$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa File: 200cf835-7710-3227-a110-70619776c894.roa (raw, json) Hash identifier: nl0+Z4YY4WwbykP6lcOMtmsHzqI1YpN4cYFa2lAp51o= Subject key identifier: ED:32:83:DB:8D:D9:3B:F1:BA:2A:6B:F9:CC:61:53:5C:0A:3C:82:14 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584D60E504F380ED0AC545F4F000 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 19257 IP address blocks: 23.252.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:04:f3:80:ed:0a:c5:45:f4:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=233e3202-c51c-4aa2-9def-d2d3b547ac4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0f:4f:d2:69:7f:6c:34:02:31:8c:59:b6:03: 50:dd:03:3c:9d:9a:6d:a0:f3:d7:ff:4e:1f:bd:0a: 21:24:7b:2f:ec:0f:e2:3f:f3:1c:49:fc:3b:88:88: 9e:8a:e7:fe:22:62:61:ec:23:51:57:ed:a4:4f:59: 05:f0:62:0d:a5:ff:eb:0e:60:01:ff:b7:26:a2:98: 0e:f6:25:fe:64:12:c7:72:80:3b:7c:da:38:30:59: 5b:ae:8d:a9:4b:88:84:68:42:ba:db:10:ed:03:30: 48:dd:22:a7:1c:c5:e5:b8:e6:28:b3:a3:c7:ff:90: 13:c6:74:f0:c3:c6:68:cf:cd:b2:5e:ab:23:bc:1d: 13:04:5b:e4:d9:0c:6a:c4:2a:5e:7c:88:58:f0:5e: ef:6d:5d:57:72:27:91:df:6a:af:02:67:09:4a:f5: 6c:c1:54:3d:80:2c:f2:92:e5:6f:20:20:2b:02:0e: f0:64:2d:4d:8f:14:52:81:6b:c4:bd:53:8e:1e:ec: 09:f7:be:b9:0b:c3:c3:e3:f8:6b:b1:8b:c2:c0:9b: 97:a3:6f:00:12:0f:e8:c8:07:c5:8a:48:79:3a:76: 2e:b7:f9:73:5a:20:aa:c4:0b:76:90:cd:fc:72:80: 39:aa:30:b1:8a:c8:c8:9d:aa:c2:41:8d:28:cd:85: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:32:83:DB:8D:D9:3B:F1:BA:2A:6B:F9:CC:61:53:5C:0A:3C:82:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:af:87:a3:6d:27:03:e2:be:1b:14:c6:bc:67:9a:a6:43:b2: 7b:7f:d3:78:42:7c:22:44:e7:f9:ed:a1:06:56:94:1c:e9:ec: ae:87:1f:eb:d6:24:1a:ed:c2:f5:92:48:d2:91:a0:59:ec:45: 22:4a:71:dd:d1:36:42:a1:0b:9e:54:db:f5:7f:f7:ac:05:9a: 58:79:d3:fe:f3:6e:57:ae:97:22:bd:a9:65:10:3a:cd:8c:4b: f1:07:4a:ad:58:8c:98:ac:71:04:a5:b1:98:32:d1:54:cd:e3: 69:c1:85:26:00:00:ef:6c:64:21:d2:5a:01:b0:f6:ec:5a:c3: 0d:ab:76:7d:47:e8:c2:b7:7f:62:fa:c6:34:84:04:6a:e6:64: ad:12:24:f7:b6:ff:c9:92:df:73:3f:b8:00:03:86:0a:36:18: 50:52:6f:a8:46:89:56:b5:f1:38:a5:99:55:f3:64:15:90:9c: be:1d:bc:53:6d:9e:d3:d2:8b:9b:09:6e:ad:1c:8e:8d:f3:0e: 31:c7:82:7c:fa:57:e4:31:70:ce:83:41:6c:a6:0a:2b:93:63: db:76:ec:42:d9:62:4f:76:f4:ca:f4:8e:d8:1a:ff:46:12:e8: 07:ee:de:b9:bc:53:a8:45:ac:b3:74:18:49:cb:7b:c6:8c:66: 79:a9:67:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QTzgO0KxUX08AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MjMzZTMyMDItYzUxYy00YWEyLTlkZWYtZDJkM2I1NDdhYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg9P0ml/bDQCMYxZtgNQ3QM8nZptoPPX/04f vQohJHsv7A/iP/McSfw7iIieiuf+ImJh7CNRV+2kT1kF8GINpf/rDmAB/7cmopgO 9iX+ZBLHcoA7fNo4MFlbro2pS4iEaEK62xDtAzBI3SKnHMXluOYos6PH/5ATxnTw w8Zoz82yXqsjvB0TBFvk2QxqxCpefIhY8F7vbV1XcieR32qvAmcJSvVswVQ9gCzy kuVvICArAg7wZC1NjxRSgWvEvVOOHuwJ9765C8PD4/hrsYvCwJuXo28AEg/oyAfF ikh5OnYut/lzWiCqxAt2kM38coA5qjCxisjInarCQY0ozYW3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0yg9uN2Tvxuipr+cxhU1wKPIIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMjAwY2Y4MzUtNzcxMC0z MjI3LWExMTAtNzA2MTk3NzZjODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSvh6NtJwPivhsUxrxnmqZDsnt/03hCfCJE5/ntoQZWlBzp7K6HH+vW JBrtwvWSSNKRoFnsRSJKcd3RNkKhC55U2/V/96wFmlh50/7zbleulyK9qWUQOs2M S/EHSq1YjJiscQSlsZgy0VTN42nBhSYAAO9sZCHSWgGw9uxaww2rdn1H6MK3f2L6 xjSEBGrmZK0SJPe2/8mS33M/uAADhgo2GFBSb6hGiVa18TilmVXzZBWQnL4dvFNt ntPSi5sJbq0cjo3zDjHHgnz6V+QxcM6DQWymCiuTY9t27ELZYk929Mr0jtga/0YS 6Afu3rm8U6hFrLN0GEnLe8aMZnmpZ40= -----END CERTIFICATE-----Generated at Fri Apr 17 22:06:57 2026 by rpki-client