$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: 1PIRrCK0cg0Ic0tMLezr6VkEA3zevhlsuAzEER9NBwY= Subject key identifier: F4:F2:B5:84:C7:AA:52:D4:6C:66:58:4C:7F:BF:2D:68:EE:E0:14:65 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584E4129D86143476241419F4140 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d8:61:43:47:62:41:41:9f:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=8cb16048-a98a-476e-a4f4-1147fa73e3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:d7:8a:bf:f3:80:a3:66:5d:cc:fd:8e:ec: e6:db:77:38:03:ed:50:1c:c3:63:03:d6:66:c8:f8: 06:09:19:7a:7b:86:50:5a:39:13:47:8d:80:a9:e0: ca:54:d5:a5:fd:79:8b:97:77:45:35:8d:a3:1d:02: 69:e8:5a:be:c0:ef:e7:00:69:e3:51:7b:d4:56:2c: a2:24:28:5e:ee:de:6e:07:0c:a2:64:54:c0:49:0d: a9:09:5a:d2:8b:87:11:31:0a:4b:8d:48:ca:6e:7e: e5:ad:af:28:f2:85:07:b2:a1:14:5b:21:e2:91:ce: 65:4c:6f:a9:97:09:bc:39:d1:68:1f:24:57:78:01: 67:5c:ed:68:ee:1d:7e:cf:9a:29:5c:3d:f8:3c:1e: a5:f1:6f:3c:58:06:b8:4b:6c:86:2b:07:db:2a:06: 2d:2f:06:b7:95:bb:e9:1a:76:db:f9:e8:cf:1e:18: dc:54:b9:1c:52:c6:0a:3b:ba:8d:10:0a:79:5e:ad: 19:17:0e:fe:e7:cd:b3:0c:e6:e3:a5:19:ad:50:0a: 0d:4c:c4:af:78:3f:b7:96:6e:91:67:db:de:7f:88: 0e:6e:f1:e6:64:ec:96:5e:28:5b:04:db:19:00:2b: 33:26:c5:86:f8:95:ac:93:1a:d8:76:9c:61:62:a6: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F2:B5:84:C7:AA:52:D4:6C:66:58:4C:7F:BF:2D:68:EE:E0:14:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:81:e7:c7:28:36:11:17:58:83:e3:da:85:a5:b5:01:4a:8e: b9:3b:9c:cc:b6:d8:69:de:c8:52:41:fc:06:dd:41:92:64:49: 18:8a:b9:79:d7:bb:5c:29:a4:15:fb:b7:4a:c2:0e:e7:b4:d7: 6f:24:35:39:0c:93:0e:d7:9c:9c:b3:b8:94:5c:b1:fe:b1:76: c9:60:8f:b9:91:f3:38:d6:ba:f2:0f:3d:cd:97:a1:da:34:03: 27:49:83:0d:d1:42:fb:50:2e:98:45:fb:d5:6a:8b:8a:b8:22: 6f:18:ce:ca:ac:88:d7:94:28:42:ea:ec:c3:f9:16:be:00:52: 65:91:0c:6e:f1:bc:ac:c6:ba:88:ec:19:7d:2e:24:c9:d5:dd: 51:c5:ed:83:0a:be:b3:b7:33:82:eb:05:e8:c0:cd:ba:3f:c5: 1e:13:72:9b:16:e3:65:b4:00:75:bc:e7:7b:31:27:57:7e:a7: a9:32:94:ef:75:01:c9:d1:43:fc:22:5f:dc:e8:2a:2f:19:d9: 4b:5c:a4:36:ec:25:fb:4b:0d:0e:78:45:1c:e5:bb:ed:27:13: f3:75:fa:b6:3e:01:ab:e8:9d:cc:85:00:ac:07:32:ea:25:ab: b8:e2:fd:fe:d5:d6:51:6a:be:76:6b:c5:68:b2:77:77:61:2b: 3c:8e:3c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdhhQ0diQUGfQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk OGNiMTYwNDgtYTk4YS00NzZlLWE0ZjQtMTE0N2ZhNzNlM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8PXir/zgKNmXcz9juzm23c4A+1QHMNjA9Zm yPgGCRl6e4ZQWjkTR42AqeDKVNWl/XmLl3dFNY2jHQJp6Fq+wO/nAGnjUXvUViyi JChe7t5uBwyiZFTASQ2pCVrSi4cRMQpLjUjKbn7lra8o8oUHsqEUWyHikc5lTG+p lwm8OdFoHyRXeAFnXO1o7h1+z5opXD34PB6l8W88WAa4S2yGKwfbKgYtLwa3lbvp Gnbb+ejPHhjcVLkcUsYKO7qNEAp5Xq0ZFw7+582zDObjpRmtUAoNTMSveD+3lm6R Z9vef4gObvHmZOyWXihbBNsZACszJsWG+JWskxrYdpxhYqZcDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTytYTHqlLUbGZYTH+/LWju4BRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWB58coNhEXWIPj2oWltQFKjrk7nMy22GneyFJB/AbdQZJkSRiKuXnX u1wppBX7t0rCDue0128kNTkMkw7XnJyzuJRcsf6xdslgj7mR8zjWuvIPPc2Xodo0 AydJgw3RQvtQLphF+9Vqi4q4Im8YzsqsiNeUKELq7MP5Fr4AUmWRDG7xvKzGuojs GX0uJMnV3VHF7YMKvrO3M4LrBejAzbo/xR4TcpsW42W0AHW853sxJ1d+p6kylO91 AcnRQ/wiX9zoKi8Z2UtcpDbsJftLDQ54RRzlu+0nE/N1+rY+AavoncyFAKwHMuol q7ji/f7V1lFqvnZrxWiyd3dhKzyOPJc= -----END CERTIFICATE-----Generated at Fri Jul 24 04:00:12 2026 by rpki-client