$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa File: 3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa (raw, json) Hash identifier: ytZBW8tozpCm6o25wisDtOGFmRZUrIONtBGpPFtDkX0= Subject key identifier: 68:A2:87:12:22:29:0D:5C:F2:9B:C6:E1:34:11:2E:A8:EA:52:12:7F Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25B40DE23D1F6EAD6BB00 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 23.252.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5b:40:de:23:d1:f6:ea:d6:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=ee8863d4-9b94-4f2c-a416-fa89ed7fd28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bb:7b:30:95:02:b7:ec:bf:a5:c0:72:57:f1: 97:7d:56:2a:23:c1:a2:63:ce:6a:f5:c8:33:56:c4: c2:a9:1e:ab:b9:77:cc:42:4a:f9:da:fa:d6:ef:f1: 6b:06:a1:f6:b8:d8:d9:17:74:94:3e:87:3d:c2:d5: 30:1d:df:d6:28:f6:81:40:68:e8:87:57:f7:fd:f8: 9b:be:ca:2b:c3:c8:a3:ba:55:f1:16:ca:f2:63:d2: 02:55:10:6d:77:06:e3:6c:75:ed:b5:ce:11:24:2b: 49:d2:84:4a:9d:49:53:4c:2a:c7:cd:60:27:57:ca: 39:a1:ff:8a:52:a3:f0:82:18:98:2b:45:c2:f8:09: b5:7b:f5:a9:32:e7:c6:30:66:19:a4:5e:2b:42:5f: b9:76:44:87:b0:21:66:5b:a1:fa:52:82:3e:ba:69: 31:b2:9b:65:ed:77:e1:dc:3c:09:8f:e5:bd:6b:54: a0:fa:8a:84:91:c6:0e:38:dd:72:51:e6:ea:ba:52: b3:14:3d:08:66:8e:4a:03:da:a6:0d:bd:29:6f:73: 51:88:ae:30:8c:af:16:c9:b1:89:22:d2:8c:00:fa: b9:6c:83:e3:77:be:ff:e3:1d:fe:df:78:fa:2a:24: a1:1d:42:cb:c2:b3:50:73:9f:6b:47:3e:04:f4:4c: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:87:12:22:29:0D:5C:F2:9B:C6:E1:34:11:2E:A8:EA:52:12:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9f:0b:8a:70:84:5e:7a:60:91:7f:2e:fb:5f:0f:a4:31:e5: 99:0e:c3:40:70:69:ad:99:9e:e5:8f:05:7d:11:b2:35:e0:f0: 44:99:f4:93:03:d2:07:4d:5c:93:d1:d2:c0:9a:bf:28:71:0e: cd:f5:61:69:4e:8f:bf:07:81:a9:44:a4:57:8f:d1:e9:7b:e6: e4:08:c6:56:ab:69:fa:f7:ce:46:25:52:b4:69:16:9c:c8:b0: ed:b6:fc:60:f2:11:63:66:12:df:89:a4:4e:3c:3c:63:51:15: 83:a6:73:1f:63:6d:a7:1a:07:a9:0c:10:1c:98:83:f6:e0:26: 83:fd:55:fe:ac:bf:ad:08:c6:0e:d1:95:f7:21:13:03:56:2e: 20:1b:25:b9:93:59:10:fa:96:f9:c6:da:29:c0:8b:d0:3c:20: b5:53:74:ea:cc:55:ba:dc:d9:2c:ef:34:6f:8a:91:1e:25:f8: df:6c:ba:b1:ba:3d:7f:f7:31:e8:32:aa:d5:8e:e2:de:52:df: 45:da:21:ea:74:fb:d9:3c:ff:0d:64:9b:75:c2:fd:24:fc:84: 24:0f:43:c9:79:c9:92:04:9e:de:da:0e:7e:24:d9:1e:0b:a2: 11:77:88:74:19:11:7b:7b:41:8b:49:da:2f:a8:8e:1f:db:e1: 99:b3:6c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0ltA3iPR9urWuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZWU4ODYzZDQtOWI5NC00ZjJjLWE0MTYtZmE4OWVkN2ZkMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprt7MJUCt+y/pcByV/GXfVYqI8GiY85q9cgz VsTCqR6ruXfMQkr52vrW7/FrBqH2uNjZF3SUPoc9wtUwHd/WKPaBQGjoh1f3/fib vsorw8ijulXxFsryY9ICVRBtdwbjbHXttc4RJCtJ0oRKnUlTTCrHzWAnV8o5of+K UqPwghiYK0XC+Am1e/WpMufGMGYZpF4rQl+5dkSHsCFmW6H6UoI+umkxsptl7Xfh 3DwJj+W9a1Sg+oqEkcYOON1yUebqulKzFD0IZo5KA9qmDb0pb3NRiK4wjK8WybGJ ItKMAPq5bIPjd77/4x3+33j6KiShHULLwrNQc59rRz4E9EzJWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiihxIiKQ1c8pvG4TQRLqjqUhJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2Q1ZjMzOTMtNjZmNC0z ZjYwLTljODYtMzJhNGE3ZDYwZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADefC4pwhF56YJF/LvtfD6Qx5ZkOw0Bwaa2ZnuWPBX0RsjXg8ESZ9JMD 0gdNXJPR0sCavyhxDs31YWlOj78HgalEpFeP0el75uQIxlarafr3zkYlUrRpFpzI sO22/GDyEWNmEt+JpE48PGNRFYOmcx9jbacaB6kMEByYg/bgJoP9Vf6sv60Ixg7R lfchEwNWLiAbJbmTWRD6lvnG2inAi9A8ILVTdOrMVbrc2SzvNG+KkR4l+N9surG6 PX/3MegyqtWO4t5S30XaIep0+9k8/w1km3XC/ST8hCQPQ8l5yZIEnt7aDn4k2R4L ohF3iHQZEXt7QYtJ2i+ojh/b4ZmzbBQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:54:13 2025 by rpki-client