$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa File: ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa (raw, json) Hash identifier: qnLJa8wrxUg650ZQmX+4zSgS6bqaSG4NACglAFzmQwI= Subject key identifier: A6:28:82:DA:AF:16:BB:A6:C0:18:24:DC:A5:17:17:3A:EF:77:C1:DA Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584F698D79BDB6E586CF070EB6E8 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 29802 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:79:bd:b6:e5:86:cf:07:0e:b6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=d14d7594-6c7e-4805-ad60-c8a8a5634fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:d9:3d:cf:30:8d:98:a6:be:29:7b:a6:e9: d9:c8:cc:6b:00:aa:7d:76:09:b8:fe:29:46:67:8b: be:8b:de:c6:2d:db:5c:b2:0e:0b:61:b6:34:ff:79: dd:20:7a:d3:20:c6:f9:38:2a:b2:d4:46:0a:36:19: f9:18:fd:5e:64:91:ef:19:38:78:4f:da:38:87:73: ea:72:bf:4b:94:56:ba:40:3d:63:a3:cb:3e:40:27: 64:20:b6:8b:cb:14:b0:d9:63:f0:63:eb:b8:57:c5: 14:00:59:45:2a:a5:b8:d0:76:f4:ef:09:50:22:9f: da:a8:0e:fa:44:05:b2:66:c3:60:c6:eb:f4:35:19: 06:08:c3:a6:17:4f:c3:62:38:80:e6:f0:05:c7:f8: 3c:a7:0c:d8:dc:b8:e5:fd:39:80:b8:c7:f9:dd:f3: 79:fa:81:80:a6:1c:06:60:31:77:e1:3a:8e:44:02: bd:ec:75:f6:00:29:d4:76:06:e9:f8:bd:4b:15:82: b7:2e:9a:14:2d:bc:de:bb:b8:b9:92:d7:59:ad:8f: 21:0b:9b:73:ca:16:0c:85:59:d2:52:16:c1:19:26: 09:9e:49:67:a0:c5:0d:cf:65:01:36:0f:27:1b:20: bb:e9:21:4e:03:f2:c9:27:7b:95:3b:5a:d7:07:be: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:82:DA:AF:16:BB:A6:C0:18:24:DC:A5:17:17:3A:EF:77:C1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7e:21:03:af:0f:d4:72:51:4f:63:a1:f0:6c:21:a5:9f:b0: 80:24:2a:5c:33:66:81:eb:d2:84:75:b3:46:8e:bc:9d:0b:bf: 1b:10:b7:25:03:53:b3:7b:a2:dd:1e:8e:c3:23:8e:f1:ca:64: 85:91:2b:30:e0:16:bf:2a:74:93:95:73:bc:c0:31:a9:02:26: 15:80:26:9b:70:8f:bf:4c:19:b5:63:45:8e:d3:86:9a:5a:42: b1:9d:54:f5:ed:37:80:8b:cf:fc:ee:30:0c:cb:39:99:e3:fc: f7:aa:3f:2a:33:1a:1c:43:3b:81:aa:d3:3c:8c:97:ff:dd:10: 45:cd:92:bf:1a:d9:f6:e6:ba:8a:38:8e:aa:81:bf:fc:14:d3: 83:93:88:d1:ef:ff:06:5e:01:42:9d:6f:5e:61:a6:dc:0b:97: f9:31:15:48:bb:4f:b3:2d:b8:41:61:98:89:ce:d2:7f:db:93: 0c:42:f8:43:f0:1b:c5:db:8a:6a:6d:06:5e:37:76:e5:c3:9c: 9b:46:92:f9:8e:12:7c:6b:3c:85:9d:12:f8:e4:69:de:03:7b: aa:88:d3:af:c0:e2:ef:7e:a1:fd:9d:22:a4:51:1d:7d:ca:95: 0b:ae:cc:25:53:05:6e:d5:f4:39:3f:13:4c:66:dc:63:6f:31: 8e:95:e2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXm9tuWGzwcOtugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZDE0ZDc1OTQtNmM3ZS00ODA1LWFkNjAtYzhhOGE1NjM0ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4vZPc8wjZimvil7punZyMxrAKp9dgm4/ilG Z4u+i97GLdtcsg4LYbY0/3ndIHrTIMb5OCqy1EYKNhn5GP1eZJHvGTh4T9o4h3Pq cr9LlFa6QD1jo8s+QCdkILaLyxSw2WPwY+u4V8UUAFlFKqW40Hb07wlQIp/aqA76 RAWyZsNgxuv0NRkGCMOmF0/DYjiA5vAFx/g8pwzY3Ljl/TmAuMf53fN5+oGAphwG YDF34TqORAK97HX2ACnUdgbp+L1LFYK3LpoULbzeu7i5ktdZrY8hC5tzyhYMhVnS UhbBGSYJnklnoMUNz2UBNg8nGyC76SFOA/LJJ3uVO1rXB75QhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYogtqvFrumwBgk3KUXFzrvd8HaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvYmE1MmU4ZjMtNDE3My0z NmMwLTg0Y2ItODdhYWRmMzk3NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ+IQOvD9RyUU9jofBsIaWfsIAkKlwzZoHr0oR1s0aOvJ0LvxsQtyUD U7N7ot0ejsMjjvHKZIWRKzDgFr8qdJOVc7zAMakCJhWAJptwj79MGbVjRY7Thppa QrGdVPXtN4CLz/zuMAzLOZnj/PeqPyozGhxDO4Gq0zyMl//dEEXNkr8a2fbmuoo4 jqqBv/wU04OTiNHv/wZeAUKdb15hptwLl/kxFUi7T7MtuEFhmInO0n/bkwxC+EPw G8XbimptBl43duXDnJtGkvmOEnxrPIWdEvjkad4De6qI06/A4u9+of2dIqRRHX3K lQuuzCVTBW7V9Dk/E0xm3GNvMY6V4s4= -----END CERTIFICATE-----Generated at Thu Oct 8 01:14:23 2026 by rpki-client