$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa File: 4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa (raw, json) Hash identifier: 1ZhaGOlSTJPLb45qWLdsEDGA5IxI9F1/lDw1XzHz3wg= Subject key identifier: 7E:29:B1:6B:67:47:E7:9C:0F:CE:29:75:84:09:08:2D:9B:7D:5F:EF Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584F85786DB703A8564AA0688880 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 19257 IP address blocks: 23.252.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:6d:b7:03:a8:56:4a:a0:68:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=80cc8acf-fa55-4de8-9496-ee99cbb57993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:28:5e:3c:d0:a4:04:07:48:51:36:50:f5: 86:d8:2f:10:d3:52:8d:81:1e:02:43:64:8d:93:f7: 63:47:07:5d:ad:ec:92:51:62:40:bc:13:06:82:af: f7:63:cb:2f:3b:e2:72:8e:48:42:8f:ac:13:0f:79: ef:14:6a:d9:b1:17:a0:6d:fe:74:3f:14:8a:d9:eb: 27:c2:68:2c:ea:e4:d3:bf:4c:9a:41:7a:95:21:0e: 03:3c:f8:28:b2:02:ec:cb:13:d8:73:2b:17:e8:be: 56:54:d0:75:18:68:91:1b:a0:1e:6b:7b:cc:ab:52: 5a:38:e6:b7:1a:b0:df:8c:74:e9:35:1d:ed:83:f7: e1:b9:29:ff:b0:13:c6:18:f5:da:c7:c5:af:4e:f8: 4c:0a:70:26:29:86:ca:04:9b:b2:dd:54:52:23:2a: f5:1a:19:bd:fb:d9:29:bb:70:f3:f1:bc:ba:fd:d0: 8e:3d:79:9e:03:eb:b1:70:85:1d:d2:98:22:c8:6b: c0:2f:64:da:4f:62:bd:d5:cf:3c:1f:5d:34:d6:0b: b5:1a:20:8d:28:bd:1f:8a:7a:0c:93:f7:5e:b5:63: 29:4f:32:58:32:bb:e3:f1:49:d6:77:68:57:b1:00: 68:68:1c:e1:81:7a:7f:ee:ee:3f:48:d0:80:5f:98: 79:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:29:B1:6B:67:47:E7:9C:0F:CE:29:75:84:09:08:2D:9B:7D:5F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/4cbed885-6522-3dbe-9a35-ebc4b9b3dc14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:25:89:c8:6a:ba:c8:e5:1d:29:8e:bb:67:48:91:7d:1c:09: a4:8d:32:b1:78:76:1e:b7:a4:b7:8a:44:98:4d:52:ad:8d:8b: 37:26:9e:8b:8c:cb:d3:1e:41:27:f9:2b:a3:45:30:d3:42:72: e9:3f:ec:2a:f8:ed:e5:e7:bc:08:58:95:01:54:e5:1f:1d:5e: bd:7f:a2:1c:cf:b6:98:1b:33:0f:81:0b:53:40:5d:c5:63:25: 2d:f2:79:72:a0:3a:25:3c:c2:73:c0:74:ce:b0:23:0d:01:c4: 9e:e7:4d:db:8f:f5:a4:97:cb:49:2e:63:3d:22:ad:0d:98:45: 20:c5:42:c7:f7:2f:4c:12:11:5c:e9:8e:6d:cb:92:16:eb:1c: 40:0d:a4:65:d1:81:1b:8e:28:2d:9a:04:9b:83:3a:18:78:bf: 89:cd:ba:e9:f3:15:33:b1:74:c7:a1:31:e3:34:71:17:42:f1: 38:45:8f:6a:eb:c3:2a:cf:02:c0:51:49:69:1c:6b:05:5b:75: 39:b1:a5:d1:d8:62:0a:8e:2a:b7:41:1f:b2:ae:64:20:da:e2: 9f:ee:07:23:ac:f9:3f:e7:5c:c4:bc:6a:52:a0:85:b8:3e:af: 9a:c0:e8:4a:3b:19:aa:6f:23:97:ed:1b:50:ed:07:55:65:0a: f4:3b:d0:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeG23A6hWSqBoiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk ODBjYzhhY2YtZmE1NS00ZGU4LTk0OTYtZWU5OWNiYjU3OTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzIoXjzQpAQHSFE2UPWG2C8Q01KNgR4CQ2SN k/djRwddreySUWJAvBMGgq/3Y8svO+JyjkhCj6wTD3nvFGrZsRegbf50PxSK2esn wmgs6uTTv0yaQXqVIQ4DPPgosgLsyxPYcysX6L5WVNB1GGiRG6Aea3vMq1JaOOa3 GrDfjHTpNR3tg/fhuSn/sBPGGPXax8WvTvhMCnAmKYbKBJuy3VRSIyr1Ghm9+9kp u3Dz8by6/dCOPXmeA+uxcIUd0pgiyGvAL2TaT2K91c88H1001gu1GiCNKL0finoM k/detWMpTzJYMrvj8UnWd2hXsQBoaBzhgXp/7u4/SNCAX5h5rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4psWtnR+ecD84pdYQJCC2bfV/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvNGNiZWQ4ODUtNjUyMi0z ZGJlLTlhMzUtZWJjNGI5YjNkYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKolichqusjlHSmOu2dIkX0cCaSNMrF4dh63pLeKRJhNUq2NizcmnouM y9MeQSf5K6NFMNNCcuk/7Cr47eXnvAhYlQFU5R8dXr1/ohzPtpgbMw+BC1NAXcVj JS3yeXKgOiU8wnPAdM6wIw0BxJ7nTduP9aSXy0kuYz0irQ2YRSDFQsf3L0wSEVzp jm3LkhbrHEANpGXRgRuOKC2aBJuDOhh4v4nNuunzFTOxdMehMeM0cRdC8ThFj2rr wyrPAsBRSWkcawVbdTmxpdHYYgqOKrdBH7KuZCDa4p/uByOs+T/nXMS8alKghbg+ r5rA6Eo7GapvI5ftG1DtB1VlCvQ70Kk= -----END CERTIFICATE-----Generated at Thu Nov 5 04:54:22 2026 by rpki-client