$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa File: caf6984a-6241-341c-a03c-38c380834003.roa (raw, json) Hash identifier: jtI2JrCRf/MxmqPzOcZ2C9maNfy/tICIuSxQnXTH76E= Subject key identifier: 5C:38:FC:2E:33:DB:0D:BE:62:D9:9F:7C:61:ED:9A:74:E2:18:C3:FF Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584DB7703135C47F72B4AE909180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 395831 IP address blocks: 2606:7bc0:1065::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:31:35:c4:7f:72:b4:ae:90:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=3c1f81d4-1506-454a-9473-6470999c61a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:1c:0a:6c:07:76:d0:3c:10:17:2e:ea:b3: c0:4f:27:1b:60:aa:e1:33:93:99:70:f7:13:60:a0: 12:fd:b7:04:46:e8:6a:bc:ae:ef:a7:9c:47:7d:43: af:dc:44:37:e0:59:2d:c9:9d:f4:70:c9:ce:38:cc: fc:c0:7e:a0:c4:a2:ad:65:57:d8:8d:2b:83:36:0f: 3a:b0:53:67:53:dd:3d:7d:0e:1c:cf:b8:5c:43:b8: 1e:b4:4d:4e:f4:8e:ec:bd:f3:17:20:65:b3:92:d0: cf:ab:62:49:21:d8:b8:c6:56:c5:bb:67:7c:8e:49: 16:de:d1:b6:08:ae:3d:20:fe:18:ac:a5:33:bb:54: 72:f8:7c:bb:eb:df:65:25:ad:9e:59:f6:ab:4b:c1: 18:10:2c:25:0c:42:4a:e9:d0:a0:d7:66:50:b0:31: 17:16:45:e1:5a:1a:e8:4c:81:64:fd:fb:67:f1:5a: c6:6d:ea:0e:17:9c:8c:64:39:70:10:37:25:84:19: ba:8e:f6:0e:e0:10:e1:c1:ee:ec:d4:4d:7f:b7:e0: a9:78:4f:6e:b5:d1:86:a0:e8:2b:b3:9e:f0:bd:f2: bc:23:73:df:dd:3e:c7:17:34:66:dd:75:41:15:2b: 84:3c:1d:1d:d4:ea:8f:0c:7a:74:51:0b:f5:cc:94: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:FC:2E:33:DB:0D:BE:62:D9:9F:7C:61:ED:9A:74:E2:18:C3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1065::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8b:08:cd:8e:f8:c8:82:a4:ac:61:01:5b:c3:ff:cc:03:81: 97:cf:ae:59:02:bd:5e:4c:5b:b6:58:ec:a1:f4:b7:3e:68:67: a6:ba:aa:16:82:3c:f0:31:df:bc:9f:f9:90:8a:56:c0:80:34: 90:8c:75:99:75:5f:5e:74:1f:7e:57:6f:56:08:db:3a:a6:a8: f7:c8:98:95:db:fd:78:84:9d:2e:06:c9:90:30:1b:48:12:ef: 59:8c:44:e4:c5:77:9b:cb:01:5c:ed:33:f0:e9:db:49:53:3f: 1d:4f:b0:cf:b9:33:e0:c9:74:b9:2c:f6:26:40:dd:66:ec:ed: af:3d:ae:27:1a:3d:e4:3f:b5:ac:5b:7d:2d:0f:6f:49:ef:ac: 1b:4f:67:ef:6e:67:16:06:6c:4e:49:2c:28:ea:90:8c:f3:b8: 5e:64:25:d3:97:f2:66:3e:d0:f5:53:ce:70:0b:af:19:60:e5: 0d:6b:0b:75:2d:f2:e0:77:ef:e7:a6:ef:c2:35:ea:93:13:02: 4e:e7:94:11:1a:bf:12:d8:f8:6e:82:56:e8:36:89:18:c2:d4: a3:d9:2c:76:27:7d:89:9c:4e:25:90:c8:37:8e:c2:69:d3:3d: ea:e8:73:fc:50:3c:c5:d8:cf:02:bf:ea:56:2c:49:4b:38:00: 8b:75:9d:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE23cDE1xH9ytK6QkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk M2MxZjgxZDQtMTUwNi00NTRhLTk0NzMtNjQ3MDk5OWM2MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiEcCmwHdtA8EBcu6rPATycbYKrhM5OZcPcT YKAS/bcERuhqvK7vp5xHfUOv3EQ34FktyZ30cMnOOMz8wH6gxKKtZVfYjSuDNg86 sFNnU909fQ4cz7hcQ7getE1O9I7svfMXIGWzktDPq2JJIdi4xlbFu2d8jkkW3tG2 CK49IP4YrKUzu1Ry+Hy7699lJa2eWfarS8EYECwlDEJK6dCg12ZQsDEXFkXhWhro TIFk/ftn8VrGbeoOF5yMZDlwEDclhBm6jvYO4BDhwe7s1E1/t+CpeE9utdGGoOgr s57wvfK8I3Pf3T7HFzRm3XVBFSuEPB0d1OqPDHp0UQv1zJS4TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFw4/C4z2w2+YtmffGHtmnTiGMP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvY2FmNjk4NGEtNjI0MS0z NDFjLWEwM2MtMzhjMzgwODM0MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOLCM2O+MiCpKxhAVvD/8wDgZfPrlkCvV5MW7ZY7KH0tz5oZ6a6 qhaCPPAx37yf+ZCKVsCANJCMdZl1X150H35Xb1YI2zqmqPfImJXb/XiEnS4GyZAw G0gS71mMROTFd5vLAVztM/Dp20lTPx1PsM+5M+DJdLks9iZA3Wbs7a89ricaPeQ/ taxbfS0Pb0nvrBtPZ+9uZxYGbE5JLCjqkIzzuF5kJdOX8mY+0PVTznALrxlg5Q1r C3Ut8uB37+em78I16pMTAk7nlBEavxLY+G6CVug2iRjC1KPZLHYnfYmcTiWQyDeO wmnTPeroc/xQPMXYzwK/6lYsSUs4AIt1nW8= -----END CERTIFICATE-----Generated at Wed May 13 15:52:24 2026 by rpki-client