$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa File: 0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json) Hash identifier: Djo6Z6BKl8gr7J4fhYnlBBc6dJAAGkPGUxmMAhWNrLk= Subject key identifier: DD:9A:2F:8D:F7:B0:11:B6:44:3E:AF:72:02:52:09:62:B6:0E:89:5C Certificate issuer: /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Certificate serial: 010D0C9F4328584B715CBB0BCCC163818D924380 Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 32673 IP address blocks: 23.170.104.0/24 maxlen: 24 2607:7c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bb:0b:cc:c1:63:81:8d:92:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=d7791c61-4508-4742-adaf-278ab5ce19f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:96:f9:45:9f:48:74:c6:0d:66:6e:00:e7: c1:ec:fe:d7:02:de:79:d1:ec:60:f1:07:52:bb:77: 79:99:f8:8b:68:94:5a:95:44:0c:45:94:25:49:a3: 60:b6:26:ee:58:bd:8b:71:ec:01:9f:79:11:9d:e2: 0e:a1:70:3a:35:d2:99:d6:70:44:57:55:40:5a:00: d4:69:05:56:c9:a6:6f:23:fb:73:c2:0d:76:55:4d: 62:b3:97:15:10:a0:1d:77:41:08:ca:78:d5:e2:54: 5b:0d:cc:cc:28:5e:f3:87:9b:fb:8f:40:8d:49:36: b5:8b:bf:ab:08:cd:94:63:64:bc:dd:61:83:94:f6: 84:85:fa:02:50:68:c7:6f:56:64:de:13:d9:16:10: fa:e1:51:80:9d:e9:13:7a:bc:91:4c:f4:91:20:e8: 01:1f:d0:0f:a7:f7:de:ab:54:f2:c6:e5:cf:f4:43: 7f:8e:b2:65:7a:94:8b:5e:b0:18:4f:55:90:18:22: dd:39:23:57:41:d5:e2:ca:d9:f3:78:95:11:bf:1b: f9:12:b3:91:6d:29:91:ae:56:d8:7c:e1:87:e5:d1: c6:18:d9:fa:7a:56:55:00:58:4b:01:85:16:43:05: 17:31:2a:c7:5c:48:9b:51:fe:48:7b:2c:4c:c3:80: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:2F:8D:F7:B0:11:B6:44:3E:AF:72:02:52:09:62:B6:0E:89:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl X509v3 Authority Key Identifier: keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer sbgp-ipAddrBlock: critical IPv4: 23.170.104.0/24 IPv6: 2607:7c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d8:60:69:6e:77:4f:a4:0f:d4:94:7c:d2:ce:00:f7:8d:9d: c1:12:ae:f4:91:51:47:9d:98:2a:39:46:0a:94:6f:4a:e6:18: b4:6b:b2:94:be:be:09:b8:50:b9:42:e2:2e:09:b0:c3:e7:58: 08:56:bf:44:64:28:99:f6:80:5c:e4:0c:9b:0a:f9:91:e0:6a: 51:c9:6c:ca:e8:e8:0e:8a:b1:2e:6e:9e:36:3c:1e:39:4d:ef: 7e:70:b4:86:d3:84:c9:39:02:69:9d:a0:44:61:79:1a:72:ec: 1d:a9:ff:6f:af:f6:11:f9:66:40:86:b0:62:6f:5b:62:27:27: 7e:5a:6d:4c:f7:22:56:6d:54:64:d2:eb:76:57:bc:07:f1:b6: 06:ac:17:03:70:a1:e9:90:b9:61:17:20:28:62:b5:43:58:00: c9:22:d7:8c:30:3a:b7:6b:c3:f0:84:fb:44:52:f9:30:83:4d: 0d:32:b7:89:ef:6c:9c:d9:5b:76:f4:35:9e:83:ad:d7:35:13: 13:a5:9e:2f:b0:8d:a6:e8:32:ad:53:de:d3:7d:d7:e9:c1:30: 9d:b9:b2:49:34:9c:93:45:87:d6:53:db:93:6a:0f:bb:22:de: cf:25:f5:7b:6e:3a:02:07:b9:27:de:e9:58:60:9e:66:18:67: 08:7a:7d:cd -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtxXLsLzMFjgY2SQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRmYWFmZGMtMGVmMi00Y2EyLWFiMTEtNjNjODM5ZTdh YTcyMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZDc3OTFjNjEtNDUwOC00NzQyLWFkYWYtMjc4YWI1Y2UxOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JyW+UWfSHTGDWZuAOfB7P7XAt550exg8QdS u3d5mfiLaJRalUQMRZQlSaNgtibuWL2LcewBn3kRneIOoXA6NdKZ1nBEV1VAWgDU aQVWyaZvI/tzwg12VU1is5cVEKAdd0EIynjV4lRbDczMKF7zh5v7j0CNSTa1i7+r CM2UY2S83WGDlPaEhfoCUGjHb1Zk3hPZFhD64VGAnekTeryRTPSRIOgBH9APp/fe q1TyxuXP9EN/jrJlepSLXrAYT1WQGCLdOSNXQdXiytnzeJURvxv5ErORbSmRrlbY fOGH5dHGGNn6elZVAFhLAYUWQwUXMSrHXEibUf5IeyxMw4DJ9wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFN2aL433sBG2RD6vcgJSCWK2DolcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZh YWZkYy0wZWYyLTRjYTItYWIxMS02M2M4MzllN2FhNzIvMGNhMTBmMzktM2RiMy0z MzllLWExOTktMzU0YTBkYzJhNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjRmYWFmZGMtMGVmMi00Y2EyLWFi MTEtNjNjODM5ZTdhYTcyLzY0ZmFhZmRjLTBlZjItNGNhMi1hYjExLTYzYzgzOWU3 YWE3Mi5jcmwwHwYDVR0jBBgwFoAU0CxwYhADTTQBTumPPl+8Urcni9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4 MzllN2FhNzIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6poMA0E AgACMAcDBQAmB3xAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAD3YYGlud0+kD9SUfNLOAPeNncESrvSRUUed mCo5RgqUb0rmGLRrspS+vgm4ULlC4i4JsMPnWAhWv0RkKJn2gFzkDJsK+ZHgalHJ bMro6A6KsS5unjY8HjlN735wtIbThMk5AmmdoERheRpy7B2p/2+v9hH5ZkCGsGJv W2InJ35abUz3IlZtVGTS63ZXvAfxtgasFwNwoemQuWEXIChitUNYAMki14wwOrdr w/CE+0RS+TCDTQ0yt4nvbJzZW3b0NZ6Drdc1ExOlni+wjaboMq1T3tN91+nBMJ25 skk0nJNFh9ZT25NqD7si3s8l9XtuOgIHuSfe6VhgnmYYZwh6fc0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:35:26 2025 by rpki-client