$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: 7VgYlznCBLFhk4zZU3GhlR8n0Vzl6p7Grs0UhheINwY= Subject key identifier: A2:28:F2:1B:86:E0:A4:74:1B:0E:06:B4:B2:FC:5E:5F:19:16:E0:83 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584D60E504E7948D76CD65E38780 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:04:e7:94:8d:76:cd:65:e3:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=344a69ef-cd36-46be-8297-a4bf36cd30dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:23:b5:ae:29:66:e5:6d:d8:5c:a1:9f:5a:36: 4b:da:cb:d5:01:1f:21:d4:dc:03:80:38:0e:9c:9e: 5a:34:d3:0d:cc:85:26:eb:41:50:bd:32:44:34:73: e2:00:32:6d:3b:70:20:fc:d2:73:76:c7:dd:f8:1b: 9e:52:02:ed:cc:ea:ae:c9:9a:4e:43:21:d1:f8:62: da:4f:9a:d6:a8:a6:34:25:4a:3a:0e:e7:2d:08:7a: fe:2a:50:19:2e:34:cc:f4:a8:3d:11:fc:f2:a2:fa: af:95:e3:89:a4:60:5b:4b:dd:50:06:51:88:16:01: 00:88:c1:8f:c9:d6:5a:7d:47:03:4f:b4:1a:86:a4: 21:84:f3:a4:37:e9:98:1e:75:66:d3:3c:6f:e1:c1: 0f:16:dd:e9:a1:37:c4:8b:19:d5:62:f5:5f:2c:2f: 52:03:6d:d9:4e:c5:eb:90:49:ed:41:3c:6f:6c:c6: bb:06:55:9e:7b:19:f5:80:b3:fc:76:14:a7:cb:1c: 9f:12:81:3f:10:c4:61:40:16:6a:95:24:ce:8e:71: b6:ff:86:7d:71:be:7e:d3:b8:63:b5:db:f9:b7:88: 5b:b3:2e:ca:74:d0:a9:23:23:f2:77:c9:a5:4c:8d: c0:2e:b7:31:dd:5e:9d:6e:ff:9e:15:1f:e8:03:f2: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:F2:1B:86:E0:A4:74:1B:0E:06:B4:B2:FC:5E:5F:19:16:E0:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4e:0a:28:0f:a9:04:e6:39:6d:7f:93:73:99:90:63:0b:40: e7:f0:23:1d:28:ba:ef:86:83:a2:6c:5a:b7:09:5e:b5:3f:9e: ee:d3:72:5b:2a:a5:39:99:96:47:51:1d:4a:7f:f1:f9:e9:9d: 1f:e6:07:8d:9c:7f:f0:1d:8e:9d:a4:11:2d:aa:31:2a:67:4b: 49:92:d8:72:db:70:06:eb:31:78:b6:fb:5f:fb:cb:a7:1c:88: d9:b1:9f:e8:06:1d:95:7c:75:42:83:06:83:9d:0c:60:10:58: b5:6f:8f:5e:80:33:b7:99:c2:aa:75:00:a4:9f:a8:78:fe:e9: 5e:5a:1a:d1:e5:ef:2a:4f:8d:f7:ce:9d:87:7c:71:d9:ba:2e: 52:0e:87:7e:d9:5b:3c:e0:95:4a:fe:1c:fa:60:19:47:f6:74: 81:5a:39:7f:30:b0:31:90:b9:74:47:cc:10:90:37:3e:af:47: 10:c7:0e:19:fe:eb:1d:ea:c6:ca:ff:d8:13:48:a3:1d:8f:ee: ea:43:7e:57:6a:3d:56:92:04:46:97:51:70:a5:e8:01:9f:3c: 08:74:8e:6e:d0:81:02:4a:23:83:1e:55:f0:57:9d:28:89:ad: ba:bc:71:33:2b:4e:11:12:93:57:df:6b:a6:ca:85:5e:89:86: 62:2d:41:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QTnlI12zWXjh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MzQ0YTY5ZWYtY2QzNi00NmJlLTgyOTctYTRiZjM2Y2QzMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyO1rilm5W3YXKGfWjZL2svVAR8h1NwDgDgO nJ5aNNMNzIUm60FQvTJENHPiADJtO3Ag/NJzdsfd+BueUgLtzOquyZpOQyHR+GLa T5rWqKY0JUo6DuctCHr+KlAZLjTM9Kg9EfzyovqvleOJpGBbS91QBlGIFgEAiMGP ydZafUcDT7QahqQhhPOkN+mYHnVm0zxv4cEPFt3poTfEixnVYvVfLC9SA23ZTsXr kEntQTxvbMa7BlWeexn1gLP8dhSnyxyfEoE/EMRhQBZqlSTOjnG2/4Z9cb5+07hj tdv5t4hbsy7KdNCpIyPyd8mlTI3ALrcx3V6dbv+eFR/oA/KGiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIo8huG4KR0Gw4GtLL8Xl8ZFuCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpOCigPqQTmOW1/k3OZkGMLQOfwIx0ouu+Gg6JsWrcJXrU/nu7Tclsq pTmZlkdRHUp/8fnpnR/mB42cf/Adjp2kES2qMSpnS0mS2HLbcAbrMXi2+1/7y6cc iNmxn+gGHZV8dUKDBoOdDGAQWLVvj16AM7eZwqp1AKSfqHj+6V5aGtHl7ypPjffO nYd8cdm6LlIOh37ZWzzglUr+HPpgGUf2dIFaOX8wsDGQuXRHzBCQNz6vRxDHDhn+ 6x3qxsr/2BNIox2P7upDfldqPVaSBEaXUXCl6AGfPAh0jm7QgQJKI4MeVfBXnSiJ rbq8cTMrThESk1ffa6bKhV6JhmItQeI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:49:53 2026 by rpki-client