$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa File: 200cf835-7710-3227-a110-70619776c894.roa (raw, json) Hash identifier: mgGhKDoM0oujtnwXVeO2R3bPxJ6CPslZxNJqISleibM= Subject key identifier: FC:E0:6F:A0:D0:84:AB:27:20:59:90:56:D5:D3:DB:31:64:F5:E9:24 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25B0904E9F8A38D6AD440 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 23.252.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5b:09:04:e9:f8:a3:8d:6a:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=cf5b4943-efda-4511-94d9-13fb4db61f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:0b:d8:0e:c1:fc:f8:99:1d:ef:1f:00:d1: 8c:04:36:1a:0a:e5:c6:41:e5:e2:ce:99:d3:21:5c: 67:6d:78:20:ed:26:d2:93:5c:13:be:c7:42:17:5f: e9:41:d7:9e:75:26:de:67:b8:b3:e4:1f:f1:77:10: ee:6f:87:8c:08:fc:10:44:c4:9a:bb:5e:b2:81:34: 58:1b:1f:11:5e:f7:f3:b3:ef:60:74:ed:da:f7:f5: 48:ff:dc:be:ad:ca:c7:82:a3:bb:9d:25:fa:5a:8e: 5d:e4:52:ca:c4:31:11:df:fb:22:1c:ce:82:86:34: a4:32:51:6b:c5:b7:73:57:9a:a9:c9:cc:df:92:a0: 86:4d:0c:5c:09:45:ca:ab:08:99:5e:25:0e:f2:10: b7:63:f4:db:57:b5:78:a6:d9:a8:3e:52:8c:dc:ff: fc:73:cd:0d:02:ae:83:1f:94:4b:50:5e:e0:38:2c: fe:75:11:8b:ab:70:b1:0e:8c:42:ca:a9:63:40:ad: 7b:7a:c0:53:ab:1b:a1:56:38:01:51:aa:dd:18:1b: c0:16:c0:43:9b:d1:dd:d7:8c:97:fd:05:5c:37:41: f2:f9:ce:d4:5a:57:06:ba:b5:35:81:df:aa:52:e2: 14:03:46:92:07:fc:6d:03:cb:30:97:f0:90:be:49: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E0:6F:A0:D0:84:AB:27:20:59:90:56:D5:D3:DB:31:64:F5:E9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8f:02:6e:98:79:e6:f8:27:59:d5:47:5d:10:e2:55:87:42: 62:9e:1f:7d:db:7e:dd:c4:f1:20:a7:2a:55:c3:21:2a:99:75: 62:0e:f5:d5:a1:c2:88:4d:3f:f1:91:1a:c6:f1:0f:cc:76:a5: fc:bd:d8:f4:ff:0b:02:ee:f6:ce:61:18:2e:1b:fb:6d:5a:f7: 55:9e:fe:46:2a:a5:08:16:51:3c:02:73:20:90:dd:f3:7b:9e: c4:bd:ec:f0:d6:55:ec:c4:a3:bd:aa:97:69:3c:40:f0:78:0b: ae:19:d6:bb:2b:ef:aa:9e:31:b6:f6:53:e0:09:98:1a:a1:40: ee:f7:c9:72:a2:c5:45:f3:57:3e:66:85:f3:0f:47:6b:d6:ed: d9:42:50:5c:46:c4:fe:3a:c3:98:10:0d:c8:38:ab:db:2c:c3: 06:62:bc:ea:d3:3c:69:e0:ce:3c:49:7b:5c:ca:fd:c9:ba:af: c3:ba:76:ed:dc:e1:9c:4d:5b:3b:d4:ff:23:e4:a1:91:96:71: 5e:5c:af:98:18:9c:d8:b2:c8:88:06:f8:32:62:28:4f:88:9e: 01:30:a7:7b:03:e7:80:a7:4b:37:90:ca:39:b9:d1:e5:34:ad: 24:20:84:fe:76:52:c5:d6:5b:3a:b4:7b:cd:c1:b6:22:fc:75: 66:4f:6f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lsJBOn4o41q1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk Y2Y1YjQ5NDMtZWZkYS00NTExLTk0ZDktMTNmYjRkYjYxZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRIL2A7B/PiZHe8fANGMBDYaCuXGQeXizpnT IVxnbXgg7SbSk1wTvsdCF1/pQdeedSbeZ7iz5B/xdxDub4eMCPwQRMSau16ygTRY Gx8RXvfzs+9gdO3a9/VI/9y+rcrHgqO7nSX6Wo5d5FLKxDER3/siHM6ChjSkMlFr xbdzV5qpyczfkqCGTQxcCUXKqwiZXiUO8hC3Y/TbV7V4ptmoPlKM3P/8c80NAq6D H5RLUF7gOCz+dRGLq3CxDoxCyqljQK17esBTqxuhVjgBUardGBvAFsBDm9Hd14yX /QVcN0Hy+c7UWlcGurU1gd+qUuIUA0aSB/xtA8swl/CQvklzRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzgb6DQhKsnIFmQVtXT2zFk9ekkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMjAwY2Y4MzUtNzcxMC0z MjI3LWExMTAtNzA2MTk3NzZjODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqPAm6Yeeb4J1nVR10Q4lWHQmKeH33bft3E8SCnKlXDISqZdWIO9dWh wohNP/GRGsbxD8x2pfy92PT/CwLu9s5hGC4b+21a91We/kYqpQgWUTwCcyCQ3fN7 nsS97PDWVezEo72ql2k8QPB4C64Z1rsr76qeMbb2U+AJmBqhQO73yXKixUXzVz5m hfMPR2vW7dlCUFxGxP46w5gQDcg4q9sswwZivOrTPGngzjxJe1zK/cm6r8O6du3c 4ZxNWzvU/yPkoZGWcV5cr5gYnNiyyIgG+DJiKE+IngEwp3sD54CnSzeQyjm50eU0 rSQghP52UsXWWzq0e83BtiL8dWZPb9M= -----END CERTIFICATE-----Generated at Mon Nov 3 08:51:42 2025 by rpki-client