$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json) Hash identifier: rYSnvG1xI1B9VsHhHrYksRRYnjlNGg0zO43O0ISzKvA= Subject key identifier: E8:50:B4:33:47:30:77:B5:AA:CE:4C:E2:F7:40:4F:FD:61:81:27:7B Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584A9636073458F8F67C19AC5680 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 54143 IP address blocks: 23.166.112.0/24 maxlen: 24 2606:7180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:07:34:58:f8:f6:7c:19:ac:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8925bd9f-b4af-4c73-84f7-51dfda046894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bd:92:51:26:46:d4:f3:05:18:36:2f:e7:e9: 6e:56:73:bf:35:4a:d5:5d:0a:46:5c:19:c9:6c:1a: 0d:44:b6:94:f0:72:e7:0e:c0:b7:f6:1f:87:eb:b9: 53:54:e9:21:1c:a2:5f:69:30:f8:6c:da:94:13:3e: 1a:0a:a5:7a:64:28:da:ff:d1:82:c1:e6:88:ca:34: fc:b5:ac:fe:36:22:f2:0c:36:e8:1f:5f:a6:36:f5: 5f:44:77:4f:a2:10:f9:f4:7a:ea:f8:37:e2:c4:e8: d9:ad:f6:a1:0b:1a:0f:21:2f:ae:63:62:29:07:c2: 2a:ac:46:8c:3c:b3:cd:f7:4f:e4:da:0c:93:50:6d: 52:e1:5a:4b:99:ea:93:7f:7e:90:13:3a:f1:bf:80: cb:42:a9:85:da:80:5e:42:1a:ae:b9:a3:e8:b1:ae: 45:6b:78:65:82:08:59:18:cd:d7:10:24:27:38:3b: 59:ae:88:74:08:34:4d:44:bb:62:2e:f7:03:41:2b: 52:28:27:94:ee:b3:1e:e8:ea:a2:db:8b:a3:66:cd: d2:0b:40:93:2a:49:e5:ad:ec:c3:f5:9b:9a:06:17: 7b:85:3c:40:61:45:9e:b3:fc:6e:a5:fd:04:4f:2f: 49:ff:64:9a:9e:60:78:75:fb:0e:ac:97:74:ee:62: 41:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:50:B4:33:47:30:77:B5:AA:CE:4C:E2:F7:40:4F:FD:61:81:27:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.112.0/24 IPv6: 2606:7180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9e:a6:a4:54:81:74:8e:e8:2b:ed:01:34:d4:a7:5e:89:57: 81:3d:f4:65:5f:11:cc:67:60:2f:c6:c8:ce:15:1e:64:e9:63: 73:d6:96:f7:c1:59:69:d3:88:06:45:10:9f:f0:57:c7:82:48: 84:a2:7e:d5:8b:9d:33:5e:b1:2b:b6:04:0d:08:5d:7e:ff:bf: 98:32:95:90:60:3b:d3:08:87:4c:c9:55:0e:d6:fd:01:2e:42: a4:f1:f9:9d:fb:d6:f8:16:44:40:99:fc:7a:9c:42:2f:05:61: 87:ba:a2:bc:ee:87:96:9e:99:d0:4e:88:f1:3e:58:3a:1c:65: 7f:01:5d:19:39:fd:88:04:6b:9c:46:17:4c:c0:83:8e:f2:d8: a6:fb:57:46:1f:ba:45:ff:cf:a8:55:f3:09:09:3f:25:e9:80: ba:fe:e6:d2:88:06:3a:82:15:9b:cb:c5:d1:7f:4a:40:e5:51: a4:dc:c0:1a:c1:f5:78:29:3d:d5:1d:99:10:56:b6:ab:60:06: ae:ab:72:5f:91:9e:2b:e5:eb:8a:86:61:e9:9f:8e:85:fa:ae: 1f:86:05:e8:5d:3c:6c:f5:12:0f:22:a7:2c:42:1a:68:01:11: 94:c4:b5:b7:60:75:dd:ba:b9:9a:8f:53:f4:04:59:b7:a4:ff: 6f:21:3a:fc -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqWNgc0WPj2fBmsVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODkyNWJkOWYtYjRhZi00YzczLTg0ZjctNTFkZmRhMDQ2ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b2SUSZG1PMFGDYv5+luVnO/NUrVXQpGXBnJ bBoNRLaU8HLnDsC39h+H67lTVOkhHKJfaTD4bNqUEz4aCqV6ZCja/9GCweaIyjT8 taz+NiLyDDboH1+mNvVfRHdPohD59Hrq+DfixOjZrfahCxoPIS+uY2IpB8IqrEaM PLPN90/k2gyTUG1S4VpLmeqTf36QEzrxv4DLQqmF2oBeQhquuaPosa5Fa3hlgghZ GM3XECQnODtZroh0CDRNRLtiLvcDQStSKCeU7rMe6Oqi24ujZs3SC0CTKknlrezD 9ZuaBhd7hTxAYUWes/xupf0ETy9J/2SanmB4dfsOrJd07mJBgQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFOhQtDNHMHe1qs5M4vdAT/1hgSd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvY2FhZjFjN2MtZWNmMS0z NzY0LTk2MDgtYjZhMjEzZTNiZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6ZwMA0E AgACMAcDBQAmBnGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACWepqRUgXSO6CvtATTUp16JV4E99GVfEcxn YC/GyM4VHmTpY3PWlvfBWWnTiAZFEJ/wV8eCSISiftWLnTNesSu2BA0IXX7/v5gy lZBgO9MIh0zJVQ7W/QEuQqTx+Z371vgWRECZ/HqcQi8FYYe6orzuh5aemdBOiPE+ WDocZX8BXRk5/YgEa5xGF0zAg47y2Kb7V0YfukX/z6hV8wkJPyXpgLr+5tKIBjqC FZvLxdF/SkDlUaTcwBrB9XgpPdUdmRBWtqtgBq6rcl+Rnivl64qGYemfjoX6rh+G BehdPGz1Eg8ipyxCGmgBEZTEtbdgdd26uZqPU/QEWbek/28hOvw= -----END CERTIFICATE-----Generated at Thu Aug 7 11:22:52 2025 by rpki-client