$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa File: 6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa (raw, json) Hash identifier: MdSpr1JxcX3oVR3W8iNDJsYVV1Uh8mK7vVxr84BXnx0= Subject key identifier: 7F:D6:D7:BB:08:80:19:8C:14:A7:FA:EF:72:F8:5B:68:06:7C:D6:D4 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584E253F076B1B7ED59D3E8F23C0 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 210645 IP address blocks: 2602:2c9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:07:6b:1b:7e:d5:9d:3e:8f:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=33b30bd1-4a04-4727-b429-12eb9358cb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8e:d2:82:f2:18:70:82:2c:51:03:14:17:3d: f2:83:09:24:1a:eb:0a:52:ef:34:60:de:b4:a7:6e: d4:69:ea:99:73:c5:e5:d3:a2:e7:87:44:1d:fe:d6: 5e:d8:dd:55:de:ba:bc:90:98:8f:d0:df:59:31:11: f4:c6:d9:c7:19:8b:53:76:52:bd:19:a2:3f:9d:33: 94:c2:99:85:66:3a:ae:66:ec:06:59:a4:75:fe:17: 4a:2f:93:c3:fa:51:56:ce:e6:1e:a6:71:7a:19:67: 99:1c:50:35:02:d8:35:3c:d1:fa:bb:bc:2d:f5:4d: f6:78:c2:b4:51:58:94:56:97:06:5d:14:23:ed:ad: 82:f8:5c:e7:55:e3:88:cf:be:43:9a:6b:99:55:37: de:f5:f6:28:45:8f:7f:b5:a8:9a:dd:95:81:97:94: 2c:5f:1a:21:1c:b5:b1:40:d9:66:9c:90:38:14:b9: 1d:90:86:cc:2d:17:f4:6e:ca:d7:7b:e8:44:74:9d: 48:da:53:3e:70:64:d5:6f:5d:f0:a2:05:0b:69:42: c5:ed:e3:15:9a:c6:c4:9b:09:4c:d1:a0:07:cf:02: 29:54:9e:74:da:af:c7:e0:11:2f:92:9a:4b:ac:94: 88:07:87:da:03:d3:97:0d:71:a9:ee:0d:3f:d7:de: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D6:D7:BB:08:80:19:8C:14:A7:FA:EF:72:F8:5B:68:06:7C:D6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5e:34:a9:aa:21:1c:f8:99:29:9a:47:0e:49:c2:e4:19:2c: 9f:a6:52:47:d0:64:56:d5:d6:ff:d4:35:1d:21:49:df:af:6c: a4:87:bb:52:de:ef:e2:e2:c7:c3:86:a3:bc:5a:55:2e:9e:a2: 41:03:d5:03:31:21:a3:1f:13:7c:7e:4a:08:5c:dd:cd:1f:44: fc:61:93:60:3e:67:46:e4:b4:a6:3b:4f:71:07:5b:fc:26:58: e2:69:88:59:7c:dc:8c:26:e8:ed:d7:31:37:b0:cb:6e:a5:ee: 29:cb:ea:d6:03:87:32:7f:6a:60:2d:52:d6:61:32:da:75:86: 1d:2b:cc:00:85:3b:1c:9d:5d:04:71:f1:54:8b:c8:ef:44:7b: 1e:3e:23:05:8d:5c:73:50:e2:ec:80:15:a4:4c:5e:b1:f2:64: 6a:0c:24:71:60:ed:7a:ed:67:19:b5:54:c1:03:50:ca:bd:84: 6f:38:29:09:7d:5b:7e:bf:09:bc:fe:a5:b2:46:41:d2:75:6a: f7:22:0d:8e:da:46:b0:4f:6f:ef:44:67:d5:b9:aa:78:e3:fa: 41:ed:e3:3c:cd:cc:7c:fd:de:ea:db:21:b2:5b:0e:c7:6a:8d: fb:d8:d9:85:7a:91:b1:3e:1e:fd:ad:9f:9f:fc:a9:7a:35:74: ca:e9:40:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4lPwdrG37VnT6PI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk MzNiMzBiZDEtNGEwNC00NzI3LWI0MjktMTJlYjkzNThjYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o7SgvIYcIIsUQMUFz3ygwkkGusKUu80YN60 p27UaeqZc8Xl06Lnh0Qd/tZe2N1V3rq8kJiP0N9ZMRH0xtnHGYtTdlK9GaI/nTOU wpmFZjquZuwGWaR1/hdKL5PD+lFWzuYepnF6GWeZHFA1Atg1PNH6u7wt9U32eMK0 UViUVpcGXRQj7a2C+FznVeOIz75DmmuZVTfe9fYoRY9/taia3ZWBl5QsXxohHLWx QNlmnJA4FLkdkIbMLRf0bsrXe+hEdJ1I2lM+cGTVb13wogULaULF7eMVmsbEmwlM 0aAHzwIpVJ502q/H4BEvkppLrJSIB4faA9OXDXGp7g0/196lkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH/W17sIgBmMFKf673L4W2gGfNbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNjQzOGI0ZjAtNjQ1Ny0z YjRhLWFkZDktNzhiNWVjNTdiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJeNKmqIRz4mSmaRw5JwuQZLJ+mUkfQZFbV1v/UNR0hSd+vbKSH u1Le7+Lix8OGo7xaVS6eokED1QMxIaMfE3x+Sghc3c0fRPxhk2A+Z0bktKY7T3EH W/wmWOJpiFl83Iwm6O3XMTewy26l7inL6tYDhzJ/amAtUtZhMtp1hh0rzACFOxyd XQRx8VSLyO9Eex4+IwWNXHNQ4uyAFaRMXrHyZGoMJHFg7XrtZxm1VMEDUMq9hG84 KQl9W36/Cbz+pbJGQdJ1avciDY7aRrBPb+9EZ9W5qnjj+kHt4zzNzHz93urbIbJb DsdqjfvY2YV6kbE+Hv2tn5/8qXo1dMrpQGM= -----END CERTIFICATE-----Generated at Sun Jun 14 01:41:44 2026 by rpki-client