$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa File: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (raw, json) Hash identifier: URygyQwMFWO+c9380fwc6420HhkDz7yq7Zm1tFlhP2w= Subject key identifier: 30:BA:5E:B3:26:1D:EE:BA:3B:A8:88:8E:1B:B6:20:D3:BC:13:C2:F1 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584EC20C67AC9BA582D14851B580 Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 53339 IP address blocks: 2001:504:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:67:ac:9b:a5:82:d1:48:51:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=0d190ea0-7f63-4f71-afa6-800fffc44a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:5c:f5:f5:78:e5:0f:b2:d2:6b:3f:d0:cc: f6:b6:cb:b1:d2:e9:84:89:db:f7:06:dd:be:57:cb: 4a:fd:1f:44:ab:99:22:d8:75:7f:89:b6:40:06:b1: 9d:5a:7f:87:f2:42:e8:ab:c2:26:bd:6a:0a:35:ba: 10:9d:ca:6a:21:a0:19:ab:90:9c:65:70:b4:19:bb: 61:cc:c2:21:47:88:06:8b:b0:4c:59:8c:09:81:3e: de:7d:8d:cd:61:09:81:7f:dc:84:9a:df:aa:2f:01: be:bb:0c:cf:13:a8:96:1d:35:da:c6:1f:40:90:75: aa:5f:58:b2:5c:68:07:6e:a3:e3:ac:a0:93:0b:28: 54:b1:45:a5:7f:c7:89:8a:4b:41:c7:79:17:6b:ce: 39:2b:76:ee:26:d2:cf:58:3a:05:46:55:29:a6:f0: 80:ae:8b:87:c7:73:2e:7e:c4:7f:73:bc:8c:bd:6f: c2:ff:5b:43:07:7e:18:10:96:38:14:52:77:0f:d0: 07:71:d0:cb:51:b4:9e:a3:ff:8f:0d:05:b2:66:a5: 46:19:e6:7b:b7:a9:3c:16:cf:67:cd:c7:ef:a6:b7: 3d:b3:48:de:a6:82:cb:dd:7d:af:4f:62:b3:0f:b0: a6:eb:1d:db:36:8e:5a:72:f9:11:c0:47:74:4f:ff: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BA:5E:B3:26:1D:EE:BA:3B:A8:88:8E:1B:B6:20:D3:BC:13:C2:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cf:d6:a4:2f:1a:f8:76:65:cd:b0:89:8d:4b:af:76:5b:48: 7f:26:7c:34:bb:12:e5:65:f3:9a:b4:95:bd:07:1b:44:2a:18: 8f:d2:a6:12:b9:c8:9e:96:76:d3:70:43:bf:c8:43:bd:c8:a6: c8:e9:97:a3:ad:59:18:54:e3:b1:0d:f1:81:88:ac:c6:c2:2f: 28:77:2b:07:5f:cd:d9:3f:01:23:88:91:fd:51:7c:6c:eb:2a: 6c:5b:fd:29:2e:b9:d7:fa:cf:7d:d9:0f:b0:a8:b7:4b:56:28: 32:fe:d9:9e:5d:2e:47:2b:d4:fd:7c:83:81:5f:e4:e4:34:20: 84:4b:7d:71:d6:14:49:40:8f:29:62:21:9e:bb:24:89:61:13: ba:08:a5:e5:3c:97:66:14:0a:ec:9c:65:4e:01:12:55:fe:0a: f6:24:49:c1:c0:9d:2a:59:ad:d7:61:7f:6e:8b:77:a5:9c:fe: 93:a0:ac:32:2b:74:0f:c1:a9:8c:a2:77:8d:a3:8e:b5:89:a2: 9a:8e:5b:61:6f:74:21:c3:3f:17:31:22:5d:28:85:52:82:ee: b9:f4:05:f5:02:cf:26:6b:19:15:1d:c1:c8:87:44:79:17:5f: 95:dd:6e:33:d3:04:cc:19:29:e9:2e:a8:64:88:df:94:99:fd: 15:0f:4d:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7CDGesm6WC0UhRtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk MGQxOTBlYTAtN2Y2My00ZjcxLWFmYTYtODAwZmZmYzQ0YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxNc9fV45Q+y0ms/0Mz2tsux0umEidv3Bt2+ V8tK/R9Eq5ki2HV/ibZABrGdWn+H8kLoq8ImvWoKNboQncpqIaAZq5CcZXC0Gbth zMIhR4gGi7BMWYwJgT7efY3NYQmBf9yEmt+qLwG+uwzPE6iWHTXaxh9AkHWqX1iy XGgHbqPjrKCTCyhUsUWlf8eJiktBx3kXa845K3buJtLPWDoFRlUppvCArouHx3Mu fsR/c7yMvW/C/1tDB34YEJY4FFJ3D9AHcdDLUbSeo/+PDQWyZqVGGeZ7t6k8Fs9n zcfvprc9s0jepoLL3X2vT2KzD7Cm6x3bNo5acvkRwEd0T/+1ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDC6XrMmHe66O6iIjhu2INO8E8LxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvMTZiY2M4NTUtZDdmYy0z ZDdkLTlkMTYtODU1M2MxOGEyZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLP1qQvGvh2Zc2wiY1Lr3ZbSH8mfDS7EuVl85q0lb0HG0QqGI/S phK5yJ6WdtNwQ7/IQ73Ipsjpl6OtWRhU47EN8YGIrMbCLyh3Kwdfzdk/ASOIkf1R fGzrKmxb/Skuudf6z33ZD7Cot0tWKDL+2Z5dLkcr1P18g4Ff5OQ0IIRLfXHWFElA jyliIZ67JIlhE7oIpeU8l2YUCuycZU4BElX+CvYkScHAnSpZrddhf26Ld6Wc/pOg rDIrdA/BqYyid42jjrWJopqOW2FvdCHDPxcxIl0ohVKC7rn0BfUCzyZrGRUdwciH RHkXX5XdbjPTBMwZKekuqGSI35SZ/RUPTYE= -----END CERTIFICATE-----Generated at Fri Aug 21 21:22:54 2026 by rpki-client