$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: V/tocl5c28hsmEM7WI1quKK9Wnv8h9Cwza1dSzIZRdI= Subject key identifier: EB:63:57:16:B3:57:CE:01:BB:3E:DE:AC:3E:7C:D6:13:69:AB:64:8E Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584F85786D7E9894CF0A65E689A0 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:6d:7e:98:94:cf:0a:65:e6:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=9c472ee3-58b0-4a27-b633-cb6a82e56949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cf:77:32:cb:e7:8c:0f:07:3a:d6:b4:d2:52: 5d:51:f2:0c:69:31:c6:33:8f:0f:1b:25:02:d7:c6: 08:53:d9:88:f8:44:a7:b6:80:f3:35:a9:e0:5b:99: 41:bf:ee:08:df:ed:2a:01:e5:37:9f:5c:63:46:1d: 57:f3:c8:38:4e:15:8a:32:0d:dd:5d:85:dd:ca:c0: b6:6e:01:da:ec:9e:6c:fb:09:25:87:19:0d:f7:d6: b2:6b:ed:42:3b:67:e6:77:43:9a:25:18:9a:43:f9: a9:e8:1f:51:9c:3c:cb:80:c3:e2:6c:4f:1e:55:9a: c5:e1:6a:93:7c:80:1c:bd:a3:b2:01:ac:7c:89:31: 28:af:6b:20:bf:e3:62:8f:bf:96:38:d3:d0:cd:54: be:17:23:dd:f1:c4:f8:e6:0e:32:09:59:f5:61:b6: d0:a3:e7:c8:85:0c:06:25:06:08:57:a3:59:cc:48: 9f:a8:08:81:f8:b0:a6:e5:72:90:81:ce:9d:18:22: 56:78:c3:be:44:27:76:51:b1:45:13:32:0c:74:cd: ef:a6:66:75:b8:99:3a:9d:8f:fb:89:47:e5:0f:6b: 81:cb:68:9e:35:14:09:b8:2d:0d:83:75:18:05:f6: ea:11:b2:b0:86:3f:62:35:db:14:cc:6d:b0:da:21: 1f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:63:57:16:B3:57:CE:01:BB:3E:DE:AC:3E:7C:D6:13:69:AB:64:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b3:71:a2:da:94:12:6b:b6:63:ee:9a:46:74:4b:93:8b:88: 9d:a1:68:9d:15:5b:7e:4a:78:34:8a:89:0b:2f:56:bd:e9:08: 46:3c:13:81:0c:33:ca:ce:3e:6b:13:92:0d:2b:22:70:ac:5c: f5:1f:7f:24:c0:19:d2:ef:c9:9a:b5:3d:5d:30:44:d1:a6:24: 93:fa:1c:89:41:9c:a5:f6:64:4e:f1:ca:5f:e6:b4:7b:4b:6f: 6f:eb:10:3a:a0:f3:cf:97:4d:c1:60:8e:ab:78:ee:15:44:16: 86:b9:d3:13:bb:a9:2f:25:28:81:da:82:05:2f:f7:c4:7b:e7: 3d:c9:2b:3d:59:06:f8:e6:44:cd:44:5a:fc:cf:ca:45:69:bf: 07:e7:4d:80:cd:e2:a3:f3:11:29:53:cc:40:e8:11:4f:3d:bc: 6b:60:e2:b0:fb:36:54:72:fb:8e:53:b1:4b:77:1e:a8:66:fa: 8f:cb:d7:36:da:9f:82:82:ca:4a:de:c5:bf:82:f0:4c:fa:00: 9c:01:05:f7:24:51:af:43:31:de:98:b8:e2:75:7f:5c:c7:d4: 0c:77:1d:07:69:ca:89:a3:24:d4:b9:be:d9:dd:33:8c:10:0c: db:e0:a7:87:a7:8e:ac:35:82:e9:d9:35:a6:2a:e4:b6:bf:5e: 92:fe:35:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeG1+mJTPCmXmiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk OWM0NzJlZTMtNThiMC00YTI3LWI2MzMtY2I2YTgyZTU2OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs93MsvnjA8HOta00lJdUfIMaTHGM48PGyUC 18YIU9mI+ESntoDzNangW5lBv+4I3+0qAeU3n1xjRh1X88g4ThWKMg3dXYXdysC2 bgHa7J5s+wklhxkN99aya+1CO2fmd0OaJRiaQ/mp6B9RnDzLgMPibE8eVZrF4WqT fIAcvaOyAax8iTEor2sgv+Nij7+WONPQzVS+FyPd8cT45g4yCVn1YbbQo+fIhQwG JQYIV6NZzEifqAiB+LCm5XKQgc6dGCJWeMO+RCd2UbFFEzIMdM3vpmZ1uJk6nY/7 iUflD2uBy2ieNRQJuC0Ng3UYBfbqEbKwhj9iNdsUzG2w2iEfOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtjVxazV84Buz7erD581hNpq2SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESzcaLalBJrtmPumkZ0S5OLiJ2haJ0VW35KeDSKiQsvVr3pCEY8E4EM M8rOPmsTkg0rInCsXPUffyTAGdLvyZq1PV0wRNGmJJP6HIlBnKX2ZE7xyl/mtHtL b2/rEDqg88+XTcFgjqt47hVEFoa50xO7qS8lKIHaggUv98R75z3JKz1ZBvjmRM1E WvzPykVpvwfnTYDN4qPzESlTzEDoEU89vGtg4rD7NlRy+45TsUt3Hqhm+o/L1zba n4KCykrexb+C8Ez6AJwBBfckUa9DMd6YuOJ1f1zH1Ax3HQdpyomjJNS5vtndM4wQ DNvgp4enjqw1gunZNaYq5La/XpL+NY4= -----END CERTIFICATE-----Generated at Thu Nov 5 11:52:59 2026 by rpki-client