$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa File: ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa (raw, json) Hash identifier: jzlGuA4Ci2WbegCu8TwmY0ReWnARwQ9M1qppx4uEcuI= Subject key identifier: B2:70:35:61:FA:39:00:A3:0E:F9:01:0B:BB:F2:61:3F:74:35:A3:CF Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584D44FA3274D52563731AAFBEB2 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 29802 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:32:74:d5:25:63:73:1a:af:be:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=28baf0fb-7e63-47ed-8216-a40439a2e992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:44:9d:66:f9:8e:9f:ef:09:24:ea:a4:e6: ea:29:b1:ab:30:94:8e:1e:d0:0f:7f:4a:3a:fc:c6: f3:0f:d9:bf:15:df:3e:d6:6d:02:34:15:e7:b4:47: b5:b8:bc:73:4f:a0:60:34:c9:9a:85:a7:81:eb:5f: 6c:21:bc:ce:9d:c3:3b:f0:74:07:aa:e5:60:7d:77: a6:c0:4a:14:e8:85:20:f4:43:7f:23:9b:05:a6:d1: 8c:16:b5:50:02:db:0a:81:03:48:8d:8c:c8:2e:38: 0d:b9:b9:4f:d8:53:f6:8f:bf:c2:2b:59:4a:c9:1f: a5:00:27:92:1a:78:04:f0:c9:e9:c7:d9:87:ad:73: 83:b5:a1:78:4c:39:9c:3e:98:4f:f0:75:08:f6:22: 9e:4b:0a:66:3c:94:c9:14:97:1a:ca:74:a0:37:6b: 6a:c8:cf:3e:28:a3:6a:6f:c6:9a:5c:42:06:2d:7f: 8a:61:a3:f5:45:81:d9:c6:b7:a5:a7:f6:d7:55:73: c2:47:f9:64:8c:66:79:66:14:16:1f:3e:7c:d4:3f: 8e:60:b5:54:7e:6e:e2:81:7e:63:37:ae:bd:2c:4f: 28:be:86:2c:59:1f:0e:59:05:bb:b8:de:87:cc:0b: 0e:91:5a:4c:c0:3c:f7:5e:08:78:60:af:e6:7e:6d: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:70:35:61:FA:39:00:A3:0E:F9:01:0B:BB:F2:61:3F:74:35:A3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b4:5c:48:bb:fe:04:f2:c8:7c:36:a6:e9:94:6b:38:14:7e: 61:3d:23:e7:d0:2c:9d:0e:5e:9b:26:fe:0a:75:33:8d:d1:5e: 8b:d1:61:09:65:5c:16:99:5f:b7:72:98:fa:b6:c4:9e:65:6a: 49:00:3e:89:92:0b:3b:71:77:56:58:33:0a:7f:f3:2b:b6:ac: 1c:9a:04:b1:5a:a3:12:fc:c9:56:69:6c:37:d0:d9:f5:b6:65: 2a:fc:71:50:9c:95:b7:4d:f3:54:ba:bf:26:f9:57:79:d2:2c: bb:c3:6a:9d:b5:b0:b7:21:a1:f5:36:4b:84:51:e0:08:7e:a8: 63:61:61:93:00:7d:7c:8e:2a:01:c5:73:76:71:5c:a8:c0:17: 6c:fb:de:5d:29:e2:7f:a3:6c:e2:35:f7:aa:c1:42:6c:4f:99: ce:c2:7d:c1:a7:41:71:f0:3c:11:70:e3:1c:ca:07:d8:b3:11: df:f0:4e:b9:f4:9c:89:16:71:94:5c:c8:de:6a:57:80:5a:a7: 44:a3:27:26:d1:1a:6a:14:5e:40:ad:8f:1b:31:c2:3a:61:f1: 85:71:83:8f:05:de:16:e4:e2:ba:9d:ce:d6:48:01:23:3e:1f: 19:63:b2:84:ca:79:b9:3e:4d:a4:fc:cf:91:7f:97:7f:ed:bf: 99:56:5a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jJ01SVjcxqvvrIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjhiYWYwZmItN2U2My00N2VkLTgyMTYtYTQwNDM5YTJlOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+1EnWb5jp/vCSTqpObqKbGrMJSOHtAPf0o6 /MbzD9m/Fd8+1m0CNBXntEe1uLxzT6BgNMmahaeB619sIbzOncM78HQHquVgfXem wEoU6IUg9EN/I5sFptGMFrVQAtsKgQNIjYzILjgNublP2FP2j7/CK1lKyR+lACeS GngE8Mnpx9mHrXODtaF4TDmcPphP8HUI9iKeSwpmPJTJFJcaynSgN2tqyM8+KKNq b8aaXEIGLX+KYaP1RYHZxrelp/bXVXPCR/lkjGZ5ZhQWHz581D+OYLVUfm7igX5j N669LE8ovoYsWR8OWQW7uN6HzAsOkVpMwDz3Xgh4YK/mfm1JNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJwNWH6OQCjDvkBC7vyYT90NaPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvYmE1MmU4ZjMtNDE3My0z NmMwLTg0Y2ItODdhYWRmMzk3NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm0XEi7/gTyyHw2pumUazgUfmE9I+fQLJ0OXpsm/gp1M43RXovRYQll XBaZX7dymPq2xJ5lakkAPomSCztxd1ZYMwp/8yu2rByaBLFaoxL8yVZpbDfQ2fW2 ZSr8cVCclbdN81S6vyb5V3nSLLvDap21sLchofU2S4RR4Ah+qGNhYZMAfXyOKgHF c3ZxXKjAF2z73l0p4n+jbOI196rBQmxPmc7CfcGnQXHwPBFw4xzKB9izEd/wTrn0 nIkWcZRcyN5qV4Bap0SjJybRGmoUXkCtjxsxwjph8YVxg48F3hbk4rqdztZIASM+ HxljsoTKebk+TaT8z5F/l3/tv5lWWkE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:20 2026 by rpki-client