$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa File: ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa (raw, json) Hash identifier: y+O3IDK4+lEU5DlcOz4Bi6c3YEVrv0SuTUFFKE07Isk= Subject key identifier: D2:09:A7:FA:F6:FE:73:23:15:AA:46:93:11:67:2C:76:72:09:45:61 Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584B84E770821150BE6A2AA21840 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 29802 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:70:82:11:50:be:6a:2a:a2:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=304e6287-6281-4407-91ba-a73483c8b42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:70:c5:e1:79:08:94:79:4c:2c:9d:a2:7f: 8c:29:73:f6:3a:8c:44:16:2e:66:1b:44:49:e8:bf: 58:f1:2a:dd:df:68:3f:b0:f4:38:c5:ee:d2:d8:c9: 26:8c:d2:b8:fd:0a:dd:64:58:f6:81:33:04:9a:dc: 39:73:3f:ea:1b:0a:22:38:0a:02:a1:ab:70:93:33: 57:90:5e:77:20:94:82:b9:ca:ff:10:db:8f:e4:23: ad:21:9e:82:1a:ae:5e:07:45:00:f5:85:e1:29:c8: f5:a2:8d:96:2d:33:b5:35:13:4a:86:f8:10:bd:bc: 64:3c:3d:ff:f2:7d:af:24:b7:f2:af:67:69:3a:4a: 9c:56:2d:fd:15:cd:8c:7a:f0:c0:27:78:09:f1:0e: ab:09:50:33:aa:65:0d:c1:b9:f2:bf:30:13:8a:71: d3:ff:48:4a:3f:02:51:d6:a0:c0:16:20:4f:81:2a: 50:4d:bf:73:31:7e:e0:82:4d:37:d9:85:48:be:df: da:da:3d:e3:23:5c:53:22:3b:db:63:e0:43:8e:62: 9d:f6:f1:13:3f:58:ac:b1:c3:7c:bb:d1:54:d0:af: a2:0e:f5:e3:ca:46:1c:01:fd:1c:5a:0e:46:55:1a: 63:8d:c4:cc:f1:9d:f6:4d:d8:b5:5f:b0:4c:13:f7: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:A7:FA:F6:FE:73:23:15:AA:46:93:11:67:2C:76:72:09:45:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ac:3c:87:6f:00:9e:e9:b4:65:28:91:23:24:a3:c3:77:81: ea:2a:c7:c0:a0:48:64:30:12:92:59:13:16:50:19:f3:7f:72: 59:70:91:a8:e4:84:ae:c0:7e:91:ec:a9:2a:2a:65:e9:dd:02: 82:94:01:26:af:83:7b:37:31:d0:66:45:51:d8:50:f2:0d:d4: 5b:e4:45:52:c1:e4:40:26:da:0a:b0:42:b0:98:af:12:b0:c3: 2a:36:41:6b:99:80:e7:ca:04:bc:2e:bc:3b:ca:f9:b9:8e:b2: 0e:eb:6e:b2:83:25:39:b8:e7:7f:45:46:5c:d9:94:38:5e:2f: 0d:cd:3e:a7:f9:03:e0:22:42:4b:cc:ff:f8:f9:2b:b6:68:6e: 12:e7:35:67:f3:8a:d1:88:df:f1:8b:0c:67:89:8a:2e:e0:e6: 84:a0:7f:3c:70:8e:75:a0:d2:07:c7:9e:ff:95:47:ca:21:bf: a2:82:2f:a7:2a:4d:5e:45:28:e7:cc:d4:b0:be:de:74:29:91: 73:41:f5:82:bb:70:22:0e:45:77:58:2b:7f:bf:f0:cc:7d:2a: fa:1c:f4:18:e8:a0:2b:b4:de:bb:cf:fb:68:a7:2a:70:35:48: 0e:5f:78:62:2f:f4:e4:c7:fd:54:0f:a0:77:78:19:4e:26:f1: f8:d1:fc:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53CCEVC+aiqiGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MzA0ZTYyODctNjI4MS00NDA3LTkxYmEtYTczNDgzYzhiNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroNwxeF5CJR5TCydon+MKXP2OoxEFi5mG0RJ 6L9Y8Srd32g/sPQ4xe7S2MkmjNK4/QrdZFj2gTMEmtw5cz/qGwoiOAoCoatwkzNX kF53IJSCucr/ENuP5COtIZ6CGq5eB0UA9YXhKcj1oo2WLTO1NRNKhvgQvbxkPD3/ 8n2vJLfyr2dpOkqcVi39Fc2MevDAJ3gJ8Q6rCVAzqmUNwbnyvzATinHT/0hKPwJR 1qDAFiBPgSpQTb9zMX7ggk032YVIvt/a2j3jI1xTIjvbY+BDjmKd9vETP1isscN8 u9FU0K+iDvXjykYcAf0cWg5GVRpjjcTM8Z32Tdi1X7BME/dNkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIJp/r2/nMjFapGkxFnLHZyCUVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvYmE1MmU4ZjMtNDE3My0z NmMwLTg0Y2ItODdhYWRmMzk3NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGysPIdvAJ7ptGUokSMko8N3geoqx8CgSGQwEpJZExZQGfN/cllwkajk hK7AfpHsqSoqZendAoKUASavg3s3MdBmRVHYUPIN1FvkRVLB5EAm2gqwQrCYrxKw wyo2QWuZgOfKBLwuvDvK+bmOsg7rbrKDJTm4539FRlzZlDheLw3NPqf5A+AiQkvM //j5K7ZobhLnNWfzitGI3/GLDGeJii7g5oSgfzxwjnWg0gfHnv+VR8ohv6KCL6cq TV5FKOfM1LC+3nQpkXNB9YK7cCIORXdYK3+/8Mx9Kvoc9BjooCu03rvP+2inKnA1 SA5feGIv9OTH/VQPoHd4GU4m8fjR/M8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:03 2025 by rpki-client