$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa File: caf6984a-6241-341c-a03c-38c380834003.roa (raw, json) Hash identifier: UFNE+pfZPLcLurM7HnwrlyMC+pSAC1jsdzDpuL2Sqeg= Subject key identifier: 69:A8:0C:D7:95:24:8A:74:1D:0C:11:B0:04:53:A8:8F:E9:AE:DA:4B Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B153C1C30FF6D3FEA9C10AA00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 395831 IP address blocks: 2606:7bc0:1065::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1c:30:ff:6d:3f:ea:9c:10:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=7dbd209e-ce9d-4155-8cf3-43bd647acefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:3e:c7:5d:57:b9:35:0e:c9:e0:0c:f3:19: 40:10:7e:9f:fc:33:d3:f6:49:c3:f3:b6:ec:96:66: 33:b5:27:41:38:a5:9c:3b:ba:a6:eb:b3:74:41:31: 4f:cd:6f:ed:47:d1:38:88:5f:c7:2d:00:9b:3d:b2: 4c:59:45:ba:e4:e1:22:50:f9:7b:8c:40:60:73:ab: 1c:cd:10:4f:da:46:59:27:3e:ff:55:ae:dc:f6:f0: ec:20:d7:da:7f:5d:9c:35:3e:49:aa:2b:ab:c8:ed: c9:81:01:49:44:5a:26:b1:ad:32:06:3b:2d:3a:d2: 71:bf:6f:ac:d0:db:e3:f5:df:19:d2:09:27:d5:fa: 4a:24:88:c3:73:2b:48:9c:2c:7d:88:b1:31:43:8d: 8d:3f:76:80:ec:21:74:4a:55:56:dc:14:7c:4c:ed: 4f:cb:1d:8f:ca:55:52:7c:32:61:aa:6d:1f:c6:cc: fa:8b:6c:ea:dc:35:9b:b1:04:b6:98:ae:d0:60:3b: a5:74:4f:aa:5a:31:19:43:ab:c6:4a:10:28:b8:93: 78:ff:a5:22:85:40:66:be:2a:05:4f:42:36:4c:1f: 8e:41:6f:40:be:3e:37:76:0b:23:f9:93:87:4d:30: fe:00:be:51:b9:6c:69:ed:62:01:8f:40:b6:53:2f: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:0C:D7:95:24:8A:74:1D:0C:11:B0:04:53:A8:8F:E9:AE:DA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1065::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:45:95:c0:38:ba:8b:aa:f2:f3:00:d3:99:40:36:1f:fb:fb: 9e:6b:91:52:e3:c3:e6:17:70:a2:05:86:77:99:17:3a:a3:5f: be:91:86:d7:5f:2f:d8:28:18:86:6b:ff:44:94:bc:67:19:29: 54:38:38:83:f6:86:29:e2:0c:d0:03:7d:85:e8:3c:ed:82:0a: 76:25:9a:d5:8d:b8:f2:7c:2c:5b:58:9d:2d:0e:c5:a9:3e:bc: 57:d6:cc:a4:ba:40:05:4f:18:ba:92:3a:13:8d:9a:d0:93:d7: 17:4c:97:b5:62:56:67:96:f0:c7:2f:0d:9e:52:f1:8c:eb:75: 21:3d:83:56:59:24:eb:13:70:fa:1d:4f:b9:66:64:e3:b6:1c: da:2f:56:96:81:0a:2c:56:8f:ac:4f:96:fb:af:59:12:13:3b: 56:ba:2e:e5:2f:d8:46:66:f3:77:5a:0f:e0:fc:ca:4b:aa:63: 94:93:8e:16:3f:99:14:94:03:e9:d7:a0:9e:d2:3c:a1:19:04: b1:e2:eb:2b:06:28:cc:d0:8f:d4:56:f9:07:e7:32:47:4d:b4: 69:7e:e6:07:db:b8:0a:ad:4e:26:4d:5b:9c:de:9e:49:e8:5f: 60:2d:cb:8f:46:13:af:8e:7e:c9:64:62:f8:8e:45:f4:41:70: d1:1f:c6:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsVPBww/20/6pwQqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk N2RiZDIwOWUtY2U5ZC00MTU1LThjZjMtNDNiZDY0N2FjZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF0+x11XuTUOyeAM8xlAEH6f/DPT9knD87bs lmYztSdBOKWcO7qm67N0QTFPzW/tR9E4iF/HLQCbPbJMWUW65OEiUPl7jEBgc6sc zRBP2kZZJz7/Va7c9vDsINfaf12cNT5JqiuryO3JgQFJRFomsa0yBjstOtJxv2+s 0Nvj9d8Z0gkn1fpKJIjDcytInCx9iLExQ42NP3aA7CF0SlVW3BR8TO1Pyx2PylVS fDJhqm0fxsz6i2zq3DWbsQS2mK7QYDuldE+qWjEZQ6vGShAouJN4/6UihUBmvioF T0I2TB+OQW9Avj43dgsj+ZOHTTD+AL5RuWxp7WIBj0C2Uy9iiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGmoDNeVJIp0HQwRsARTqI/prtpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvY2FmNjk4NGEtNjI0MS0z NDFjLWEwM2MtMzhjMzgwODM0MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9FlcA4uouq8vMA05lANh/7+55rkVLjw+YXcKIFhneZFzqjX76R htdfL9goGIZr/0SUvGcZKVQ4OIP2hiniDNADfYXoPO2CCnYlmtWNuPJ8LFtYnS0O xak+vFfWzKS6QAVPGLqSOhONmtCT1xdMl7ViVmeW8McvDZ5S8YzrdSE9g1ZZJOsT cPodT7lmZOO2HNovVpaBCixWj6xPlvuvWRITO1a6LuUv2EZm83daD+D8ykuqY5ST jhY/mRSUA+nXoJ7SPKEZBLHi6ysGKMzQj9RW+QfnMkdNtGl+5gfbuAqtTiZNW5ze nknoX2Aty49GE6+OfslkYviORfRBcNEfxjU= -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:29 2025 by rpki-client