$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json) Hash identifier: LI+nhJMmHTO7DTLu0ucgScs9s9W3AZe+f3njSgEn0Us= Subject key identifier: CA:D7:62:6F:15:19:B1:09:FE:30:82:36:AD:55:05:B3:71:41:A4:FD Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584B76F21063C68805F12AFF3680 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 54143 IP address blocks: 23.166.112.0/24 maxlen: 24 2606:7180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:10:63:c6:88:05:f1:2a:ff:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=556a73f1-0ea1-4f95-8390-f6ae46fa5175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:2d:12:0a:af:0f:80:c9:a9:bf:25:2b:eb: cd:e0:eb:93:26:a0:d6:f6:73:48:34:9c:b6:83:43: 18:c8:4d:39:5a:92:8f:1b:59:2b:2a:c8:1d:5b:fa: 95:c3:26:0c:7a:dc:de:6e:59:d8:60:29:c2:79:6c: ba:7b:82:c2:b1:fb:90:92:4f:19:7b:82:17:5c:9e: fe:9a:75:38:a5:6a:f5:93:3b:54:8e:b2:7a:78:e6: 87:07:be:90:f9:98:bd:5d:8b:cd:fa:1d:16:cc:3d: f8:5e:70:8d:bc:14:d7:22:bf:18:43:a8:d9:91:b7: 4c:8f:4d:58:60:60:c5:2f:c0:6c:31:a0:10:0f:c7: eb:76:52:7a:4d:dc:34:40:06:11:57:d5:d2:8f:64: 67:d3:17:a3:19:7e:8a:a2:21:f4:4f:65:67:4d:81: d6:dd:f8:5c:33:9e:8c:4d:15:7b:d5:e5:c7:df:c0: 44:a7:bf:dd:4d:6e:a7:e4:37:dc:1d:c7:24:91:14: c6:da:f6:be:46:d0:34:7e:24:35:cc:26:99:35:e6: 20:e4:4a:fe:df:53:6f:63:30:b6:f3:ec:1a:3a:16: de:e9:7f:70:74:7a:77:8f:c3:9d:c9:e8:d4:5d:e8: a4:f1:48:d7:65:47:be:84:4a:d7:38:9f:d0:a6:85: de:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D7:62:6F:15:19:B1:09:FE:30:82:36:AD:55:05:B3:71:41:A4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.112.0/24 IPv6: 2606:7180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:86:56:ea:e6:ee:c3:e9:24:ba:08:dc:34:18:a9:8c:f1:a7: 47:cf:e8:ac:f9:1e:a3:49:78:8d:7f:38:1f:bd:e8:df:dc:d5: 5b:16:dc:a3:99:d8:2f:3c:e3:e7:0a:24:d6:f4:6c:6d:7e:a3: a0:b5:a3:3a:18:e1:f1:dc:01:30:1e:bf:3d:f8:42:2c:d7:5b: 85:75:c9:96:fb:95:0d:a3:ea:5b:13:3c:30:8c:08:92:93:94: b5:75:cd:9c:a6:75:2d:22:89:31:05:08:ad:03:d3:68:12:f2: e3:88:da:00:b1:81:d0:6d:8d:16:11:08:d2:5d:b9:7e:8a:e7: 34:6c:fc:c6:10:9a:f2:b4:37:14:76:d6:eb:bb:4d:08:45:79: 02:5d:73:3a:dd:33:c5:0a:0e:87:2b:26:b7:78:21:af:b8:f0: 82:dd:e9:08:2e:48:fa:48:0e:2f:1c:21:a3:c1:40:ce:d4:e0: 76:ae:50:ea:90:02:e4:a6:de:97:22:39:00:fa:02:91:3e:fc: 4a:49:20:2a:9d:74:58:e7:30:62:91:48:f9:df:59:fc:bb:85: cc:f7:a4:6d:95:68:e7:ce:3d:65:f7:2a:4c:78:d2:7a:a6:9e: 9e:1a:e2:bf:3e:63:98:3b:81:3f:de:e2:a5:56:3c:c6:9c:bf: b0:56:cd:a4 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEt28hBjxogF8Sr/NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTU2YTczZjEtMGVhMS00Zjk1LTgzOTAtZjZhZTQ2ZmE1MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1AtEgqvD4DJqb8lK+vN4OuTJqDW9nNINJy2 g0MYyE05WpKPG1krKsgdW/qVwyYMetzeblnYYCnCeWy6e4LCsfuQkk8Ze4IXXJ7+ mnU4pWr1kztUjrJ6eOaHB76Q+Zi9XYvN+h0WzD34XnCNvBTXIr8YQ6jZkbdMj01Y YGDFL8BsMaAQD8frdlJ6Tdw0QAYRV9XSj2Rn0xejGX6KoiH0T2VnTYHW3fhcM56M TRV71eXH38BEp7/dTW6n5DfcHcckkRTG2va+RtA0fiQ1zCaZNeYg5Er+31NvYzC2 8+waOhbe6X9wdHp3j8OdyejUXeik8UjXZUe+hErXOJ/QpoXePQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMrXYm8VGbEJ/jCCNq1VBbNxQaT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvY2FhZjFjN2MtZWNmMS0z NzY0LTk2MDgtYjZhMjEzZTNiZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6ZwMA0E AgACMAcDBQAmBnGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABWGVurm7sPpJLoI3DQYqYzxp0fP6Kz5HqNJ eI1/OB+96N/c1VsW3KOZ2C884+cKJNb0bG1+o6C1ozoY4fHcATAevz34QizXW4V1 yZb7lQ2j6lsTPDCMCJKTlLV1zZymdS0iiTEFCK0D02gS8uOI2gCxgdBtjRYRCNJd uX6K5zRs/MYQmvK0NxR21uu7TQhFeQJdczrdM8UKDocrJrd4Ia+48ILd6QguSPpI Di8cIaPBQM7U4HauUOqQAuSm3pciOQD6ApE+/EpJICqddFjnMGKRSPnfWfy7hcz3 pG2VaOfOPWX3Kkx40nqmnp4a4r8+Y5g7gT/e4qVWPMacv7BWzaQ= -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:54 2025 by rpki-client