$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa File: 0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json) Hash identifier: K+EQoe2T6fY5jNNTOTkRUyXF3Vc0CAFlfl7ZaGSsg14= Subject key identifier: EC:CA:8B:0E:B9:82:A5:02:F7:52:AB:C4:DB:05:DA:A2:D0:26:49:CE Certificate issuer: /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Certificate serial: 010D0C9F4328584D300A631DF5BF6C6A27507680 Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 32673 IP address blocks: 23.170.104.0/24 maxlen: 24 2607:7c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:63:1d:f5:bf:6c:6a:27:50:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0c62c993-5b54-4626-a047-a6338d5a4b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:65:ba:56:e5:4d:02:ed:22:af:6e:be:8b: 56:07:02:de:26:a1:c6:43:b5:1d:7a:7e:5e:30:63: eb:57:76:09:ed:f3:84:b7:dc:91:fd:02:b9:02:b7: da:5d:db:47:85:3e:c3:6b:9d:37:1d:a0:54:02:65: 18:5e:2a:2a:67:99:bd:7d:2d:3e:b8:58:bb:76:32: 68:af:27:36:e3:3f:61:2f:63:6d:a7:c8:e8:ea:33: 4e:df:24:53:8b:e9:63:65:9e:f0:12:49:34:6c:c6: 68:6b:5f:74:7f:06:09:9a:38:2b:77:05:c4:99:ec: b8:17:0a:ce:70:58:82:8d:1b:fe:47:1c:2c:45:78: 67:1c:72:ba:63:b8:cb:af:b0:08:f2:6d:f7:00:7e: ad:43:74:1e:8b:75:6d:ae:b9:c3:11:4f:81:85:77: cd:07:e2:dd:8a:a7:75:4f:19:2d:8d:4b:71:0d:30: bb:cb:9e:da:55:c2:ed:c4:2c:1c:f9:7b:d6:db:94: 96:82:77:9f:80:c5:50:3c:86:2d:2c:55:1e:cf:b6: 3b:27:4b:54:7c:76:8d:75:a6:cf:e1:1d:6b:8a:46: fd:a3:6a:f7:f8:f1:94:f9:76:6f:e2:50:8d:7b:9c: 6e:09:a7:37:b7:47:0a:f5:7e:50:bc:d8:5d:5f:e1: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CA:8B:0E:B9:82:A5:02:F7:52:AB:C4:DB:05:DA:A2:D0:26:49:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl X509v3 Authority Key Identifier: keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer sbgp-ipAddrBlock: critical IPv4: 23.170.104.0/24 IPv6: 2607:7c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5e:d5:43:1a:70:d9:34:e9:2d:ae:14:ee:9c:20:27:cd:a5: 4e:9a:da:37:e0:56:6f:14:d7:c6:24:52:2c:b4:9f:31:e6:de: ad:75:87:12:45:46:1e:c4:88:4a:4c:17:4a:dd:b1:5c:0e:9f: b8:c0:3b:79:09:12:7d:81:a9:35:08:02:74:e1:67:b6:39:67: 20:21:9b:f8:14:d5:ba:2d:24:27:bd:af:2c:ef:8c:d2:40:63: 8b:dd:d9:0a:a8:a3:56:f4:1f:a1:1f:e4:7a:94:27:31:ba:85: 8a:a9:3f:d6:f6:cd:c4:10:1b:5e:69:42:cb:7c:f0:a4:61:06: df:3b:38:56:8d:7e:de:6b:e2:96:b7:78:12:86:2c:ba:4d:b9: 41:e3:d2:e8:71:0a:43:2b:7d:8c:1b:4b:a5:69:6d:c9:5c:36: 70:af:61:97:ea:24:76:0e:1f:2c:14:d8:70:bb:cd:d1:96:73: 6f:47:7f:e3:f9:77:ee:17:76:b7:7b:2f:ce:aa:aa:b8:3d:bd: cc:6b:b0:f1:53:b0:cf:45:f9:f7:23:ad:62:fe:b3:60:30:20: 13:f2:c7:95:3f:c7:0e:ba:92:d7:30:44:54:b3:ec:6e:eb:5f: 87:0f:b1:6e:da:23:9b:f5:91:63:53:4b:e1:f9:2b:fb:3d:9b: c9:f0:8b:39 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0wCmMd9b9saidQdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRmYWFmZGMtMGVmMi00Y2EyLWFiMTEtNjNjODM5ZTdh YTcyMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGM2MmM5OTMtNWI1NC00NjI2LWEwNDctYTYzMzhkNWE0YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVdlulblTQLtIq9uvotWBwLeJqHGQ7Uden5e MGPrV3YJ7fOEt9yR/QK5ArfaXdtHhT7Da503HaBUAmUYXioqZ5m9fS0+uFi7djJo ryc24z9hL2Ntp8jo6jNO3yRTi+ljZZ7wEkk0bMZoa190fwYJmjgrdwXEmey4FwrO cFiCjRv+RxwsRXhnHHK6Y7jLr7AI8m33AH6tQ3Qei3VtrrnDEU+BhXfNB+Ldiqd1 TxktjUtxDTC7y57aVcLtxCwc+XvW25SWgnefgMVQPIYtLFUez7Y7J0tUfHaNdabP 4R1rikb9o2r3+PGU+XZv4lCNe5xuCac3t0cK9X5QvNhdX+EQQQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFOzKiw65gqUC91KrxNsF2qLQJknOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZh YWZkYy0wZWYyLTRjYTItYWIxMS02M2M4MzllN2FhNzIvMGNhMTBmMzktM2RiMy0z MzllLWExOTktMzU0YTBkYzJhNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjRmYWFmZGMtMGVmMi00Y2EyLWFi MTEtNjNjODM5ZTdhYTcyLzY0ZmFhZmRjLTBlZjItNGNhMi1hYjExLTYzYzgzOWU3 YWE3Mi5jcmwwHwYDVR0jBBgwFoAU0CxwYhADTTQBTumPPl+8Urcni9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4 MzllN2FhNzIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6poMA0E AgACMAcDBQAmB3xAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHNe1UMacNk06S2uFO6cICfNpU6a2jfgVm8U 18YkUiy0nzHm3q11hxJFRh7EiEpMF0rdsVwOn7jAO3kJEn2BqTUIAnThZ7Y5ZyAh m/gU1botJCe9ryzvjNJAY4vd2Qqoo1b0H6Ef5HqUJzG6hYqpP9b2zcQQG15pQst8 8KRhBt87OFaNft5r4pa3eBKGLLpNuUHj0uhxCkMrfYwbS6VpbclcNnCvYZfqJHYO HywU2HC7zdGWc29Hf+P5d+4Xdrd7L86qqrg9vcxrsPFTsM9F+fcjrWL+s2AwIBPy x5U/xw66ktcwRFSz7G7rX4cPsW7aI5v1kWNTS+H5K/s9m8nwizk= -----END CERTIFICATE-----Generated at Tue Mar 17 00:42:12 2026 by rpki-client