$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa File: caf27556-5204-39a2-8d27-fef2c44b82de.roa (raw, json) Hash identifier: VYIV6r0AVE5yPuYREWiQ2JQSmtjYw9+muYtaQtklhDY= Subject key identifier: BB:AD:17:ED:20:B2:49:83:FE:F9:57:5C:ED:20:E6:02:35:95:D5:D4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F2ABD24068ED1EA531FF4A980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 40934 IP address blocks: 2001:418:1438::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:24:06:8e:d1:ea:53:1f:f4:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=0e2347ca-00e3-4453-9577-590b962c3000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:44:67:49:64:be:88:aa:d6:d5:6e:85:ae: 28:6d:83:02:cb:4c:2b:86:ce:9b:19:ba:27:04:3a: db:d5:e3:bb:e4:98:95:23:aa:ce:5b:61:26:a4:f2: 29:74:01:70:5c:c1:1d:64:82:71:5e:26:86:cc:5f: 46:15:07:58:d1:eb:7d:22:63:bd:26:04:61:a6:7e: 15:32:35:23:59:f6:7e:ad:7b:0f:23:c2:29:17:df: 3c:8e:1c:40:df:a8:e7:ac:bc:4d:f4:a5:a2:cc:04: dc:1b:2a:91:c2:8e:2f:26:74:87:d0:23:96:02:ff: 3a:94:0b:23:8a:9c:7b:00:42:be:67:ba:ca:72:68: c9:30:a5:4e:1e:22:a2:fe:18:b6:07:c4:6e:c1:46: 5e:e7:2b:01:56:fd:11:a0:42:b6:7c:29:8b:42:74: 0a:e0:9c:10:53:cf:e9:98:3b:9d:d4:af:b1:9b:e6: 38:b9:5c:f8:34:d3:ca:f6:10:d7:fc:58:98:81:90: 21:94:a2:6d:e3:23:b7:1a:d4:11:59:61:13:cc:fc: 50:77:78:50:e1:48:47:7e:93:3c:74:ee:a2:ba:17: 6a:3b:21:12:35:d8:05:b8:15:db:33:d1:1c:af:d5: 87:0c:d2:22:e5:8a:9a:34:8e:59:5a:ea:d4:4e:73: 9c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AD:17:ED:20:B2:49:83:FE:F9:57:5C:ED:20:E6:02:35:95:D5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1438::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:81:f2:b0:03:4d:5b:9f:6b:02:91:38:4e:32:da:4c:ca:b8: 1f:0d:72:66:5d:4d:5d:86:dd:8c:23:09:58:d4:e1:69:f4:11: a3:eb:83:cf:a2:2e:0b:bf:7b:8e:af:46:f1:1c:61:8c:88:68: 83:28:b1:4e:f6:5b:4e:d1:e2:d7:87:0f:23:ae:fe:de:45:35: 30:f4:76:e0:95:5c:73:a5:0c:70:bc:ff:e7:9d:79:27:af:f1: d0:93:20:1c:8b:89:f6:f2:1b:e7:cc:23:f3:16:4f:a8:fb:d5: 31:6a:9a:57:9d:d6:53:83:ec:17:f2:7c:dd:ce:15:00:e0:84: b0:44:9c:90:b6:d0:20:f0:68:2c:a8:d7:fe:a9:b8:6a:4c:0b: 07:97:7c:f9:72:e9:12:f5:45:a7:fb:e9:61:ed:11:44:be:94: 48:cf:e8:0f:ab:2b:bf:bc:43:c7:8d:90:a6:fd:88:a6:0f:6e: 1b:b1:ed:df:3d:65:3b:c0:77:db:da:a4:86:cb:c9:3f:4e:cf: 7b:7d:4d:b9:4e:2e:fb:c1:16:a7:75:fb:44:c2:22:49:97:4a: d5:29:f0:89:96:18:5e:66:3e:72:a8:14:c6:67:8d:54:fb:57: 94:3b:92:6e:77:e4:6d:64:93:03:5b:c5:a2:a5:3c:39:19:73: 33:a0:44:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8qvSQGjtHqUx/0qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MGUyMzQ3Y2EtMDBlMy00NDUzLTk1NzctNTkwYjk2MmMzMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJBEZ0lkvoiq1tVuha4obYMCy0wrhs6bGbon BDrb1eO75JiVI6rOW2EmpPIpdAFwXMEdZIJxXiaGzF9GFQdY0et9ImO9JgRhpn4V MjUjWfZ+rXsPI8IpF988jhxA36jnrLxN9KWizATcGyqRwo4vJnSH0COWAv86lAsj ipx7AEK+Z7rKcmjJMKVOHiKi/hi2B8RuwUZe5ysBVv0RoEK2fCmLQnQK4JwQU8/p mDud1K+xm+Y4uVz4NNPK9hDX/FiYgZAhlKJt4yO3GtQRWWETzPxQd3hQ4UhHfpM8 dO6iuhdqOyESNdgFuBXbM9Ecr9WHDNIi5YqaNI5ZWurUTnOc3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLutF+0gskmD/vlXXO0g5gI1ldXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2FmMjc1NTYtNTIwNC0z OWEyLThkMjctZmVmMmM0NGI4MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQ4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCB8rADTVufawKROE4y2kzKuB8NcmZdTV2G3YwjCVjU4Wn0EaPr g8+iLgu/e46vRvEcYYyIaIMosU72W07R4teHDyOu/t5FNTD0duCVXHOlDHC8/+ed eSev8dCTIByLifbyG+fMI/MWT6j71TFqmled1lOD7BfyfN3OFQDghLBEnJC20CDw aCyo1/6puGpMCweXfPly6RL1Raf76WHtEUS+lEjP6A+rK7+8Q8eNkKb9iKYPbhux 7d89ZTvAd9vapIbLyT9Oz3t9TblOLvvBFqd1+0TCIkmXStUp8ImWGF5mPnKoFMZn jVT7V5Q7km535G1kkwNbxaKlPDkZczOgRJA= -----END CERTIFICATE-----Generated at Mon Oct 5 08:28:05 2026 by rpki-client