$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa File: 5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa (raw, json) Hash identifier: ExSQ0aSoekYvWCbkg1uA/lwCGddKxP06k3csd3zJXP8= Subject key identifier: 88:BE:8E:E3:38:B8:53:CF:39:42:14:3C:62:76:DC:92:D9:86:4E:02 Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584F698D7995A3F6D3F659695800 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:79:95:a3:f6:d3:f6:59:69:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=167cd230-8695-441b-aa25-6dcf008da0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:f8:ee:88:a4:a3:16:d7:19:c8:a5:0d:d2: d5:3d:eb:6e:2a:97:e9:d6:79:0d:d1:bf:25:c9:09: 31:06:3c:9c:7c:82:3d:6c:ad:d7:a3:82:2d:cd:5e: 38:fc:ad:71:c1:64:ed:9e:5a:e6:e8:a8:c5:66:08: 8d:d5:be:64:df:12:40:77:90:dc:81:05:b8:1a:d6: 3c:bb:ae:2b:13:ed:55:87:6c:1a:97:df:9a:a6:1a: 76:9e:30:4d:0f:7b:46:ab:7c:0a:b6:99:30:1d:ee: 06:51:71:90:1e:77:6a:d9:64:4f:1d:d8:25:3d:06: 82:54:38:13:a5:67:61:63:bf:32:ab:99:c6:74:90: 52:27:c5:e0:68:fb:8c:ec:ee:f4:9e:9b:04:85:f7: e0:fe:21:4e:d6:59:55:a3:05:21:dc:26:9e:73:a6: c6:fe:12:b1:eb:fd:69:31:b9:18:60:64:a7:5c:0c: 94:eb:d7:07:11:d4:20:c0:5c:dd:b0:db:db:d0:5e: 4b:a4:b7:f1:2e:cb:06:11:82:f4:1b:87:c4:e2:d1: 3d:2b:87:f1:59:9d:65:e8:9c:68:72:d0:06:69:40: 74:e0:e6:28:cc:71:60:cd:e3:25:b7:98:6b:fb:d5: 22:e3:2a:0f:a4:87:16:fe:8d:49:10:63:87:89:65: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BE:8E:E3:38:B8:53:CF:39:42:14:3C:62:76:DC:92:D9:86:4E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3d:63:77:8d:b6:c6:f0:ee:e4:69:55:5c:6b:76:ee:24:cf: f7:be:43:05:2d:5d:df:6a:91:10:52:23:d3:9d:92:12:ba:54: b7:c3:36:a8:c8:ab:16:76:b1:4c:7e:94:aa:65:db:54:63:04: b7:e1:24:e5:2e:76:56:7e:60:98:d2:96:8e:01:6f:ce:ce:a6: d0:86:56:8b:44:8b:46:2c:fb:ac:62:eb:ce:a7:3d:b4:d5:f5: 28:19:89:2e:77:0c:4b:4e:25:eb:ce:de:c0:ff:71:be:8b:6e: 42:68:fb:76:a5:53:f0:d2:d5:1e:b7:ec:e8:73:66:b1:dc:4f: 1f:eb:71:4f:3e:5f:58:0e:93:c4:03:41:f9:68:b4:cb:71:be: 24:0d:1e:be:62:bb:b5:b8:83:23:ea:57:0a:7d:07:bb:d2:af: df:59:0d:04:e8:22:1e:0a:37:b2:0f:4e:f6:7c:67:59:a0:f5: 0b:fe:8b:a4:e6:91:88:f9:cd:b7:28:e7:6d:6d:4d:b7:71:e9: dd:b5:a3:05:28:61:8e:a3:28:5a:48:f8:eb:9c:78:a7:25:d7: 3b:23:4f:66:1a:db:66:26:0a:08:e4:f9:13:12:e5:1f:79:59: 97:ca:ae:4e:9e:0a:a2:9a:63:61:98:8a:a0:62:0b:2d:a8:69: 7b:32:f3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXmVo/bT9llpWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MTY3Y2QyMzAtODY5NS00NDFiLWFhMjUtNmRjZjAwOGRhMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3b47oikoxbXGcilDdLVPetuKpfp1nkN0b8l yQkxBjycfII9bK3Xo4ItzV44/K1xwWTtnlrm6KjFZgiN1b5k3xJAd5DcgQW4GtY8 u64rE+1Vh2wal9+aphp2njBND3tGq3wKtpkwHe4GUXGQHndq2WRPHdglPQaCVDgT pWdhY78yq5nGdJBSJ8XgaPuM7O70npsEhffg/iFO1llVowUh3Caec6bG/hKx6/1p MbkYYGSnXAyU69cHEdQgwFzdsNvb0F5LpLfxLssGEYL0G4fE4tE9K4fxWZ1l6Jxo ctAGaUB04OYozHFgzeMlt5hr+9Ui4yoPpIcW/o1JEGOHiWWiQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi+juM4uFPPOUIUPGJ23JLZhk4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvNWY1Yzk3N2QtYzhmNy0z NWRkLThmNjgtM2JhNmUzYWEyMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk9Y3eNtsbw7uRpVVxrdu4kz/e+QwUtXd9qkRBSI9OdkhK6VLfDNqjI qxZ2sUx+lKpl21RjBLfhJOUudlZ+YJjSlo4Bb87OptCGVotEi0Ys+6xi686nPbTV 9SgZiS53DEtOJevO3sD/cb6LbkJo+3alU/DS1R637OhzZrHcTx/rcU8+X1gOk8QD QflotMtxviQNHr5iu7W4gyPqVwp9B7vSr99ZDQToIh4KN7IPTvZ8Z1mg9Qv+i6Tm kYj5zbco521tTbdx6d21owUoYY6jKFpI+OuceKcl1zsjT2Ya22YmCgjk+RMS5R95 WZfKrk6eCqKaY2GYiqBiCy2oaXsy81s= -----END CERTIFICATE-----Generated at Thu Nov 5 14:13:11 2026 by rpki-client