$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json) Hash identifier: Dq7+3ze0AwSaptWWwJs7P8QejrrH+KyAH1orhiUO0JU= Subject key identifier: D1:04:64:4E:6D:86:67:7A:72:F8:9E:8B:DA:81:65:88:AA:F9:27:47 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584F5A32C6CDB6079C922587A100 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 54143 IP address blocks: 23.166.112.0/24 maxlen: 24 2606:7180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:c6:cd:b6:07:9c:92:25:87:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=612a1c11-8dd0-47c6-b33f-c6ed5742a36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:17:ee:c1:02:f9:ec:f4:ca:e4:01:75:41: c9:66:a9:6d:63:d6:71:1c:ae:5d:62:72:da:1b:e7: cb:6a:2a:a7:f6:5d:4a:63:78:30:50:57:23:32:4d: 33:15:12:38:5a:f1:f8:a3:2d:32:c1:86:18:be:53: 52:61:ab:11:fb:dd:cd:d6:a0:78:b9:c4:0b:55:40: 2f:72:9a:42:e9:e7:c0:d5:5a:68:7e:a3:74:20:8d: 31:37:2c:c0:4b:65:b3:16:2a:8b:88:ec:f2:2b:4c: 8a:ce:72:2a:b8:a7:71:9c:60:82:f1:84:91:8e:33: 66:d0:8c:42:f1:40:e3:ad:70:1f:82:14:15:d6:7f: bc:e7:57:eb:89:e7:aa:c1:73:38:b7:77:6d:a7:e7: fc:2e:25:fa:cf:09:5e:3a:8c:4a:c3:46:45:5a:af: 12:c6:8b:a1:a5:01:a2:62:8d:fe:e4:ce:2f:02:b9: df:a7:92:d5:44:93:06:31:5a:ba:0d:55:be:bd:a9: 23:c1:23:eb:4f:45:d5:23:3f:e7:f0:85:4c:d0:39: 22:76:25:28:25:d5:2a:54:d7:9a:d5:b3:48:e4:dc: e9:f1:ee:7e:84:8a:c1:fb:07:f7:42:64:48:b6:a3: fa:11:f8:86:a7:e6:a4:fa:5e:db:e0:5e:6c:80:91: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:04:64:4E:6D:86:67:7A:72:F8:9E:8B:DA:81:65:88:AA:F9:27:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.112.0/24 IPv6: 2606:7180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b6:10:7f:47:4f:d6:3c:77:4f:cd:e6:12:78:ec:ad:7f:c9: cb:8c:d8:80:3e:4b:08:ef:f2:43:e5:a8:ae:0a:6a:c6:3d:9e: 20:95:96:80:52:75:47:6c:56:e7:06:fd:57:db:93:69:f3:13: a8:ea:69:98:d7:e4:ba:f5:c5:da:9e:e5:78:26:4b:5b:af:b6: 4a:c9:cd:56:c2:79:42:96:ee:72:f7:aa:94:70:74:db:e0:63: e5:6d:2e:22:11:50:00:9e:01:fc:45:bf:29:e9:63:68:62:6c: 46:e1:44:3f:8b:7d:23:cb:0a:2d:fc:24:67:49:2f:1f:2d:84: 88:7b:99:2a:e2:96:a9:52:e6:ec:b0:ee:3c:23:71:58:b7:8e: a1:d9:84:da:a5:7e:f0:9e:c1:e4:f6:e1:f3:08:39:90:eb:bd: 7a:45:0f:27:20:c5:0a:8c:64:9a:43:45:0c:96:14:c8:36:45: 06:c0:72:9b:07:28:cf:28:67:19:f6:d6:c2:07:39:6b:51:47: b6:15:c6:0f:51:32:16:f5:b9:85:0b:97:80:64:aa:3c:4a:ac: df:c6:8d:9a:58:fa:f9:31:23:92:26:e1:e2:e1:5e:aa:68:9b: e0:6f:9f:43:59:75:f5:cd:f5:e2:b4:30:a8:15:b4:47:43:ee: 7e:80:65:67 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9aMsbNtgeckiWHoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NjEyYTFjMTEtOGRkMC00N2M2LWIzM2YtYzZlZDU3NDJhMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ0X7sEC+ez0yuQBdUHJZqltY9ZxHK5dYnLa G+fLaiqn9l1KY3gwUFcjMk0zFRI4WvH4oy0ywYYYvlNSYasR+93N1qB4ucQLVUAv cppC6efA1VpofqN0II0xNyzAS2WzFiqLiOzyK0yKznIquKdxnGCC8YSRjjNm0IxC 8UDjrXAfghQV1n+851frieeqwXM4t3dtp+f8LiX6zwleOoxKw0ZFWq8SxouhpQGi Yo3+5M4vArnfp5LVRJMGMVq6DVW+vakjwSPrT0XVIz/n8IVM0DkidiUoJdUqVNea 1bNI5Nzp8e5+hIrB+wf3QmRItqP6EfiGp+ak+l7b4F5sgJH2WQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNEEZE5thmd6cviei9qBZYiq+SdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvY2FhZjFjN2MtZWNmMS0z NzY0LTk2MDgtYjZhMjEzZTNiZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6ZwMA0E AgACMAcDBQAmBnGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAC22EH9HT9Y8d0/N5hJ47K1/ycuM2IA+Swjv 8kPlqK4KasY9niCVloBSdUdsVucG/Vfbk2nzE6jqaZjX5Lr1xdqe5XgmS1uvtkrJ zVbCeUKW7nL3qpRwdNvgY+VtLiIRUACeAfxFvynpY2hibEbhRD+LfSPLCi38JGdJ Lx8thIh7mSrilqlS5uyw7jwjcVi3jqHZhNqlfvCeweT24fMIOZDrvXpFDycgxQqM ZJpDRQyWFMg2RQbAcpsHKM8oZxn21sIHOWtRR7YVxg9RMhb1uYULl4BkqjxKrN/G jZpY+vkxI5Im4eLhXqpom+Bvn0NZdfXN9eK0MKgVtEdD7n6AZWc= -----END CERTIFICATE-----Generated at Thu Oct 8 16:50:01 2026 by rpki-client