$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa File: 5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa (raw, json) Hash identifier: qz4BAP80QlGSEjLwVk4DJaNUIF9Y6lJ8P4FM4iMY6lI= Subject key identifier: B4:8E:FA:E2:B2:D7:CE:92:6B:17:19:68:30:2A:95:A8:5A:5C:D5:45 Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584D44FA3241E3DD61AF125AB740 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:32:41:e3:dd:61:af:12:5a:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=987c14f4-958a-4597-81d9-8ae2cbd064a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:2a:7b:32:e1:8c:bd:33:80:d1:09:0f:9e: 0e:19:a2:79:61:12:c3:b7:94:47:2c:ae:6a:50:0a: f2:9c:63:ae:87:86:5a:66:d6:4e:3e:cc:55:59:5a: fb:86:3d:b0:28:30:4a:04:ba:a0:3d:1e:18:8f:d3: e9:d6:79:25:10:95:e1:67:d5:ed:cb:e8:1c:42:9a: 0e:09:6b:3c:80:56:f3:3a:f3:ba:20:c3:25:b3:a4: 6f:06:18:56:67:db:e6:c6:2c:76:11:a1:97:2e:14: ad:65:fd:cf:a0:0c:3c:b9:c4:f3:a4:47:b3:21:11: 6c:85:ef:f7:9f:32:a4:fb:52:37:ff:95:d9:15:63: 48:d6:7f:23:99:67:8a:61:ee:22:83:ab:26:0d:83: c7:7d:fa:c0:cf:5f:7c:66:45:14:41:6c:b9:10:a4: af:0b:8d:17:bc:9a:39:aa:36:93:6a:f7:c1:61:1a: 01:cd:58:2d:ce:8c:bf:9c:43:a5:fa:d8:f3:5b:58: ab:77:f8:63:19:90:0b:dd:9e:57:9c:43:2d:f0:2c: 95:e7:c2:b7:4f:80:c3:e7:73:04:d2:54:22:94:ba: 67:7f:c0:a7:01:20:ea:59:82:0c:4e:74:8c:ed:6c: 64:52:e1:15:66:18:33:90:83:4a:3c:22:67:a2:71: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8E:FA:E2:B2:D7:CE:92:6B:17:19:68:30:2A:95:A8:5A:5C:D5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:db:30:e6:69:f8:85:3f:fe:d1:d3:46:fd:85:53:07:8d:f4: 88:98:0e:77:97:9e:a1:9d:10:14:a8:42:50:50:b1:b3:47:fc: c8:7e:f8:81:ef:03:8d:c5:7f:be:03:b7:73:78:fe:a6:11:8a: 93:c8:25:fa:12:f9:29:a8:04:05:08:3b:ba:83:96:b9:16:25: 0c:68:e9:9e:e4:1b:bc:70:14:7c:01:8a:c8:ba:33:39:7e:bf: b2:ba:d9:51:f2:be:91:1c:92:56:04:94:5c:6f:3d:d0:8a:3c: 35:43:62:bf:9d:f6:d9:8b:71:7a:a1:28:1f:09:ee:4f:98:2c: 73:2b:28:bf:68:7a:c9:5e:16:37:12:13:b5:16:28:b4:75:ab: 39:76:cf:08:bd:42:78:2a:05:50:ea:dc:43:46:1c:02:08:bd: 2b:a1:82:1a:04:c2:32:32:ee:55:a9:a3:ed:20:b6:82:0d:02: b7:8d:76:a5:39:7a:78:07:c1:ec:7f:9b:9b:bb:73:99:23:d4: 60:17:ea:09:d6:ef:1a:51:39:8e:8e:3c:90:c0:69:d9:48:01: 0d:a7:21:e2:63:4c:69:42:b3:d2:ed:f9:b4:7b:d4:6b:1f:6c: 3c:1f:84:e1:97:50:73:28:98:02:04:16:0d:2b:ac:46:42:84: c9:61:7d:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jJB491hrxJat0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTg3YzE0ZjQtOTU4YS00NTk3LTgxZDktOGFlMmNiZDA2NGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFgqezLhjL0zgNEJD54OGaJ5YRLDt5RHLK5q UArynGOuh4ZaZtZOPsxVWVr7hj2wKDBKBLqgPR4Yj9Pp1nklEJXhZ9Xty+gcQpoO CWs8gFbzOvO6IMMls6RvBhhWZ9vmxix2EaGXLhStZf3PoAw8ucTzpEezIRFshe/3 nzKk+1I3/5XZFWNI1n8jmWeKYe4ig6smDYPHffrAz198ZkUUQWy5EKSvC40XvJo5 qjaTavfBYRoBzVgtzoy/nEOl+tjzW1ird/hjGZAL3Z5XnEMt8CyV58K3T4DD53ME 0lQilLpnf8CnASDqWYIMTnSM7WxkUuEVZhgzkINKPCJnonFaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSO+uKy186SaxcZaDAqlahaXNVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvNWY1Yzk3N2QtYzhmNy0z NWRkLThmNjgtM2JhNmUzYWEyMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/bMOZp+IU//tHTRv2FUweN9IiYDneXnqGdEBSoQlBQsbNH/Mh++IHv A43Ff74Dt3N4/qYRipPIJfoS+SmoBAUIO7qDlrkWJQxo6Z7kG7xwFHwBisi6Mzl+ v7K62VHyvpEcklYElFxvPdCKPDVDYr+d9tmLcXqhKB8J7k+YLHMrKL9oesleFjcS E7UWKLR1qzl2zwi9QngqBVDq3ENGHAIIvSuhghoEwjIy7lWpo+0gtoINAreNdqU5 engHwex/m5u7c5kj1GAX6gnW7xpROY6OPJDAadlIAQ2nIeJjTGlCs9Lt+bR71Gsf bDwfhOGXUHMomAIEFg0rrEZChMlhfak= -----END CERTIFICATE-----Generated at Thu Mar 26 05:04:56 2026 by rpki-client