$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa File: 3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json) Hash identifier: sq1+Px0nH6QuF01AuAjprtkzCoA7c4rpCHyTPBxdIcE= Subject key identifier: 38:C2:51:91:9A:6E:40:0F:42:7C:03:68:D7:3F:E4:51:5A:25:26:A2 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584E9D4A7393E013AE282CD27500 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 210645 IP address blocks: 2602:2c9:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:73:93:e0:13:ae:28:2c:d2:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=cc737d38-861b-4ba0-9f34-071cb8a1e9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:f9:8d:6e:de:90:49:73:c7:2e:17:f2:e3: 9f:d0:5d:f9:5d:78:a3:c0:4f:03:e8:c7:8f:07:14: 07:40:97:1a:de:61:c5:30:ef:64:83:64:99:44:27: 49:9e:eb:8c:bf:0d:7d:73:ef:c0:0a:d3:16:e2:ac: f0:8d:e3:f0:df:b1:53:73:7d:65:c3:4f:43:0d:ed: 9e:2d:0a:9c:1d:83:38:88:f4:98:79:7c:5d:97:c4: c9:95:f2:ae:e7:88:ea:10:f5:d1:ea:a0:01:3e:ff: 40:43:34:01:1c:20:8f:17:d1:0a:7e:ba:aa:06:b6: a5:da:d6:29:86:56:94:a3:fa:56:52:8b:91:d3:0e: a7:dd:6b:a7:51:18:77:47:c8:09:ba:38:64:3d:97: b4:5e:3b:92:27:e4:17:5f:dc:41:5f:8c:ac:ef:bc: 9b:7d:a7:8e:b5:ec:ab:c5:62:d0:18:d8:81:1c:db: fc:1d:77:56:7d:d3:25:6d:6d:0e:c1:e8:e4:41:3d: 83:ce:18:5e:bf:d0:38:b1:83:55:33:e7:38:27:6a: 75:2b:fd:29:90:08:a3:ec:ab:c1:95:d0:8d:bf:03: e2:89:23:b1:da:71:21:fe:c0:f4:83:6c:1d:0f:64: 4c:ec:fc:c6:39:10:53:e7:2a:fd:94:7c:01:11:08: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C2:51:91:9A:6E:40:0F:42:7C:03:68:D7:3F:E4:51:5A:25:26:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ba:74:1f:96:53:18:68:30:0a:5f:2a:e1:35:0a:8c:77:45: 82:c0:74:a7:6e:62:45:83:1f:31:10:d9:37:08:45:45:27:be: 5b:0d:5c:a4:d2:60:46:a0:7b:ce:9e:7d:91:8c:e9:f4:d3:60: 70:c1:c3:be:01:08:99:bf:29:6c:07:cc:fd:1a:29:3e:20:3b: 2a:0c:34:eb:48:6f:b6:28:b5:0e:90:64:a3:f1:a9:27:97:63: 48:40:b0:ba:49:d3:ce:c5:2a:2a:73:9d:06:b7:24:44:45:0d: fb:b0:9f:60:e4:95:46:8e:3d:7b:a7:44:e4:49:0c:ca:13:fe: 5a:ed:20:7f:81:b7:30:54:e5:b5:98:53:8b:f7:e5:f0:30:de: 1a:da:55:8b:e2:16:20:39:0d:2f:e1:dd:0c:6b:1b:21:a6:ed: 82:e3:da:1c:da:74:99:65:4e:bb:34:a0:39:d6:12:59:c7:de: df:78:77:c9:2c:7a:4f:8c:55:1a:29:eb:17:2f:96:9a:5f:74: 2f:5d:8b:6d:29:df:63:d1:9b:cc:b1:28:6f:51:64:08:b9:81: 30:c1:f5:ef:f5:ce:41:3f:95:16:d2:04:7e:dd:61:b6:a0:33: 17:67:cc:66:58:d1:e4:7d:3a:85:36:c2:9e:5f:c4:34:68:4a: 2b:ac:35:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6dSnOT4BOuKCzSdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk Y2M3MzdkMzgtODYxYi00YmEwLTlmMzQtMDcxY2I4YTFlOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn735jW7ekElzxy4X8uOf0F35XXijwE8D6MeP BxQHQJca3mHFMO9kg2SZRCdJnuuMvw19c+/ACtMW4qzwjePw37FTc31lw09DDe2e LQqcHYM4iPSYeXxdl8TJlfKu54jqEPXR6qABPv9AQzQBHCCPF9EKfrqqBral2tYp hlaUo/pWUouR0w6n3WunURh3R8gJujhkPZe0XjuSJ+QXX9xBX4ys77ybfaeOteyr xWLQGNiBHNv8HXdWfdMlbW0OwejkQT2Dzhhev9A4sYNVM+c4J2p1K/0pkAij7KvB ldCNvwPiiSOx2nEh/sD0g2wdD2RM7PzGORBT5yr9lHwBEQgMhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjCUZGabkAPQnwDaNc/5FFaJSaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvM2ZlZGU0Y2ItNGYyZS0z OGYyLWJiNmQtZGE3NGIxYzI3YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACG6dB+WUxhoMApfKuE1Cox3RYLAdKduYkWDHzEQ2TcIRUUnvlsN XKTSYEage86efZGM6fTTYHDBw74BCJm/KWwHzP0aKT4gOyoMNOtIb7YotQ6QZKPx qSeXY0hAsLpJ087FKipznQa3JERFDfuwn2DklUaOPXunRORJDMoT/lrtIH+BtzBU 5bWYU4v35fAw3hraVYviFiA5DS/h3QxrGyGm7YLj2hzadJllTrs0oDnWElnH3t94 d8ksek+MVRop6xcvlppfdC9di20p32PRm8yxKG9RZAi5gTDB9e/1zkE/lRbSBH7d YbagMxdnzGZY0eR9OoU2wp5fxDRoSiusNZY= -----END CERTIFICATE-----Generated at Tue Jul 28 22:11:56 2026 by rpki-client