$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa File: 4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa (raw, json) Hash identifier: hMgfkka/+X/LLPmcFnbDWeFGnOJc6uQ4Y6oQaBgIcHA= Subject key identifier: 70:64:D2:85:5D:00:7E:B1:A5:51:07:40:BA:C7:9B:77:83:3F:E2:15 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25B53D40DC6827D25E1C0 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 23.252.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5b:53:d4:0d:c6:82:7d:25:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=b13e8e55-900c-4140-a67c-e81fb18cde8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:c8:a1:6f:b9:79:db:8c:71:a1:bd:db:7d: ea:d5:fc:77:59:e3:90:8e:5f:57:ab:25:b1:92:3f: 4e:f9:f5:7d:79:f1:b8:62:9e:ee:bf:19:6c:50:4d: b2:3b:06:9f:e9:41:38:5a:df:03:7a:16:d5:0a:d2: 02:7c:71:e8:fc:81:13:67:75:d7:3a:34:18:9c:d0: 43:b6:50:ee:e4:7c:5d:ab:b0:d2:c5:55:a8:8b:8d: 34:f7:36:66:62:85:56:34:1a:10:fc:f1:4c:cc:ac: 64:f5:e1:36:ad:2c:17:c2:d9:e1:ad:17:f5:bc:1d: 78:50:3f:5d:17:4d:98:c2:3f:41:95:00:50:7a:20: ac:44:e7:9b:72:4c:6d:11:e4:02:a2:29:eb:55:42: 71:a4:41:66:0b:92:de:23:1d:40:8b:7e:5f:21:b2: fe:31:21:d4:e8:a6:b1:bc:77:88:67:8d:6c:91:06: 36:ee:2d:f4:47:8d:e2:a6:96:91:e5:aa:b3:ba:ba: 57:8c:39:91:56:72:68:14:1f:c4:8d:3f:36:60:1e: 4b:27:c8:55:6f:3f:ab:dd:9a:d3:51:b5:a3:64:67: c4:b6:3a:25:a3:31:8e:b3:20:20:07:c0:e5:fc:56: 80:00:c7:27:51:30:ed:f9:93:b1:c1:79:fb:86:58: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:64:D2:85:5D:00:7E:B1:A5:51:07:40:BA:C7:9B:77:83:3F:E2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f8:fd:79:d5:31:64:1d:8d:00:a5:aa:01:47:b4:95:0e:b1: 12:c5:b1:26:08:c9:28:b9:ff:01:aa:be:68:29:e9:fe:3d:63: 15:8e:90:c7:d7:80:5c:94:12:66:de:ab:81:3d:27:b8:b8:ab: e3:18:a2:dc:85:2d:83:ed:99:00:21:32:74:5c:4e:ab:37:a2: 3f:d0:75:02:ad:7e:33:39:44:a4:fe:0e:2d:a6:4f:0f:cc:f5: c9:f0:1a:a4:3b:b3:d7:27:7d:ae:10:40:17:c3:59:ba:5b:97: ab:6b:87:3e:4a:de:9d:2c:af:e6:14:27:2b:de:c2:2f:e1:25: 99:3f:12:f8:40:ec:af:93:98:42:8f:82:f8:8a:7c:8f:91:10: aa:8a:cd:ac:9e:c8:09:c9:b3:f5:8c:70:0f:2e:09:b5:27:f3: 81:00:ad:e9:b9:fa:97:96:db:3e:2b:e2:a0:a0:59:09:a5:df: 17:0a:88:d8:43:71:e5:cc:df:86:c9:49:79:39:63:92:27:68: d3:4a:db:aa:33:7c:7a:e0:72:d4:8f:4c:18:17:de:71:34:f8: bb:a7:85:ec:12:43:ad:b4:78:83:44:77:34:c3:26:f3:fe:e8: e1:98:8d:24:e0:23:c2:60:93:3a:53:aa:13:58:a5:3c:3f:d9: 97:e8:d2:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0ltT1A3Ggn0l4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YjEzZThlNTUtOTAwYy00MTQwLWE2N2MtZTgxZmIxOGNkZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DjIoW+5eduMcaG9233q1fx3WeOQjl9XqyWx kj9O+fV9efG4Yp7uvxlsUE2yOwaf6UE4Wt8DehbVCtICfHHo/IETZ3XXOjQYnNBD tlDu5Hxdq7DSxVWoi4009zZmYoVWNBoQ/PFMzKxk9eE2rSwXwtnhrRf1vB14UD9d F02Ywj9BlQBQeiCsROebckxtEeQCoinrVUJxpEFmC5LeIx1Ai35fIbL+MSHU6Kax vHeIZ41skQY27i30R43ippaR5aqzurpXjDmRVnJoFB/EjT82YB5LJ8hVbz+r3ZrT UbWjZGfEtjolozGOsyAgB8Dl/FaAAMcnUTDt+ZOxwXn7hlgI5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBk0oVdAH6xpVEHQLrHm3eDP+IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvNGNiZWQ4ODUtNjUyMi0z ZGJlLTlhMzUtZWJjNGI5YjNkYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn4/XnVMWQdjQClqgFHtJUOsRLFsSYIySi5/wGqvmgp6f49YxWOkMfX gFyUEmbeq4E9J7i4q+MYotyFLYPtmQAhMnRcTqs3oj/QdQKtfjM5RKT+Di2mTw/M 9cnwGqQ7s9cnfa4QQBfDWbpbl6trhz5K3p0sr+YUJyvewi/hJZk/EvhA7K+TmEKP gviKfI+REKqKzayeyAnJs/WMcA8uCbUn84EArem5+peW2z4r4qCgWQml3xcKiNhD ceXM34bJSXk5Y5InaNNK26ozfHrgctSPTBgX3nE0+LunhewSQ620eINEdzTDJvP+ 6OGYjSTgI8JgkzpTqhNYpTw/2Zfo0pw= -----END CERTIFICATE-----Generated at Mon Nov 3 08:51:43 2025 by rpki-client