$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa File: ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa (raw, json) Hash identifier: aeHsp48IUh0tppProv5+9MIFJeAlyWrUNpjFIz4OU7c= Subject key identifier: 76:F8:4C:95:A1:57:7A:D9:41:F4:1D:B9:89:C6:28:9F:36:13:52:E3 Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Certificate serial: 010D0C9F4328584AA42B79CD8EBCC7ADFA5B9670 Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 29802 IP address blocks: 23.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:79:cd:8e:bc:c7:ad:fa:5b:96:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=31bf57b7-e50c-4523-a4c5-f3db7c2db8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:73:32:67:5f:80:1d:fd:22:81:84:fc:e7: 00:22:73:5a:83:93:1f:10:02:03:ec:86:ec:db:f9: 6b:50:af:91:7e:74:59:d6:5c:8b:13:97:e7:85:2f: 4e:bb:c6:2f:d5:02:4b:0f:a0:81:1f:a2:ba:bb:31: 55:18:84:f1:97:5c:64:8b:13:fa:46:e1:08:2a:87: 25:80:1f:84:d7:1f:00:b0:67:2a:c4:9e:f5:ad:da: 96:62:5d:18:95:c3:dc:20:af:69:8c:76:1a:80:d8: 0b:f8:ee:da:9a:76:69:69:41:42:3e:27:dd:af:38: 65:f8:59:24:75:ad:23:ed:2f:4e:81:9d:8f:a4:74: b9:be:cd:ab:f2:6b:b6:a3:e2:c0:2a:c7:69:35:87: 02:ee:ed:27:68:35:5e:3e:ad:56:fd:d8:13:08:54: 23:b4:7d:e9:34:39:96:37:2e:ff:0d:4d:db:26:87: ac:8c:a0:3c:de:0e:ee:1d:76:e0:f3:64:20:f0:c9: 2f:12:73:98:d6:f1:2c:9d:70:f3:5d:fa:e4:e6:b6: d7:62:d5:72:a4:c2:10:2d:61:a6:a5:da:94:65:8c: b4:3c:ad:d0:1a:6c:99:5b:84:f0:20:34:48:54:ca: 8d:72:e0:3e:06:27:ef:25:04:eb:84:cd:7c:19:62: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:4C:95:A1:57:7A:D9:41:F4:1D:B9:89:C6:28:9F:36:13:52:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl X509v3 Authority Key Identifier: keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer sbgp-ipAddrBlock: critical IPv4: 23.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8f:68:98:6f:1c:3f:32:14:29:e0:6f:81:c0:5d:9a:bd:0e: a2:68:50:ed:16:a0:20:9a:c8:2e:b0:ad:8d:ec:d5:c0:4a:2e: 8e:0b:44:1e:9a:7f:41:bc:36:40:7e:7f:0d:47:6e:5e:df:6d: 86:15:bd:8c:63:ec:15:be:19:9d:bd:6a:5e:99:62:96:74:26: 92:d8:3d:1f:a4:cc:53:79:79:7d:4e:2c:94:55:8a:1b:24:c8: c4:fd:12:ba:37:79:6f:86:95:70:eb:1f:dd:6b:e9:2a:32:be: ee:53:b6:6b:77:5a:db:44:c6:15:9a:57:82:8c:c6:c2:9c:c7: 31:a4:5e:36:81:fa:dc:ab:d4:8a:9d:a0:4e:c2:5e:f4:72:7f: 5a:3a:f7:03:32:f0:54:3d:9c:f2:08:a1:c0:cc:6d:78:57:50: fb:69:be:a4:0b:ca:d5:d0:ce:14:e1:26:c1:4e:a3:93:c1:f9: 90:e2:a1:78:90:be:f3:db:15:72:58:b2:dc:dd:a7:9d:06:32: 44:c3:9f:f1:22:5e:97:5f:28:cd:e1:4f:58:64:15:1b:40:d2: e0:7e:9d:68:b1:8b:17:71:2d:30:7c:8f:e9:47:b9:d0:18:8c: 25:96:91:fd:b1:72:0a:0d:d9:cd:92:c0:18:70:38:07:41:ef: cf:2e:2d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3nNjrzHrfpblnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWExNjk3ZmQtZDg4Zi00ODUxLWJiYzMtMmMxOTA2NzUz NWVlMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MzFiZjU3YjctZTUwYy00NTIzLWE0YzUtZjNkYjdjMmRiOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJlzMmdfgB39IoGE/OcAInNag5MfEAID7Ibs 2/lrUK+RfnRZ1lyLE5fnhS9Ou8Yv1QJLD6CBH6K6uzFVGITxl1xkixP6RuEIKocl gB+E1x8AsGcqxJ71rdqWYl0YlcPcIK9pjHYagNgL+O7amnZpaUFCPifdrzhl+Fkk da0j7S9OgZ2PpHS5vs2r8mu2o+LAKsdpNYcC7u0naDVePq1W/dgTCFQjtH3pNDmW Ny7/DU3bJoesjKA83g7uHXbg82Qg8MkvEnOY1vEsnXDzXfrk5rbXYtVypMIQLWGm pdqUZYy0PK3QGmyZW4TwIDRIVMqNcuA+BifvJQTrhM18GWJ0DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb4TJWhV3rZQfQduYnGKJ82E1LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2 OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5MDY3NTM1ZWUvYmE1MmU4ZjMtNDE3My0z NmMwLTg0Y2ItODdhYWRmMzk3NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWExNjk3ZmQtZDg4Zi00ODUxLWJi YzMtMmMxOTA2NzUzNWVlL2FhMTY5N2ZkLWQ4OGYtNDg1MS1iYmMzLTJjMTkwNjc1 MzVlZS5jcmwwHwYDVR0jBBgwFoAUSqqP3fYAqfNSzbyHvtXiocgmFskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTE2OTdmZC1kODhmLTQ4NTEtYmJjMy0yYzE5 MDY3NTM1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2PaJhvHD8yFCngb4HAXZq9DqJoUO0WoCCayC6wrY3s1cBKLo4LRB6a f0G8NkB+fw1Hbl7fbYYVvYxj7BW+GZ29al6ZYpZ0JpLYPR+kzFN5eX1OLJRVihsk yMT9Ero3eW+GlXDrH91r6Soyvu5Ttmt3WttExhWaV4KMxsKcxzGkXjaB+tyr1Iqd oE7CXvRyf1o69wMy8FQ9nPIIocDMbXhXUPtpvqQLytXQzhThJsFOo5PB+ZDioXiQ vvPbFXJYstzdp50GMkTDn/EiXpdfKM3hT1hkFRtA0uB+nWixixdxLTB8j+lHudAY jCWWkf2xcgoN2c2SwBhwOAdB788uLc4= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:48 2025 by rpki-client