$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: 5bOjNaQ/LCqyj/wzsz6DvleDvh0LFyBRR2SAvQiKR8k= Subject key identifier: 14:DB:EF:B3:50:0F:C2:DE:44:AD:AB:0A:15:A7:D4:55:53:4F:A5:6E Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25AF698877B3BF64FA600 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5a:f6:98:87:7b:3b:f6:4f:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=64097447-c73a-443e-b7f7-6b712a28b99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:d4:44:a7:cb:6f:7e:90:f7:06:e4:f6:7b: b1:8e:4b:b8:9b:53:be:e1:ec:88:fe:c3:5f:7b:9e: cb:f1:f3:6d:53:26:8c:a4:54:55:04:3a:cf:a7:29: 8d:f5:bd:d0:14:ab:51:66:4b:5d:4f:a2:ff:5c:3c: 37:c5:e2:fa:b6:68:07:1d:63:b2:16:10:34:ec:44: e6:df:25:6f:02:2a:99:66:b3:e7:05:18:a3:3d:95: d5:1b:cc:0e:ef:be:18:e0:4f:2d:a5:b3:36:0b:c8: 78:95:5f:de:eb:9f:14:ae:54:19:27:ad:73:8e:1c: b6:ed:1b:75:54:7b:85:86:32:38:bc:ce:a6:6c:f4: bd:74:e8:0c:4d:d9:f8:aa:52:10:f3:aa:de:04:d4: 55:15:cd:9e:03:48:93:41:df:d6:c4:dc:e3:56:fe: be:b8:8c:a4:db:8d:3b:fe:41:a5:27:92:b6:6a:a7: d7:3e:7c:b2:49:ad:f1:a4:64:a1:07:50:ea:35:c6: d2:9b:60:05:00:e8:10:b0:18:ed:04:d1:c6:b8:4d: 70:c3:ac:03:b6:c9:34:c2:65:32:82:e4:dc:c8:93: 92:43:19:66:fa:0a:2d:31:8a:04:fc:af:65:6d:44: 77:74:8f:ef:02:84:5c:1a:98:b7:72:7a:99:09:64: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:EF:B3:50:0F:C2:DE:44:AD:AB:0A:15:A7:D4:55:53:4F:A5:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e1:ba:3d:25:4b:d0:d2:7b:93:d6:97:f0:48:de:ce:cd:dc: fc:7c:62:01:9e:f4:c5:62:9f:3a:10:ab:62:05:4c:ed:13:37: 01:f4:11:a4:cf:7b:27:e7:ef:69:2b:62:0b:7d:52:21:cd:ec: 5a:44:b5:d1:64:41:4a:6e:8c:94:66:e0:45:c3:79:f7:93:45: f3:a6:35:6b:ae:c0:74:d6:76:bd:30:ae:58:80:b2:65:7f:3a: 97:ce:bd:f0:2c:72:f0:46:29:0a:09:d9:5c:82:03:fd:82:90: df:b0:91:63:f3:9c:da:0f:0a:1a:97:26:e0:78:68:83:6a:a7: 94:9f:72:31:d9:73:96:09:76:09:17:79:2c:1f:63:b4:4c:fc: 72:7c:78:5a:5e:35:5b:15:09:49:bf:cd:3b:c0:63:73:18:18: d3:fe:33:76:a7:fa:49:a1:53:57:83:80:74:70:fa:d5:71:ae: 43:b5:93:44:53:12:5d:9b:b7:33:69:4b:96:3d:7c:79:aa:b1: 76:79:6c:a2:6c:14:ab:29:2f:7c:d9:14:4a:de:f8:3b:3b:6e: fa:d6:7e:3c:4e:79:4a:02:6d:51:a9:be:02:24:b0:25:b8:27: 89:4e:bf:99:90:22:ed:35:11:65:9d:a7:83:6d:b7:a8:0d:64: 7e:6c:71:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lr2mId7O/ZPpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NjQwOTc0NDctYzczYS00NDNlLWI3ZjctNmI3MTJhMjhiOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01zURKfLb36Q9wbk9nuxjku4m1O+4eyI/sNf e57L8fNtUyaMpFRVBDrPpymN9b3QFKtRZktdT6L/XDw3xeL6tmgHHWOyFhA07ETm 3yVvAiqZZrPnBRijPZXVG8wO774Y4E8tpbM2C8h4lV/e658UrlQZJ61zjhy27Rt1 VHuFhjI4vM6mbPS9dOgMTdn4qlIQ86reBNRVFc2eA0iTQd/WxNzjVv6+uIyk2407 /kGlJ5K2aqfXPnyySa3xpGShB1DqNcbSm2AFAOgQsBjtBNHGuE1ww6wDtsk0wmUy guTcyJOSQxlm+gotMYoE/K9lbUR3dI/vAoRcGpi3cnqZCWT2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTb77NQD8LeRK2rChWn1FVTT6VuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfhuj0lS9DSe5PWl/BI3s7N3Px8YgGe9MVinzoQq2IFTO0TNwH0EaTP eyfn72krYgt9UiHN7FpEtdFkQUpujJRm4EXDefeTRfOmNWuuwHTWdr0wrliAsmV/ OpfOvfAscvBGKQoJ2VyCA/2CkN+wkWPznNoPChqXJuB4aINqp5SfcjHZc5YJdgkX eSwfY7RM/HJ8eFpeNVsVCUm/zTvAY3MYGNP+M3an+kmhU1eDgHRw+tVxrkO1k0RT El2btzNpS5Y9fHmqsXZ5bKJsFKspL3zZFEre+Ds7bvrWfjxOeUoCbVGpvgIksCW4 J4lOv5mQIu01EWWdp4Ntt6gNZH5scZo= -----END CERTIFICATE-----Generated at Mon Nov 3 08:54:20 2025 by rpki-client