$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa File: caf27556-5204-39a2-8d27-fef2c44b82de.roa (raw, json) Hash identifier: cs22xWYqrBMjefytcGWiLK7fm9Z8nY8bVl03mq6ArCc= Subject key identifier: 90:1A:6F:9D:5A:49:29:A5:B8:1E:41:7E:A2:A2:47:1E:F2:20:30:4C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E885A4E384B8319D267D686C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 40934 IP address blocks: 2001:418:1438::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:4e:38:4b:83:19:d2:67:d6:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=b1b3f2f9-5106-46a4-b067-e20c0ff4ae6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:4b:49:89:0f:13:0c:eb:6c:e8:4d:63:b7: 5f:26:ac:1d:31:3f:a0:d5:28:5c:ca:5f:d9:4e:44: c1:a1:7f:38:67:10:c9:cb:9a:5c:50:d0:1b:2e:6c: da:1f:98:b0:77:8f:9c:6c:69:9b:0e:23:da:b3:45: 3a:86:c3:94:6a:de:95:e2:74:fd:68:7b:cc:1d:2c: 42:1f:c4:de:33:ce:df:4e:eb:30:c7:f6:d6:6f:69: 9f:44:ff:bd:f9:a5:95:62:d2:8d:21:07:0a:27:94: e5:70:ee:de:d6:51:0f:26:5c:e6:c5:94:5b:3b:c8: 4a:ff:2f:47:cc:31:2c:6e:19:84:55:fe:0f:e8:45: 5b:02:58:03:a3:f1:1c:0a:0a:d1:5f:08:43:5f:ac: 14:46:7a:92:62:cd:3c:b3:88:96:b1:ac:e5:a4:15: a7:73:20:94:12:a0:47:8b:46:06:79:2d:51:94:ab: 56:43:5a:50:f3:0b:28:f2:d3:a1:30:a5:e5:3d:dc: a9:8a:dc:08:c8:7d:91:66:f4:6c:9a:29:48:02:cc: 8b:42:ae:32:e1:eb:76:56:2f:71:67:1e:17:69:95: 05:a4:14:ed:fa:24:82:fb:ea:0f:6f:22:c3:2f:5d: 3e:d4:5c:6d:50:10:e8:72:d3:bd:59:61:03:e2:e8: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1A:6F:9D:5A:49:29:A5:B8:1E:41:7E:A2:A2:47:1E:F2:20:30:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1438::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:38:e1:5a:db:27:45:fd:95:93:15:87:e9:3c:d6:cf:cd:e8: 1d:d7:66:b1:08:5e:42:5a:2a:90:a0:65:f6:64:04:8b:1b:ca: b6:3b:96:ed:c0:2f:61:88:50:19:f5:dd:7b:0f:d3:7e:56:ff: 02:d9:26:9c:a1:af:59:0a:75:01:22:db:40:11:fd:52:cd:5b: 73:de:4b:9a:b3:36:d4:1a:4c:25:10:60:32:14:7b:f5:96:19: c2:bf:c4:ad:1b:df:f1:cd:1a:29:bb:57:4b:bc:9f:af:2c:d8: b2:ba:e3:f7:cf:ea:c0:63:71:8a:db:fd:a5:fd:c7:2f:40:ed: cf:17:c2:56:75:33:e0:9b:fa:d6:5f:ca:20:bf:46:13:6c:c9: 7a:a4:d1:c0:41:db:9f:1b:ae:eb:69:3e:80:4a:07:e0:9c:0f: 74:0a:ae:27:dc:35:43:26:4b:16:95:5e:0a:ff:bc:73:ce:b6: 45:71:5c:54:4a:48:2e:c6:52:0a:d7:5a:98:84:80:c8:0c:25: 44:97:b9:7b:8d:41:27:0b:9e:fc:81:e0:d8:5f:90:8c:e1:97: ed:58:16:ff:27:b8:8f:fe:eb:cb:fa:86:80:81:48:05:cb:0d: 8e:e8:4a:32:1c:8f:55:65:73:58:f0:41:25:8c:db:9f:be:ca: 44:ec:c9:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6IWk44S4MZ0mfWhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YjFiM2YyZjktNTEwNi00NmE0LWIwNjctZTIwYzBmZjRhZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkpLSYkPEwzrbOhNY7dfJqwdMT+g1Shcyl/Z TkTBoX84ZxDJy5pcUNAbLmzaH5iwd4+cbGmbDiPas0U6hsOUat6V4nT9aHvMHSxC H8TeM87fTuswx/bWb2mfRP+9+aWVYtKNIQcKJ5TlcO7e1lEPJlzmxZRbO8hK/y9H zDEsbhmEVf4P6EVbAlgDo/EcCgrRXwhDX6wURnqSYs08s4iWsazlpBWncyCUEqBH i0YGeS1RlKtWQ1pQ8wso8tOhMKXlPdypitwIyH2RZvRsmilIAsyLQq4y4et2Vi9x Zx4XaZUFpBTt+iSC++oPbyLDL10+1FxtUBDoctO9WWED4uhkOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJAab51aSSmluB5BfqKiRx7yIDBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2FmMjc1NTYtNTIwNC0z OWEyLThkMjctZmVmMmM0NGI4MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQ4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAk44VrbJ0X9lZMVh+k81s/N6B3XZrEIXkJaKpCgZfZkBIsbyrY7 lu3AL2GIUBn13XsP035W/wLZJpyhr1kKdQEi20AR/VLNW3PeS5qzNtQaTCUQYDIU e/WWGcK/xK0b3/HNGim7V0u8n68s2LK64/fP6sBjcYrb/aX9xy9A7c8XwlZ1M+Cb +tZfyiC/RhNsyXqk0cBB258brutpPoBKB+CcD3QKrifcNUMmSxaVXgr/vHPOtkVx XFRKSC7GUgrXWpiEgMgMJUSXuXuNQScLnvyB4NhfkIzhl+1YFv8nuI/+68v6hoCB SAXLDY7oSjIcj1Vlc1jwQSWM25++ykTsyeg= -----END CERTIFICATE-----Generated at Fri Jul 24 12:00:09 2026 by rpki-client