pKsDTXmhEp4Bp3boT2iVprNQr8g55lgSE0F/NvNT9EmL tRFGCUCVXIwyAFZ3xUGhWQO5JcO8W5D1rWeevucBCtwDOOngxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgBNRoR5RkKj/nd4e7SLYiY06J2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMjQyNzM5MzMtY2M1YS0z NmMxLTliZjktY2FmZWQ1ZTdhN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXVfollMAoIcOIADcYNpx3vVZj8GXLQEeCVYJ5AGAZQXSidT8P8dSG1 NIuVlGi9HPj6I9gCFFbwP3InSN8SfS25cnlc2+vQCZlIXWEClNcU3RfDT2lj/F9y gx3wLXIx3wXD3//RPTm0BwmrEymHGXFkCOj1YsjqU7nOSNkc4kWMkXOEQXnCqSq0 V5neUH+MxNMTXeyo1jTr6NSwdd/srLwDZ5ifh+tk1PTJoOJ9cI959rDiEHXAAJEL aNTxUzmf/2D1ifBwHi8j1hBciUKHnKNdm7zWqxc8uTzmCM5sWEiJDm9e399I3ZA8 GqAdq5cysDM8uiUVsytIXDkfQxulEp8= -----END CERTIFICATE-----Generated at Sat Sep 12 14:24:22 2026 by rpki-client