$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa File: 3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa (raw, json) Hash identifier: ecqrgtyMkPjQ3bqaiG8MTuS0ozMjkMS6DnA6PZ0ejiU= Subject key identifier: 65:F2:77:1E:9C:18:6F:9A:FE:ED:AD:19:08:8D:27:CE:10:6B:15:5B Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584D60E505174B4A6A707CCBB600 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 19257 IP address blocks: 23.252.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:05:17:4b:4a:6a:70:7c:cb:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=c1337c7e-8a90-4f6f-aea8-29543a50e736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:4e:5d:48:ae:3e:67:10:b3:f2:80:46:9a: fb:98:67:b5:b4:e6:1a:c2:85:d4:32:d2:aa:53:31: 93:a8:eb:80:4b:06:28:7a:2c:41:1e:94:31:84:9b: d5:4b:39:01:2b:e7:58:41:16:7f:cc:43:84:f1:cd: 6e:ac:ca:f8:f1:c1:f9:27:30:b7:73:37:6a:a6:d4: 0b:1c:6f:fa:69:5e:85:29:ee:29:83:52:ea:00:76: c0:d8:63:1b:2e:7e:5e:87:b9:a7:5b:9e:74:96:a0: 2a:cc:62:e4:64:34:91:b3:80:94:21:1a:78:a6:88: 40:88:1a:e2:23:8d:3e:12:7c:e9:6f:5f:2a:9f:42: 9e:21:1b:12:d9:17:d0:cc:ff:80:c5:29:bf:13:a2: d9:e5:1c:e0:f0:42:14:7f:0e:43:02:c2:9e:0f:ba: 81:89:ae:23:fd:85:ac:6f:39:0a:03:ff:1a:8b:b3: 60:f2:33:48:00:87:4b:ec:b6:70:9e:37:c9:f2:b9: 17:8e:51:20:01:e8:75:80:c6:a7:a8:45:d0:98:66: d8:7a:c8:4d:9d:64:a8:0b:b6:76:72:c4:e7:1b:59: 80:c1:8a:6a:54:8e:ff:3d:03:f2:49:98:e7:ac:81: dd:08:dc:f0:2a:30:55:e6:2f:75:92:64:12:68:bd: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F2:77:1E:9C:18:6F:9A:FE:ED:AD:19:08:8D:27:CE:10:6B:15:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3d5f3393-66f4-3f60-9c86-32a4a7d60dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:41:0e:c7:62:b9:97:99:4d:28:91:4c:6d:37:db:a4:23:ab: b3:8f:30:4b:d9:43:bf:bf:59:3d:8c:67:3f:14:a5:db:ec:70: fc:31:ae:4c:82:60:a8:ab:d9:71:f1:15:48:bf:f8:ec:51:3d: db:e2:4c:0f:aa:04:18:85:0b:c6:f1:a0:c6:ff:3a:79:37:fb: 45:f8:c8:a1:84:df:13:7a:0b:84:af:f5:1c:de:79:96:67:ac: 3c:26:cb:16:49:76:8f:a3:4b:8d:b3:58:bd:9b:c2:1e:96:98: 54:b0:0a:ac:dd:38:7d:d3:f4:8f:ce:39:20:08:38:a4:f5:4c: 82:e7:5a:b7:0d:1b:1b:74:cb:85:bb:dc:9a:77:d2:a8:15:f5: 81:35:d5:85:f4:20:97:06:cd:0d:f1:c0:86:93:75:3f:07:39: 84:0a:81:d5:d3:40:e5:49:db:2b:fb:01:97:9c:cf:9f:b0:d1: ae:d8:f7:d8:64:07:a2:b9:68:0f:0f:d3:f6:38:47:48:09:34: dc:eb:00:39:12:a3:45:5c:40:95:0e:be:53:bb:ad:bf:00:09: 1a:76:9a:63:1e:12:2f:d9:d9:bc:0c:e9:bd:43:0a:e8:05:a0: 97:d6:b9:be:0c:50:18:3e:1f:5d:b1:64:e6:6c:ba:09:b5:fe: 52:57:35:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QUXS0pqcHzLtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YzEzMzdjN2UtOGE5MC00ZjZmLWFlYTgtMjk1NDNhNTBlNzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvVOXUiuPmcQs/KARpr7mGe1tOYawoXUMtKq UzGTqOuASwYoeixBHpQxhJvVSzkBK+dYQRZ/zEOE8c1urMr48cH5JzC3czdqptQL HG/6aV6FKe4pg1LqAHbA2GMbLn5eh7mnW550lqAqzGLkZDSRs4CUIRp4pohAiBri I40+Enzpb18qn0KeIRsS2RfQzP+AxSm/E6LZ5Rzg8EIUfw5DAsKeD7qBia4j/YWs bzkKA/8ai7Ng8jNIAIdL7LZwnjfJ8rkXjlEgAeh1gManqEXQmGbYeshNnWSoC7Z2 csTnG1mAwYpqVI7/PQPySZjnrIHdCNzwKjBV5i91kmQSaL2EmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXydx6cGG+a/u2tGQiNJ84QaxVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2Q1ZjMzOTMtNjZmNC0z ZjYwLTljODYtMzJhNGE3ZDYwZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdBDsdiuZeZTSiRTG0326Qjq7OPMEvZQ7+/WT2MZz8UpdvscPwxrkyC YKir2XHxFUi/+OxRPdviTA+qBBiFC8bxoMb/Onk3+0X4yKGE3xN6C4Sv9RzeeZZn rDwmyxZJdo+jS42zWL2bwh6WmFSwCqzdOH3T9I/OOSAIOKT1TILnWrcNGxt0y4W7 3Jp30qgV9YE11YX0IJcGzQ3xwIaTdT8HOYQKgdXTQOVJ2yv7AZecz5+w0a7Y99hk B6K5aA8P0/Y4R0gJNNzrADkSo0VcQJUOvlO7rb8ACRp2mmMeEi/Z2bwM6b1DCugF oJfWub4MUBg+H12xZOZsugm1/lJXNac= -----END CERTIFICATE-----Generated at Fri Apr 17 17:50:12 2026 by rpki-client