$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: esuKKEyjAbs1IeUxIr85/Dp+cJGGhaOBN9FMFi9de0I= Subject key identifier: BD:81:AC:38:F9:4D:1F:E9:D3:05:90:F3:07:62:0D:25:2D:2F:27:8A Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584EE38CA3DDD872756ACA018560 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a3:dd:d8:72:75:6a:ca:01:85:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=229098b8-e524-45a6-8cb2-0f5fe0da8a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:9a:5a:c2:8d:2e:17:89:1f:df:8d:e3:e6: 92:5e:cd:49:28:9f:94:f4:25:e8:ed:44:3b:91:cf: bb:c5:1c:b6:09:a4:df:a0:f3:2e:47:0e:20:3e:74: 31:e0:02:aa:1d:d8:e5:d5:9d:28:f2:4b:bd:5d:10: ac:76:00:35:a2:7c:6c:fb:cd:0d:80:f1:e4:4d:d4: 3a:25:6f:71:39:ac:a7:28:0b:a5:16:a5:f6:8f:54: fd:20:ca:14:6d:3f:06:58:3c:0c:14:35:91:11:e9: 5e:ec:64:c9:60:be:30:65:a5:16:13:af:ae:22:d6: 4f:b6:30:f4:cf:c5:41:cc:fd:0f:f9:6f:df:6d:5a: 02:b0:ce:24:e0:0b:1a:85:8d:a5:6a:e3:92:94:21: a7:17:e2:79:6c:58:fe:fd:b1:ca:f1:41:b0:69:de: 09:e5:d4:d7:8a:1f:cc:50:3b:d2:42:24:08:13:7d: 39:00:70:bc:1e:fb:52:f0:d7:3c:d2:53:51:62:e9: 37:8e:1d:93:4c:a4:51:2c:fb:05:65:12:c1:aa:43: 06:38:ca:23:d0:da:a0:34:ec:a1:04:32:9f:38:24: 7e:3c:5f:e6:32:08:c2:6a:5b:52:5a:e1:35:7c:37: 0e:b4:d4:19:ad:bf:8d:b8:6d:33:98:5e:c7:c2:b6: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:AC:38:F9:4D:1F:E9:D3:05:90:F3:07:62:0D:25:2D:2F:27:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fe:07:22:cc:f6:34:db:92:ac:87:31:5b:e9:29:6c:fa:53: 3d:84:0b:11:75:69:d7:b2:5b:fe:67:8a:1e:99:60:52:16:e3: d5:d3:6b:fd:44:d0:9a:d5:78:33:bd:55:59:28:20:e3:3c:17: 10:eb:ab:3e:60:5f:71:86:40:57:b2:a1:e6:68:31:a7:71:62: 5b:c4:ad:a5:4f:f7:90:5b:6e:22:24:1e:fb:30:0c:e6:9c:d6: 67:ea:99:f7:46:ca:3b:ea:08:fd:c2:54:51:9c:b8:a7:bb:c7: 79:9e:4b:01:23:3b:f4:22:01:27:95:c8:34:3b:c0:5e:3e:e5: 27:15:15:4c:c0:44:d6:00:26:a5:cf:98:dc:75:55:49:71:8f: 40:57:51:c0:c9:fa:69:00:da:f8:d0:d0:69:00:97:6f:bd:6e: ce:65:bc:46:2e:30:df:df:f2:39:2d:53:32:6f:7e:ff:c1:f8: d6:9f:80:63:5e:06:e2:8d:55:42:34:d5:8f:53:0b:7c:c0:d9: 1b:78:c3:3b:c4:cc:fc:18:02:50:da:e9:17:a2:0c:78:6e:9e: 46:72:7a:c3:ba:2f:8d:9a:06:c3:76:1f:20:89:84:63:ad:b8: 45:3d:ee:85:9f:a4:31:1f:8e:7d:ac:b9:31:77:26:0b:d8:6e: 1a:bb:cf:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKPd2HJ1asoBhWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MjI5MDk4YjgtZTUyNC00NWE2LThjYjItMGY1ZmUwZGE4YTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr6aWsKNLheJH9+N4+aSXs1JKJ+U9CXo7UQ7 kc+7xRy2CaTfoPMuRw4gPnQx4AKqHdjl1Z0o8ku9XRCsdgA1onxs+80NgPHkTdQ6 JW9xOaynKAulFqX2j1T9IMoUbT8GWDwMFDWREele7GTJYL4wZaUWE6+uItZPtjD0 z8VBzP0P+W/fbVoCsM4k4AsahY2lauOSlCGnF+J5bFj+/bHK8UGwad4J5dTXih/M UDvSQiQIE305AHC8HvtS8Nc80lNRYuk3jh2TTKRRLPsFZRLBqkMGOMoj0NqgNOyh BDKfOCR+PF/mMgjCaltSWuE1fDcOtNQZrb+NuG0zmF7HwrbnyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2BrDj5TR/p0wWQ8wdiDSUtLyeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD+ByLM9jTbkqyHMVvpKWz6Uz2ECxF1adeyW/5nih6ZYFIW49XTa/1E 0JrVeDO9VVkoIOM8FxDrqz5gX3GGQFeyoeZoMadxYlvEraVP95BbbiIkHvswDOac 1mfqmfdGyjvqCP3CVFGcuKe7x3meSwEjO/QiASeVyDQ7wF4+5ScVFUzARNYAJqXP mNx1VUlxj0BXUcDJ+mkA2vjQ0GkAl2+9bs5lvEYuMN/f8jktUzJvfv/B+NafgGNe BuKNVUI01Y9TC3zA2Rt4wzvEzPwYAlDa6ReiDHhunkZyesO6L42aBsN2HyCJhGOt uEU97oWfpDEfjn2suTF3JgvYbhq7z1Q= -----END CERTIFICATE-----Generated at Sat Sep 19 06:57:57 2026 by rpki-client