$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa File: f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa (raw, json) Hash identifier: StkBDTqo6B6H8ac1HcgIy/DXpjM3M7kZ/qTDJ1RVv7A= Subject key identifier: 0A:6E:55:50:E3:E4:E9:5E:3A:69:93:50:5D:20:04:1A:79:11:A0:8C Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584DADAADA35D290F3ABA6283C00 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 13445 IP address blocks: 23.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:da:35:d2:90:f3:ab:a6:28:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=ae562939-5274-4aea-9a44-b6ed60f694a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:73:b2:75:32:6b:6f:0d:5b:c5:a9:ce:b9: 3b:bf:e1:1d:a2:0b:3e:28:d5:8b:9f:93:2d:54:83: a7:90:b5:b4:9d:b4:b3:37:ec:15:4a:27:12:53:52: 10:fd:81:f0:7c:e3:c4:66:c3:43:d2:bd:6d:7d:cf: 4c:2e:58:82:a3:8a:35:3c:27:a9:01:38:2f:8f:d8: 96:de:8b:1f:7b:c3:d1:a9:da:c8:db:9e:9a:f6:33: d0:c1:2d:c3:57:f9:71:24:6d:e7:51:4d:40:74:f8: 3d:17:03:9c:cf:e0:0b:e5:b3:97:b4:a0:51:3e:13: 80:4a:2f:53:52:db:7d:b2:58:2a:14:c5:58:33:3a: 8c:05:0a:46:71:12:2f:97:3a:1e:dd:69:71:61:54: 8c:5b:6d:7b:f1:5f:b1:4b:22:eb:44:f5:d6:41:fc: ea:d8:4f:3b:6a:f5:3d:78:e6:24:6f:e9:ad:ae:29: 09:55:d5:8d:9f:57:28:3a:5a:cd:59:2b:bf:ec:12: 2c:81:a7:86:fb:5a:22:e3:0a:7c:47:ca:75:26:76: b6:4e:d2:81:51:30:fb:cf:fc:69:73:d1:c8:63:8c: 06:89:67:57:14:57:76:b2:04:5d:65:ed:dc:e5:d9: 2b:97:9b:68:4b:36:c5:21:19:45:27:bf:f3:b7:83: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:55:50:E3:E4:E9:5E:3A:69:93:50:5D:20:04:1A:79:11:A0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:34:bb:33:2c:03:5b:e2:f2:f6:66:5f:43:9c:56:bf:55:2d: e9:fd:55:35:56:01:12:dd:13:22:77:c6:90:b9:4a:21:0f:90: a7:b4:9b:8f:77:a7:b0:0d:b5:2e:df:5e:ad:e8:e4:85:68:3d: 4d:a5:93:97:e3:57:de:c3:6d:72:84:be:2b:dd:10:79:3a:7e: ba:89:ed:f9:2c:71:3b:5f:98:38:0c:ff:3f:3e:3f:c2:16:65: 86:73:9e:23:4b:ae:44:e7:1a:ba:1a:65:42:be:ce:51:53:42: cd:52:f3:1f:5a:8b:0a:88:25:31:e4:58:ea:ca:a1:03:bc:b4: 23:28:90:49:70:cd:07:0e:64:fe:92:58:7f:8a:3f:8b:a8:70: a1:29:84:32:df:b0:50:2d:f5:4d:1d:48:f5:03:c9:ab:71:ed: b5:a8:32:5f:7d:95:95:61:61:28:ad:2c:70:ee:5a:79:47:5d: 39:03:1c:56:cd:20:81:12:92:40:8c:c9:5f:61:69:41:b4:17: fc:c8:71:37:74:66:87:8b:a5:6f:a9:dc:76:96:cb:32:89:22: 8e:f7:83:fc:0f:e5:fd:12:ed:af:4b:64:75:37:96:8e:a4:61: e3:56:e1:64:06:ce:1e:77:10:1c:59:9c:9e:5b:2d:af:40:c5: 7d:46:60:5e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2tqto10pDzq6YoPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YWU1NjI5MzktNTI3NC00YWVhLTlhNDQtYjZlZDYwZjY5NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cRzsnUya28NW8Wpzrk7v+Edogs+KNWLn5Mt VIOnkLW0nbSzN+wVSicSU1IQ/YHwfOPEZsND0r1tfc9MLliCo4o1PCepATgvj9iW 3osfe8PRqdrI256a9jPQwS3DV/lxJG3nUU1AdPg9FwOcz+AL5bOXtKBRPhOASi9T Utt9slgqFMVYMzqMBQpGcRIvlzoe3WlxYVSMW2178V+xSyLrRPXWQfzq2E87avU9 eOYkb+mtrikJVdWNn1coOlrNWSu/7BIsgaeG+1oi4wp8R8p1Jna2TtKBUTD7z/xp c9HIY4wGiWdXFFd2sgRdZe3c5dkrl5toSzbFIRlFJ7/zt4NzjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFApuVVDj5OleOmmTUF0gBBp5EaCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjg4ZmZiYjktZjg2YS0z NmMzLWFkMjAtMzMzZTdmYTg0MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAF1kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAejS7MywDW+Ly9mZfQ5xWv1Ut6f1VNVYBEt0TInfGkLlKIQ+Qp7Sbj3en sA21Lt9erejkhWg9TaWTl+NX3sNtcoS+K90QeTp+uont+SxxO1+YOAz/Pz4/whZl hnOeI0uuROcauhplQr7OUVNCzVLzH1qLCoglMeRY6sqhA7y0IyiQSXDNBw5k/pJY f4o/i6hwoSmEMt+wUC31TR1I9QPJq3HttagyX32VlWFhKK0scO5aeUddOQMcVs0g gRKSQIzJX2FpQbQX/MhxN3Rmh4ulb6ncdpbLMokijveD/A/l/RLtr0tkdTeWjqRh 41bhZAbOHncQHFmcnlstr0DFfUZgXg== -----END CERTIFICATE-----Generated at Wed May 13 13:37:27 2026 by rpki-client