$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa File: 3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json) Hash identifier: Ikm9HAHAyv9B4rmJ/u8psxCgugOpSfyaeK9WUJw74aE= Subject key identifier: 47:84:70:2A:90:90:4B:3F:25:3B:2B:94:D3:33:8A:E4:65:8C:D3:51 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584F3FAD4020961B094060F56C80 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 210645 IP address blocks: 2602:2c9:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:40:20:96:1b:09:40:60:f5:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=f61e518d-0647-47ed-8cf1-8214199f14ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:03:eb:71:3f:d9:c6:09:c3:cc:59:09:30: 44:67:d0:38:75:d6:0c:1f:2f:34:97:04:50:9b:57: c5:90:c3:93:2b:ca:b5:50:84:b5:40:85:cf:37:8d: 36:73:01:c2:9b:6f:57:22:71:b6:74:02:b7:09:fa: bb:9d:f1:2c:7a:e8:c9:38:cf:be:98:3f:e7:07:77: 97:44:fe:69:b1:c6:f4:25:09:7e:29:d9:a3:07:f1: a2:e5:9b:97:7b:a7:e0:a1:1c:b1:cb:32:cd:67:42: 25:cb:86:9f:b5:fa:60:2d:ad:85:59:a3:1d:d2:f6: 69:3f:a2:ff:da:ea:e8:26:57:3e:3d:23:f5:7c:4e: 09:78:f6:ea:97:7e:57:c0:36:02:e4:94:ca:16:6e: 31:d4:9d:25:34:61:d1:3e:89:c8:68:e9:32:0f:36: 4f:ed:29:13:f4:4e:5c:42:39:d4:57:0f:2e:d4:9a: 32:97:2d:e8:57:22:0c:20:b1:78:0d:db:33:a7:a3: 92:39:a2:df:85:07:e8:e2:e2:9e:15:26:62:0d:d1: f3:67:a3:f3:dc:71:fe:a5:06:5b:2e:62:52:68:f4: 19:6c:8e:67:82:7a:a7:21:8a:4c:82:e9:d5:b0:52: b0:af:0b:98:5d:42:39:6f:f1:63:23:73:db:11:ba: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:84:70:2A:90:90:4B:3F:25:3B:2B:94:D3:33:8A:E4:65:8C:D3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7e:aa:99:6d:4c:5f:98:0e:9c:c9:3d:8a:63:73:cd:1d:e1: d0:cc:6a:47:57:51:bf:40:58:17:d8:fb:03:0c:45:0b:4a:e0: 57:ef:42:0d:bf:43:a7:87:b7:9c:82:51:cf:8a:96:93:89:28: a8:e4:f6:1b:e6:91:6a:28:15:f3:3c:10:ad:67:64:6e:55:36: fb:c1:11:a0:98:cd:7f:47:d7:9b:7b:b9:75:83:90:09:08:cd: a5:96:f7:5a:dd:c3:e1:22:d3:69:d1:d8:57:73:f0:54:16:c0: 6e:34:c0:94:61:61:f1:e2:96:a7:f5:cf:03:ac:b4:27:77:44: 6f:68:5b:4c:37:e9:a8:79:54:a8:13:0d:ad:48:2f:da:44:2c: 83:d2:01:28:e0:01:55:6f:ed:09:76:32:2f:cc:42:ef:ca:0f: af:bf:43:72:4f:58:65:41:c8:67:e4:95:19:01:57:2e:9f:ea: c0:c7:1b:68:02:e4:bc:9e:61:c9:63:3c:03:4e:a7:98:57:81: 59:43:96:3f:61:c3:04:3f:bf:d4:b9:6e:1c:64:bd:80:55:c2: 29:2a:25:0a:b4:60:1f:ff:61:94:17:79:02:a3:2e:0d:42:66: 54:d7:fc:12:c0:60:d1:f9:79:0b:e5:07:b0:53:94:9a:e6:7e: 46:33:93:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rUAglhsJQGD1bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjYxZTUxOGQtMDY0Ny00N2VkLThjZjEtODIxNDE5OWYxNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVsD63E/2cYJw8xZCTBEZ9A4ddYMHy80lwRQ m1fFkMOTK8q1UIS1QIXPN402cwHCm29XInG2dAK3Cfq7nfEseujJOM++mD/nB3eX RP5pscb0JQl+KdmjB/Gi5ZuXe6fgoRyxyzLNZ0Ily4aftfpgLa2FWaMd0vZpP6L/ 2uroJlc+PSP1fE4JePbql35XwDYC5JTKFm4x1J0lNGHRPonIaOkyDzZP7SkT9E5c QjnUVw8u1Joyly3oVyIMILF4Ddszp6OSOaLfhQfo4uKeFSZiDdHzZ6Pz3HH+pQZb LmJSaPQZbI5ngnqnIYpMgunVsFKwrwuYXUI5b/FjI3PbEbrQdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEeEcCqQkEs/JTsrlNMziuRljNNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvM2ZlZGU0Y2ItNGYyZS0z OGYyLWJiNmQtZGE3NGIxYzI3YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAN+qpltTF+YDpzJPYpjc80d4dDMakdXUb9AWBfY+wMMRQtK4Ffv Qg2/Q6eHt5yCUc+KlpOJKKjk9hvmkWooFfM8EK1nZG5VNvvBEaCYzX9H15t7uXWD kAkIzaWW91rdw+Ei02nR2Fdz8FQWwG40wJRhYfHilqf1zwOstCd3RG9oW0w36ah5 VKgTDa1IL9pELIPSASjgAVVv7Ql2Mi/MQu/KD6+/Q3JPWGVByGfklRkBVy6f6sDH G2gC5LyeYcljPANOp5hXgVlDlj9hwwQ/v9S5bhxkvYBVwikqJQq0YB//YZQXeQKj Lg1CZlTX/BLAYNH5eQvlB7BTlJrmfkYzk6c= -----END CERTIFICATE-----Generated at Tue Sep 22 18:16:14 2026 by rpki-client