$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa File: 2c9db57d-cb56-3111-ad11-10c62203b5ca.roa (raw, json) Hash identifier: V/1aYlTL9VIAgmvdSBCRZ/XLfBL/gbjUY6uuhRRsFcA= Subject key identifier: A0:DF:FA:73:45:41:3E:C9:A2:ED:FE:5B:83:7C:A0:58:54:53:AC:A4 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25B649F8437F1B55FC940 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 23.252.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5b:64:9f:84:37:f1:b5:5f:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=d2d48a35-e56c-481a-af1f-23498455b3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:9b:b7:5e:1e:62:d7:fe:2f:88:d6:ce:18: 27:5f:b6:c2:e7:0c:a1:46:f1:aa:b0:0c:d2:33:c7: 4a:c6:6b:8f:11:98:42:e8:1a:4b:92:16:1e:82:52: 66:54:ec:74:6c:e7:32:74:60:ca:03:59:c5:8e:72: ab:80:df:d6:9c:2f:00:39:0b:fb:1f:5b:54:64:60: b4:47:3f:96:eb:9f:40:e1:a8:90:e3:94:f3:b1:30: 78:97:86:cb:c9:10:ce:b7:76:b8:7f:07:5c:91:f8: 6f:59:53:fe:b0:10:fb:26:f2:78:a5:93:3c:48:2c: f4:66:d0:37:23:0f:6a:d2:22:3e:ef:db:b3:1b:32: 2a:b3:57:e1:34:48:fc:8f:b8:f7:7f:da:12:6f:86: 5d:b6:4f:fa:79:b3:fc:a6:b3:d8:e4:cf:25:1f:d6: 44:21:6d:0c:6e:05:c9:c1:09:8c:64:39:0d:ed:07: 60:79:06:af:5e:88:55:7b:d3:33:db:be:a6:6b:29: 13:7b:42:cd:0c:b2:09:cc:80:49:5f:54:b7:d9:94: a6:b0:24:67:fa:d5:f9:62:64:25:9a:56:f2:8b:c1: 4e:be:ec:75:0b:57:8c:3b:2a:66:15:b5:8f:09:46: 81:bf:c6:dc:a9:c4:d9:ea:4a:83:da:47:c0:eb:16: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DF:FA:73:45:41:3E:C9:A2:ED:FE:5B:83:7C:A0:58:54:53:AC:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8d:7d:b9:0a:e5:e1:42:a8:c9:29:44:94:82:01:17:bd:85: d8:a0:46:55:36:e3:b1:a0:18:a8:48:40:37:bf:74:79:92:b1: 49:8d:e7:22:63:58:69:1c:67:e0:27:14:2b:f1:0e:5e:00:4a: 13:9c:94:e0:87:cd:33:6e:ae:2f:d1:1f:bc:19:35:79:23:7d: 16:b9:b3:16:83:ff:30:0c:02:c5:78:44:bf:68:ab:59:9c:26: 47:0c:06:73:30:00:8a:72:60:0a:17:1f:1e:57:99:7a:e4:b7: e2:33:42:5e:38:76:a7:29:07:b0:f6:5a:91:79:64:a7:61:2b: f8:88:e7:85:35:2a:36:1a:7e:25:ed:b8:b6:33:fd:4b:7a:14: 16:79:72:1a:47:e9:5b:8a:fb:cb:ca:d4:6e:8c:91:35:4e:45: cb:73:7d:68:aa:35:77:da:48:a2:67:5a:e4:e4:78:a4:70:f7: a5:0e:14:46:9f:22:0a:c1:fe:02:40:29:7c:4a:63:78:ff:ec: 54:cf:01:10:d4:04:1b:56:ed:aa:a0:0c:f9:96:f5:eb:c9:6c: fd:05:a3:f8:37:62:2a:57:50:dd:6b:dc:45:92:a5:25:b8:e2: fa:e9:95:8c:c2:06:ba:16:87:1b:34:07:35:19:00:10:31:a1: 99:84:79:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0ltkn4Q38bVfyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZDJkNDhhMzUtZTU2Yy00ODFhLWFmMWYtMjM0OTg0NTViM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGSbt14eYtf+L4jWzhgnX7bC5wyhRvGqsAzS M8dKxmuPEZhC6BpLkhYeglJmVOx0bOcydGDKA1nFjnKrgN/WnC8AOQv7H1tUZGC0 Rz+W659A4aiQ45TzsTB4l4bLyRDOt3a4fwdckfhvWVP+sBD7JvJ4pZM8SCz0ZtA3 Iw9q0iI+79uzGzIqs1fhNEj8j7j3f9oSb4Zdtk/6ebP8prPY5M8lH9ZEIW0MbgXJ wQmMZDkN7QdgeQavXohVe9Mz276maykTe0LNDLIJzIBJX1S32ZSmsCRn+tX5YmQl mlbyi8FOvux1C1eMOypmFbWPCUaBv8bcqcTZ6kqD2kfA6xYX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDf+nNFQT7Jou3+W4N8oFhUU6ykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMmM5ZGI1N2QtY2I1Ni0z MTExLWFkMTEtMTBjNjIyMDNiNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKNfbkK5eFCqMkpRJSCARe9hdigRlU247GgGKhIQDe/dHmSsUmN5yJj WGkcZ+AnFCvxDl4AShOclOCHzTNuri/RH7wZNXkjfRa5sxaD/zAMAsV4RL9oq1mc JkcMBnMwAIpyYAoXHx5XmXrkt+IzQl44dqcpB7D2WpF5ZKdhK/iI54U1KjYafiXt uLYz/Ut6FBZ5chpH6VuK+8vK1G6MkTVORctzfWiqNXfaSKJnWuTkeKRw96UOFEaf IgrB/gJAKXxKY3j/7FTPARDUBBtW7aqgDPmW9evJbP0Fo/g3YipXUN1r3EWSpSW4 4vrplYzCBroWhxs0BzUZABAxoZmEeWE= -----END CERTIFICATE-----Generated at Mon Nov 3 08:54:19 2025 by rpki-client