$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa File: 3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json) Hash identifier: 4Zr4Boh9MzdNMKHoEksuQfRJUA0dsBEmKTKfVlVkkbc= Subject key identifier: 53:97:62:1E:7D:1D:F1:35:87:3E:84:BE:D7:41:02:3D:66:C2:AD:3A Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584CDC678A2E545E2EA5EED34180 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 210645 IP address blocks: 2602:2c9:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8a:2e:54:5e:2e:a5:ee:d3:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=044b8d9c-f863-4ab5-9a6e-5e7b46ba1d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:92:3c:8e:74:84:cc:6a:14:1b:69:cc:3f: 59:c3:41:f7:9e:49:e5:2b:7b:77:d6:dc:7f:e7:cf: 60:4e:57:a1:9c:55:5c:d3:5b:32:14:7b:f0:85:04: 90:d1:9b:c8:75:02:0d:ab:6f:30:e9:a6:a2:bf:98: 24:90:ac:30:8b:cf:e6:bb:36:54:29:b0:3d:14:0b: f8:04:df:de:c7:6d:b3:c0:03:a6:d8:06:55:5e:0f: 84:52:da:4f:01:56:ce:0a:75:b5:48:d8:28:91:a3: 4f:e5:a8:a8:0d:b7:b9:af:e4:ea:02:a6:5d:05:38: 7b:9d:2f:70:b1:ad:f0:2e:fd:fd:df:c1:fa:23:42: e2:4a:f9:49:85:1b:b2:31:cc:d5:be:8f:d6:34:2e: a1:24:c7:57:fd:c3:b4:6c:e6:13:06:95:21:f0:bc: a7:b8:a0:ca:2f:f6:ef:f8:91:d8:13:71:29:bb:35: d1:a2:ec:fd:9f:4e:d9:9d:bd:de:29:56:7d:d8:e4: 63:53:bd:34:94:7d:1e:f0:de:d3:bb:51:8e:29:37: 58:b8:2e:9e:73:a7:cf:1f:36:1d:f7:14:79:48:71: 48:cd:df:37:e1:17:d8:9c:19:20:e2:51:45:a8:98: 33:77:81:a1:c3:a4:b3:88:14:33:28:0d:e7:9f:71: d5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:97:62:1E:7D:1D:F1:35:87:3E:84:BE:D7:41:02:3D:66:C2:AD:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:da:45:4e:62:ef:9a:a5:d1:52:37:41:39:2e:9c:7d:02:59: ff:09:5d:ee:6f:1b:89:62:21:ac:75:78:4a:75:ae:8e:88:73: 42:b9:1e:2b:65:b9:3c:17:7c:3f:46:4e:ce:e9:98:38:2b:e8: c5:ae:f2:38:4d:d4:55:44:58:4f:6b:5c:6a:49:07:e7:1c:ed: 42:1c:a8:54:25:2c:43:22:21:b7:e4:a3:31:85:bf:76:4a:17: 68:d4:75:c0:43:eb:d3:b4:de:a2:79:1f:b2:3f:bf:c9:61:ca: 81:fd:13:fa:7a:a7:85:fc:07:bc:5b:98:53:60:da:31:ed:c5: b9:77:94:08:9b:a9:76:3b:d5:8d:73:5b:3d:e8:49:f8:7f:05: 2e:50:99:1f:13:1f:21:82:68:fe:b3:f2:2a:18:76:72:ef:53: b2:bb:23:a9:a6:4b:50:33:6e:9f:bc:5e:a5:05:a5:4c:83:79: e1:ae:ba:5b:ac:7b:9e:0b:5e:56:16:82:c7:fc:6b:74:ef:f6: e3:7b:34:80:1f:60:e1:a1:59:79:46:36:1d:b3:11:69:bd:65: 5d:e2:f4:81:1a:a4:99:68:93:62:38:ed:69:51:af:de:8b:bc: 2b:5d:02:82:27:fb:74:8c:7e:bc:1f:8a:24:b6:f1:ef:90:70: 02:c9:46:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzcZ4ouVF4upe7TQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk MDQ0YjhkOWMtZjg2My00YWI1LTlhNmUtNWU3YjQ2YmExZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoaSPI50hMxqFBtpzD9Zw0H3nknlK3t31tx/ 589gTlehnFVc01syFHvwhQSQ0ZvIdQINq28w6aaiv5gkkKwwi8/muzZUKbA9FAv4 BN/ex22zwAOm2AZVXg+EUtpPAVbOCnW1SNgokaNP5aioDbe5r+TqAqZdBTh7nS9w sa3wLv3938H6I0LiSvlJhRuyMczVvo/WNC6hJMdX/cO0bOYTBpUh8LynuKDKL/bv +JHYE3EpuzXRouz9n07Znb3eKVZ92ORjU700lH0e8N7Tu1GOKTdYuC6ec6fPHzYd 9xR5SHFIzd834RfYnBkg4lFFqJgzd4Ghw6SziBQzKA3nn3HV3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOXYh59HfE1hz6EvtdBAj1mwq06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvM2ZlZGU0Y2ItNGYyZS0z OGYyLWJiNmQtZGE3NGIxYzI3YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHaRU5i75ql0VI3QTkunH0CWf8JXe5vG4liIax1eEp1ro6Ic0K5 HitluTwXfD9GTs7pmDgr6MWu8jhN1FVEWE9rXGpJB+cc7UIcqFQlLEMiIbfkozGF v3ZKF2jUdcBD69O03qJ5H7I/v8lhyoH9E/p6p4X8B7xbmFNg2jHtxbl3lAibqXY7 1Y1zWz3oSfh/BS5QmR8THyGCaP6z8ioYdnLvU7K7I6mmS1Azbp+8XqUFpUyDeeGu uluse54LXlYWgsf8a3Tv9uN7NIAfYOGhWXlGNh2zEWm9ZV3i9IEapJlok2I47WlR r96LvCtdAoIn+3SMfrwfiiS28e+QcALJRoI= -----END CERTIFICATE-----Generated at Sun Mar 1 20:57:23 2026 by rpki-client