$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/eea8b073-d04e-3f44-9019-aea66a4ba48e.roa File: eea8b073-d04e-3f44-9019-aea66a4ba48e.roa (raw, json) Hash identifier: ossjk5CxtLXpCli1pFVzAoJNQLZOxB7XlLIXCCVcOeQ= Subject key identifier: 3F:99:D6:93:3A:8B:43:15:2A:48:DE:96:1C:3B:2C:1F:46:D9:87:0A Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584D44FA322EF30DFE860A7A8B80 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/eea8b073-d04e-3f44-9019-aea66a4ba48e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:32:2e:f3:0d:fe:86:0a:7a:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8031f3a5-0080-460d-becb-90a28ab0d1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c1:dd:ec:0c:40:ac:a3:20:1d:f5:8c:ce:4c: 29:31:0b:5a:68:f5:2b:2d:dc:8a:c8:33:82:14:d3: b9:36:4f:33:13:fa:7d:0d:28:21:f1:9d:3b:be:b4: 56:48:72:28:67:4a:66:2a:c1:c9:fb:a8:a9:fc:74: b4:8c:30:11:1e:24:b9:57:f6:d9:79:70:d7:fb:64: 3c:f3:75:42:39:b6:0e:58:a3:48:c7:53:da:24:66: 70:df:74:fa:a3:6b:88:7e:65:2f:07:ea:6a:78:ea: 5d:1a:9d:73:97:d8:a9:87:90:59:fa:88:97:29:03: e6:f7:81:aa:cc:cd:48:da:41:1c:12:e9:a8:a8:e2: a8:3a:4c:dc:44:c5:d8:e0:9a:3b:ed:f2:74:e8:9d: 65:37:4b:e0:0e:98:35:17:88:b7:3f:06:62:25:b4: a5:2d:42:b9:1c:91:5e:44:32:ef:38:fe:57:d3:4a: 67:ef:0c:80:3a:2d:56:b2:91:35:b2:52:5c:66:72: cc:11:36:f6:6c:7b:81:68:2a:08:f1:3d:6b:74:78: f0:c0:db:04:36:8e:b1:f5:5c:4d:bf:c4:24:e9:88: 52:41:5d:5c:6c:84:48:52:a8:7e:a7:4d:16:a7:4e: ac:89:4a:e2:aa:10:d0:19:b3:c1:ea:9d:17:d8:52: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:99:D6:93:3A:8B:43:15:2A:48:DE:96:1C:3B:2C:1F:46:D9:87:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/eea8b073-d04e-3f44-9019-aea66a4ba48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:07:1f:b9:03:77:83:c6:f2:0c:a1:c4:e5:10:aa:7e:52:7b: f7:40:15:41:3d:b3:c5:e4:3f:52:e2:4f:b8:21:94:12:d4:3c: b4:9f:79:b5:25:fc:59:92:3c:f2:a9:b2:8c:a5:05:08:93:59: 28:01:cc:6e:04:30:96:b0:33:74:7c:b5:23:6d:10:4e:0a:b1: 7a:1f:1a:72:36:1c:ae:f0:45:6d:67:21:dc:38:1f:ea:78:c5: 6b:dc:e7:db:de:86:b1:d0:ab:8b:86:36:a8:81:09:26:bd:67: 4b:76:53:87:c2:ae:ff:0a:b0:60:97:dc:37:25:d9:07:d8:7f: 0b:d7:3f:58:22:55:60:ef:b4:f0:eb:f6:0a:64:f3:f3:37:7d: 3a:ff:18:89:4d:a9:9b:97:c2:98:8a:e8:e5:40:a2:fd:67:6b: d7:5a:f7:89:ce:d7:5a:ab:c8:bd:25:2a:e6:2e:a6:62:68:21: 29:a0:4f:11:a1:19:df:85:c5:7b:19:74:1f:c1:ce:16:5d:a7: 83:9a:bd:89:57:6f:6c:db:63:de:4a:c8:a2:38:d4:c8:c4:ee: b8:60:96:1f:27:74:87:df:7c:f2:cd:8e:af:12:1f:d2:03:21: e1:0a:8e:07:26:bc:fd:cb:e4:19:06:67:e6:d0:5b:9b:fb:cf: 0f:c0:e2:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jIu8w3+hgp6i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODAzMWYzYTUtMDA4MC00NjBkLWJlY2ItOTBhMjhhYjBkMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMHd7AxArKMgHfWMzkwpMQtaaPUrLdyKyDOC FNO5Nk8zE/p9DSgh8Z07vrRWSHIoZ0pmKsHJ+6ip/HS0jDARHiS5V/bZeXDX+2Q8 83VCObYOWKNIx1PaJGZw33T6o2uIfmUvB+pqeOpdGp1zl9iph5BZ+oiXKQPm94Gq zM1I2kEcEumoqOKoOkzcRMXY4Jo77fJ06J1lN0vgDpg1F4i3PwZiJbSlLUK5HJFe RDLvOP5X00pn7wyAOi1WspE1slJcZnLMETb2bHuBaCoI8T1rdHjwwNsENo6x9VxN v8Qk6YhSQV1cbIRIUqh+p00Wp06siUriqhDQGbPB6p0X2FIvWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+Z1pM6i0MVKkjelhw7LB9G2YcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvZWVhOGIwNzMtZDA0ZS0z ZjQ0LTkwMTktYWVhNjZhNGJhNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsHH7kDd4PG8gyhxOUQqn5Se/dAFUE9s8XkP1LiT7ghlBLUPLSfebUl /FmSPPKpsoylBQiTWSgBzG4EMJawM3R8tSNtEE4KsXofGnI2HK7wRW1nIdw4H+p4 xWvc59vehrHQq4uGNqiBCSa9Z0t2U4fCrv8KsGCX3Dcl2QfYfwvXP1giVWDvtPDr 9gpk8/M3fTr/GIlNqZuXwpiK6OVAov1na9da94nO11qryL0lKuYupmJoISmgTxGh Gd+FxXsZdB/BzhZdp4OavYlXb2zbY95KyKI41MjE7rhglh8ndIfffPLNjq8SH9ID IeEKjgcmvP3L5BkGZ+bQW5v7zw/A4rs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:00:56 2026 by rpki-client