$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa File: 98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa (raw, json) Hash identifier: 8dxVPJ+FvfaCVswkznjXrJIy9LoMixuvpgIoQDGDwZ4= Subject key identifier: 17:6E:2C:60:A3:21:19:A2:1B:45:7A:C4:EB:8C:C1:B9:6E:89:7A:89 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584BA0D25B1A6074A261C3E9A100 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 23.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5b:1a:60:74:a2:61:c3:e9:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=78e37ea9-061e-4b26-969d-21e191ed54a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:c0:26:9b:73:25:43:4f:51:40:42:de:4f: 03:64:d7:02:bb:54:22:52:6d:e6:9c:70:fa:9a:82: 51:d3:b2:b4:a3:da:d9:f9:87:86:e7:19:a5:c5:a6: 9d:ce:19:76:dd:d3:90:9e:de:3f:f5:ee:cf:e4:50: 85:9f:24:ef:10:3b:35:aa:04:e6:f5:5b:1a:b8:7a: ae:8b:3c:25:5e:a0:c9:54:82:58:ce:da:1e:e1:5f: 6c:1b:24:86:c2:f8:a1:55:14:b9:a3:7a:9c:9c:94: 9e:18:c3:80:d1:5d:08:ce:bd:13:49:e4:bb:fa:e7: 0a:8d:0d:20:b5:04:2e:12:92:78:be:00:a1:16:24: d2:34:c7:d4:f3:fa:93:16:81:bc:1e:47:53:76:b2: 1f:da:ca:d1:1a:e5:39:c1:3a:42:a3:f7:27:7f:4d: e4:cb:2f:f4:82:c3:20:1f:c0:c2:53:7e:27:4f:07: df:d4:3b:f1:fb:42:fe:0a:e1:66:d0:d8:75:9a:ef: 9a:c0:5d:1c:b0:61:a4:ee:63:97:9e:4c:61:3a:bf: 21:e6:86:f6:a2:84:c7:5e:c7:7e:d9:95:f1:9a:44: d0:44:fd:b5:e5:93:f0:36:23:b0:18:1a:77:3f:04: d7:63:b5:05:55:e2:51:00:6b:0b:d8:5d:5f:a3:dd: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6E:2C:60:A3:21:19:A2:1B:45:7A:C4:EB:8C:C1:B9:6E:89:7A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:af:d2:ac:0e:64:56:66:e1:c0:9c:ae:5f:06:f2:56:78:d7: 4a:7c:5b:b7:0f:92:35:b6:f0:f0:c6:03:1b:93:a1:ce:c5:c5: 78:dc:43:a6:05:40:77:b1:87:66:f2:d0:39:2a:12:d8:be:55: c0:3b:31:0a:85:a3:1f:55:5b:da:3c:23:94:8e:bb:2a:e5:2d: 8c:14:23:01:61:be:66:30:4f:ef:ea:5c:4d:c8:16:ea:fd:54: e2:f4:8a:8c:fe:72:b4:a6:45:65:ea:1f:78:99:b7:f6:49:2b: 1f:7d:75:36:27:b6:c6:75:18:44:b3:92:31:84:38:6b:d1:d2: 86:8a:6f:7c:8d:45:8c:9d:0b:b2:b7:44:ea:12:d4:c2:b0:a1: 23:bb:14:83:77:72:74:e9:90:9a:7e:15:86:31:eb:37:23:86: ba:f4:04:c2:67:42:19:42:22:1f:1c:08:db:a6:2a:ed:cc:2d: 73:2b:46:b3:e7:64:0f:17:dd:38:bd:5c:c2:f3:df:8d:1b:46: 53:b7:a8:4b:ea:5e:67:f6:53:7d:dd:0a:83:32:21:e2:58:3a: 24:06:88:13:c4:40:e4:9e:9a:75:78:39:b7:e5:0d:64:9d:b3: 33:52:96:d8:ec:3f:9e:ad:2f:ab:b0:b1:0b:8d:69:6d:51:35: c8:35:57:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lsaYHSiYcPpoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NzhlMzdlYTktMDYxZS00YjI2LTk2OWQtMjFlMTkxZWQ1NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCzAJptzJUNPUUBC3k8DZNcCu1QiUm3mnHD6 moJR07K0o9rZ+YeG5xmlxaadzhl23dOQnt4/9e7P5FCFnyTvEDs1qgTm9VsauHqu izwlXqDJVIJYztoe4V9sGySGwvihVRS5o3qcnJSeGMOA0V0Izr0TSeS7+ucKjQ0g tQQuEpJ4vgChFiTSNMfU8/qTFoG8HkdTdrIf2srRGuU5wTpCo/cnf03kyy/0gsMg H8DCU34nTwff1Dvx+0L+CuFm0Nh1mu+awF0csGGk7mOXnkxhOr8h5ob2ooTHXsd+ 2ZXxmkTQRP215ZPwNiOwGBp3PwTXY7UFVeJRAGsL2F1fo92XYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBduLGCjIRmiG0V6xOuMwbluiXqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvOThkMWFmMzctOTBkNy0z NTQ4LThkYTgtYzQxZjVjY2YxYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuv0qwOZFZm4cCcrl8G8lZ410p8W7cPkjW28PDGAxuToc7FxXjcQ6YF QHexh2by0DkqEti+VcA7MQqFox9VW9o8I5SOuyrlLYwUIwFhvmYwT+/qXE3IFur9 VOL0ioz+crSmRWXqH3iZt/ZJKx99dTYntsZ1GESzkjGEOGvR0oaKb3yNRYydC7K3 ROoS1MKwoSO7FIN3cnTpkJp+FYYx6zcjhrr0BMJnQhlCIh8cCNumKu3MLXMrRrPn ZA8X3Ti9XMLz340bRlO3qEvqXmf2U33dCoMyIeJYOiQGiBPEQOSemnV4ObflDWSd szNSltjsP56tL6uwsQuNaW1RNcg1V2g= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:17 2025 by rpki-client