$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa File: 0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json) Hash identifier: FJ1WOsSBT5PgqNCLXdD58h7//fdfEbgoCyor1DlYQ5E= Subject key identifier: 24:AD:D9:2A:D3:9A:37:BD:EA:0D:47:23:A3:E9:B1:01:E2:3E:9E:42 Certificate issuer: /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Certificate serial: 010D0C9F4328584F549D6E9ECCBD95964074DC00 Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 32673 IP address blocks: 23.170.104.0/24 maxlen: 24 2607:7c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:6e:9e:cc:bd:95:96:40:74:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=4282fa88-a5f1-4c79-aeb2-b3de50579d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:70:12:59:7f:f0:57:e9:24:5e:c0:75:b2:16: 71:99:0e:d9:5a:c3:3f:a7:65:30:7c:42:f6:00:d3: 8d:c5:66:9d:0e:8e:f6:ac:87:a0:10:41:34:3e:95: be:5c:b6:ae:fe:db:a3:97:4b:cb:9e:f5:a2:26:3c: d2:b4:08:29:6d:12:20:bf:d2:88:a1:47:75:d8:40: fa:93:94:62:80:73:d9:ba:49:06:e3:06:51:6e:de: 71:86:9b:e0:b8:b8:19:b8:08:17:b8:0f:0c:d2:f6: 33:79:bc:10:67:f7:02:9d:7d:c6:8c:fd:14:22:a8: 85:38:81:93:29:89:35:37:98:a8:d4:8e:15:39:d9: e6:04:6a:06:c7:a7:f4:95:b2:8d:2a:f1:2c:6f:e5: 7c:9d:9f:97:0a:35:98:21:d9:d3:30:3b:02:15:97: 24:e8:70:91:c0:94:e9:75:ae:78:8d:ef:68:bf:ed: 3a:a4:b0:02:31:a1:4b:0e:85:d8:bf:a6:11:bf:c3: 06:2e:1e:98:12:de:81:73:69:fb:3c:cb:73:a8:90: 97:16:a0:ed:9c:8e:68:fc:7e:f8:b0:8f:84:ab:b2: 4b:f0:13:57:f6:e6:3b:f8:0b:36:21:a3:4d:ea:a0: 70:2c:e9:86:c9:74:6c:0a:a7:81:78:46:b5:d6:0f: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:D9:2A:D3:9A:37:BD:EA:0D:47:23:A3:E9:B1:01:E2:3E:9E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl X509v3 Authority Key Identifier: keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer sbgp-ipAddrBlock: critical IPv4: 23.170.104.0/24 IPv6: 2607:7c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5f:41:39:94:5b:a8:63:d9:47:9f:a4:3b:94:42:06:e9:29: 92:54:33:d8:c6:b9:3e:11:9e:aa:e7:05:6f:71:d1:42:5b:c1: f5:1c:24:03:ae:fa:64:5a:a3:71:94:3c:ab:69:07:9c:42:ef: 12:9f:95:b3:92:24:4d:94:d7:3b:67:f9:0e:2f:33:8a:96:2d: e0:af:78:9b:83:d6:27:bf:ba:b4:55:e1:bd:c7:a3:a4:f0:54: 35:3a:28:a8:cb:cc:12:ba:9d:86:18:31:ef:b2:62:25:46:c8: 62:e5:c2:7c:61:c0:aa:66:13:46:49:da:c6:03:68:f3:f0:f2: e8:e5:37:55:1f:e8:ac:f9:77:5c:af:70:4a:cc:e4:07:fc:b9: ab:10:1d:7a:94:0a:ed:cd:07:b7:7e:cb:c3:e8:31:6c:c8:39: 12:86:3b:ea:a1:21:cd:f2:0d:46:79:fd:b5:2a:97:c3:40:fd: 37:74:39:cf:d0:de:13:88:76:62:45:09:d2:d9:07:56:e1:84: 82:e6:a8:d0:4b:55:04:b5:84:99:46:68:a2:e4:a2:18:59:ea: 0a:2d:fe:b4:1b:bf:94:22:a5:ab:cf:dc:8a:c8:85:10:e0:d1: 8e:76:69:e7:6b:76:9c:76:d5:77:c1:47:d7:5e:92:5c:e9:f8: 62:9e:6f:a8 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9UnW6ezL2VlkB03AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRmYWFmZGMtMGVmMi00Y2EyLWFiMTEtNjNjODM5ZTdh YTcyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDI4MmZhODgtYTVmMS00Yzc5LWFlYjItYjNkZTUwNTc5ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinASWX/wV+kkXsB1shZxmQ7ZWsM/p2UwfEL2 ANONxWadDo72rIegEEE0PpW+XLau/tujl0vLnvWiJjzStAgpbRIgv9KIoUd12ED6 k5RigHPZukkG4wZRbt5xhpvguLgZuAgXuA8M0vYzebwQZ/cCnX3GjP0UIqiFOIGT KYk1N5io1I4VOdnmBGoGx6f0lbKNKvEsb+V8nZ+XCjWYIdnTMDsCFZck6HCRwJTp da54je9ov+06pLACMaFLDoXYv6YRv8MGLh6YEt6Bc2n7PMtzqJCXFqDtnI5o/H74 sI+Eq7JL8BNX9uY7+As2IaNN6qBwLOmGyXRsCqeBeEa11g+AMwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCSt2SrTmje96g1HI6PpsQHiPp5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZh YWZkYy0wZWYyLTRjYTItYWIxMS02M2M4MzllN2FhNzIvMGNhMTBmMzktM2RiMy0z MzllLWExOTktMzU0YTBkYzJhNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjRmYWFmZGMtMGVmMi00Y2EyLWFi MTEtNjNjODM5ZTdhYTcyLzY0ZmFhZmRjLTBlZjItNGNhMi1hYjExLTYzYzgzOWU3 YWE3Mi5jcmwwHwYDVR0jBBgwFoAU0CxwYhADTTQBTumPPl+8Urcni9wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NGZhYWZkYy0wZWYyLTRjYTItYWIxMS02M2M4 MzllN2FhNzIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6poMA0E AgACMAcDBQAmB3xAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHFfQTmUW6hj2UefpDuUQgbpKZJUM9jGuT4R nqrnBW9x0UJbwfUcJAOu+mRao3GUPKtpB5xC7xKflbOSJE2U1ztn+Q4vM4qWLeCv eJuD1ie/urRV4b3Ho6TwVDU6KKjLzBK6nYYYMe+yYiVGyGLlwnxhwKpmE0ZJ2sYD aPPw8ujlN1Uf6Kz5d1yvcErM5Af8uasQHXqUCu3NB7d+y8PoMWzIORKGO+qhIc3y DUZ5/bUql8NA/Td0Oc/Q3hOIdmJFCdLZB1bhhILmqNBLVQS1hJlGaKLkohhZ6got /rQbv5QipavP3IrIhRDg0Y52aedrdpx21XfBR9deklzp+GKeb6g= -----END CERTIFICATE-----Generated at Mon Oct 12 19:10:28 2026 by rpki-client