$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json) Hash identifier: do7PAMDWjDOtyWwKJIz68RLumguDrvLFzH9p4UT99r0= Subject key identifier: B1:C7:AD:CF:47:E7:BE:1D:33:11:01:63:81:09:C9:5B:B4:AF:2B:7E Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584EB8470647744C9061A90E0A80 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 54143 IP address blocks: 23.166.112.0/24 maxlen: 24 2606:7180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:06:47:74:4c:90:61:a9:0e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=18828cda-87f8-4c40-bbab-381928e0d50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:7e:22:4f:20:f8:23:62:a4:ce:22:a3:77: 10:71:a6:09:e1:63:02:46:e3:8c:e8:eb:69:38:50: dd:ac:38:4f:44:82:a6:73:ae:86:bb:b8:5f:df:6e: 52:bb:35:6c:57:31:9d:8a:c8:1f:40:24:e7:98:67: d5:5b:70:90:18:88:5e:ea:c7:9d:1f:1b:2a:ac:27: 56:57:7a:32:89:a6:61:f7:3c:2c:f8:f2:1a:a9:22: 12:87:2e:76:e2:1d:2f:60:f5:d3:55:74:c7:f1:cc: cf:43:e6:0f:eb:84:df:85:15:f7:c0:f8:49:43:76: 4b:93:b1:76:d0:de:71:cd:bd:4b:52:9f:68:a8:68: 3b:27:f1:e9:ad:da:8f:9a:4d:d2:0a:7f:e2:a5:e9: 35:28:4d:09:0e:fc:8e:59:b9:7d:7d:1d:17:79:ad: 22:3d:b5:6e:f3:b5:f5:c4:58:b9:fe:b1:e3:95:09: 5d:9b:da:9f:e5:7d:eb:af:c0:46:f0:0d:e0:41:a3: 54:55:51:d3:23:f6:7a:0e:c9:5c:54:80:df:c4:e5: 20:b0:29:57:ec:55:cf:f2:16:f3:12:02:f1:ed:22: 2c:97:7b:5b:12:e9:b4:8f:62:ae:b9:1f:ad:d1:e2: c2:dd:71:d5:68:6b:fe:39:a2:c1:0a:1f:48:c8:60: c1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C7:AD:CF:47:E7:BE:1D:33:11:01:63:81:09:C9:5B:B4:AF:2B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.112.0/24 IPv6: 2606:7180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e8:69:b8:3d:f9:0b:b3:83:30:36:62:53:1e:3b:2c:68:44: 43:d8:c1:13:8b:b6:26:9e:a8:79:64:0f:f3:72:30:dd:40:16: 1e:dc:72:be:85:36:db:39:a0:ed:6f:3d:7e:f4:69:46:69:50: 5e:d2:8b:d0:3a:8b:65:49:d8:04:95:09:20:79:c4:23:89:e6: ac:8b:1c:e8:95:03:9f:dd:70:41:63:fc:c3:1f:38:60:32:9c: 46:d8:c3:14:11:48:5a:51:8c:31:ae:76:30:3d:86:6b:a5:5d: 63:2d:49:f9:a6:d5:f9:a2:e2:2f:8b:ce:4e:4c:4d:4b:8b:b9: bc:b1:ee:ff:91:71:ee:11:64:6e:26:ee:ee:1c:33:28:ba:3c: e0:86:51:1b:e0:9f:d0:80:f1:2b:63:4b:bc:15:4a:f7:fe:44: 16:49:f0:18:77:8c:80:b3:4b:22:d4:c5:f4:d4:8a:84:39:77: 10:91:82:fd:df:15:13:d9:80:2c:23:6a:59:cf:63:6b:27:3f: 58:ef:fb:88:df:af:6f:ff:ab:8d:8e:1f:6d:45:aa:6e:42:2e: e9:be:d7:f7:5b:8e:7c:b5:1e:52:95:50:37:fb:bd:b6:8b:09: 6f:2f:6f:34:d2:e4:22:fe:b4:49:48:d7:59:b2:7e:39:1a:59: 50:b3:d9:88 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE64RwZHdEyQYakOCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk MTg4MjhjZGEtODdmOC00YzQwLWJiYWItMzgxOTI4ZTBkNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApid+Ik8g+CNipM4io3cQcaYJ4WMCRuOM6Otp OFDdrDhPRIKmc66Gu7hf325SuzVsVzGdisgfQCTnmGfVW3CQGIhe6sedHxsqrCdW V3oyiaZh9zws+PIaqSIShy524h0vYPXTVXTH8czPQ+YP64TfhRX3wPhJQ3ZLk7F2 0N5xzb1LUp9oqGg7J/HprdqPmk3SCn/ipek1KE0JDvyOWbl9fR0Xea0iPbVu87X1 xFi5/rHjlQldm9qf5X3rr8BG8A3gQaNUVVHTI/Z6DslcVIDfxOUgsClX7FXP8hbz EgLx7SIsl3tbEum0j2KuuR+t0eLC3XHVaGv+OaLBCh9IyGDBaQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLHHrc9H574dMxEBY4EJyVu0ryt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvY2FhZjFjN2MtZWNmMS0z NzY0LTk2MDgtYjZhMjEzZTNiZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6ZwMA0E AgACMAcDBQAmBnGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABnoabg9+QuzgzA2YlMeOyxoREPYwROLtiae qHlkD/NyMN1AFh7ccr6FNts5oO1vPX70aUZpUF7Si9A6i2VJ2ASVCSB5xCOJ5qyL HOiVA5/dcEFj/MMfOGAynEbYwxQRSFpRjDGudjA9hmulXWMtSfmm1fmi4i+Lzk5M TUuLubyx7v+Rce4RZG4m7u4cMyi6POCGURvgn9CA8StjS7wVSvf+RBZJ8Bh3jICz SyLUxfTUioQ5dxCRgv3fFRPZgCwjalnPY2snP1jv+4jfr2//q42OH21Fqm5CLum+ 1/dbjny1HlKVUDf7vbaLCW8vbzTS5CL+tElI11myfjkaWVCz2Yg= -----END CERTIFICATE-----Generated at Wed Aug 26 17:31:33 2026 by rpki-client