$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa File: 5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa (raw, json) Hash identifier: uJhX8uSEeIUlyFBFVMpjT6NPIvqjPWlyjdXphaIYTlc= Subject key identifier: 0E:A6:9B:56:65:D0:3D:A7:A8:4E:35:43:F7:EE:FE:E1:7A:AC:B5:B3 Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584B84E77045E17FE94BE70297F0 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:70:45:e1:7f:e9:4b:e7:02:97:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=c9ab4ee6-3b17-43aa-b793-c876809d07d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:0f:4f:43:1b:f4:1a:91:df:b4:eb:46:fb: 48:35:10:91:39:cc:99:bc:4b:ce:74:e9:90:76:e8: ac:2e:17:3d:5b:82:e7:c5:b9:4b:32:ce:09:39:62: 81:92:92:aa:7a:10:0a:5c:a3:00:b7:da:6f:85:ef: 24:e9:9e:d7:34:b2:38:94:83:0a:9f:18:a3:c8:41: 51:71:6d:48:ce:c8:d9:17:5b:2f:01:5e:ca:08:3f: de:47:71:3f:0f:b9:7f:7b:b4:09:60:14:76:27:3f: 89:4a:69:57:63:e5:8b:44:26:41:62:27:c2:e7:ff: 6c:fc:fb:9c:8e:3c:43:09:30:7e:d6:4a:6f:e9:5f: be:7f:83:15:01:86:b8:8c:05:c3:ef:13:4a:af:49: c3:03:f4:f6:90:dc:b9:9e:f3:78:92:41:45:d5:07: f1:e4:26:8e:fd:66:9f:86:cd:37:1b:e6:13:e5:78: bd:8f:01:45:5a:92:94:ab:8d:4a:97:09:4f:6e:9c: c5:8d:72:0e:04:56:29:cd:66:0f:2e:ea:4f:a7:a9: bb:18:d8:fc:98:d4:b9:a0:02:3c:b4:c9:cc:e2:4b: ad:2a:4b:63:be:ba:26:b2:d0:ff:b1:4a:02:05:2e: d6:3e:7b:a4:79:10:db:f1:6d:fa:1f:1b:8d:a6:e3: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A6:9B:56:65:D0:3D:A7:A8:4E:35:43:F7:EE:FE:E1:7A:AC:B5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:26:fe:a5:84:ed:9f:4a:28:93:fd:f2:cb:f3:35:fd:c4:38: e0:00:2c:99:26:b6:61:92:fc:1a:c4:66:ea:87:25:48:4e:47: e2:87:e5:aa:38:09:3b:eb:23:7d:9f:00:f2:33:e8:4e:c1:01: cc:ac:78:1f:2f:94:10:32:e2:60:7b:48:b0:4e:5d:71:b7:44: 79:78:06:84:39:ec:9e:b8:a2:34:1d:50:2a:a7:3a:39:7d:78: 10:bd:58:fd:d5:01:00:35:61:dc:da:a4:4e:b9:99:6e:9d:61: 41:5f:02:4b:df:fa:28:16:0d:df:5c:9b:f0:a6:24:7e:5a:d9: a9:b9:2a:ed:3e:2f:82:bb:8c:24:dd:a8:90:e3:f2:82:15:2a: 8a:eb:c4:92:4c:ff:e0:67:79:7a:3d:40:43:35:ff:ca:33:1c: 45:a3:fa:d0:00:5c:aa:09:51:b5:bc:a3:cb:23:bf:62:a7:f1: b4:8d:c4:ac:b1:cf:38:38:bf:7f:2b:4c:6a:25:9e:d9:5e:fa: 29:52:87:ea:89:e0:a0:a8:74:65:1f:a1:d4:4f:24:94:d0:a1: cf:00:8c:a6:d1:2b:f2:12:49:0e:fb:99:56:c0:ab:53:05:66: 47:e6:f8:0c:27:8d:c6:e3:73:46:ad:6d:2c:d5:22:c4:21:48: 5f:ce:0e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53BF4X/pS+cCl/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YzlhYjRlZTYtM2IxNy00M2FhLWI3OTMtYzg3NjgwOWQwN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvoPT0Mb9BqR37TrRvtINRCROcyZvEvOdOmQ duisLhc9W4LnxblLMs4JOWKBkpKqehAKXKMAt9pvhe8k6Z7XNLI4lIMKnxijyEFR cW1IzsjZF1svAV7KCD/eR3E/D7l/e7QJYBR2Jz+JSmlXY+WLRCZBYifC5/9s/Puc jjxDCTB+1kpv6V++f4MVAYa4jAXD7xNKr0nDA/T2kNy5nvN4kkFF1Qfx5CaO/Waf hs03G+YT5Xi9jwFFWpKUq41KlwlPbpzFjXIOBFYpzWYPLupPp6m7GNj8mNS5oAI8 tMnM4kutKktjvromstD/sUoCBS7WPnukeRDb8W36HxuNpuPbBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6mm1Zl0D2nqE41Q/fu/uF6rLWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvNWY1Yzk3N2QtYzhmNy0z NWRkLThmNjgtM2JhNmUzYWEyMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIm/qWE7Z9KKJP98svzNf3EOOAALJkmtmGS/BrEZuqHJUhOR+KH5ao4 CTvrI32fAPIz6E7BAcyseB8vlBAy4mB7SLBOXXG3RHl4BoQ57J64ojQdUCqnOjl9 eBC9WP3VAQA1YdzapE65mW6dYUFfAkvf+igWDd9cm/CmJH5a2am5Ku0+L4K7jCTd qJDj8oIVKorrxJJM/+BneXo9QEM1/8ozHEWj+tAAXKoJUbW8o8sjv2Kn8bSNxKyx zzg4v38rTGolntle+ilSh+qJ4KCodGUfodRPJJTQoc8AjKbRK/ISSQ77mVbAq1MF Zkfm+Awnjcbjc0atbSzVIsQhSF/ODoA= -----END CERTIFICATE-----Generated at Sun Oct 19 23:02:37 2025 by rpki-client