$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa File: e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa (raw, json) Hash identifier: VPQkzq9y8xJOqqXlDhcXvMBaxaxKiLW7JfS8Kovdqvc= Subject key identifier: 08:ED:50:07:D5:D1:87:AE:07:DA:83:26:EC:03:61:3B:7B:43:8D:50 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584A73509C2BA9B529ED159AF680 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 55116 IP address blocks: 2602:2c9:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:9c:2b:a9:b5:29:ed:15:9a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c0c1c05b-dd64-4ea7-82b1-a3daab558766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:28:2b:29:a0:b7:2a:28:68:11:c8:b1:6d: 7d:72:32:fd:58:01:7f:49:35:3e:b2:fc:b5:55:34: 9f:32:d2:e2:82:6a:74:99:f1:4b:21:cc:a8:01:98: 1f:58:78:6c:40:76:c2:9a:dd:fa:46:86:3a:33:6f: 68:95:5d:73:36:98:78:a3:fe:c2:c8:35:e3:72:f0: 44:d6:47:aa:e2:ea:c5:a7:63:75:f3:fe:b9:53:62: 40:fb:87:bb:02:f7:cb:00:66:db:80:63:ea:3d:01: 18:20:80:f5:19:c0:82:2b:6d:62:b2:6c:9e:be:f4: c0:6f:3b:c9:d8:fe:e8:7d:2d:04:b7:2c:d8:b4:11: 4f:a1:25:1a:bb:a9:64:8a:bf:e6:c0:64:f7:30:87: 30:1c:48:e1:9e:d3:19:10:81:6d:2c:35:da:6b:72: 91:86:dd:48:70:12:95:8a:68:17:50:df:41:3d:14: 41:c8:e3:46:70:c1:25:45:de:e1:fc:58:cb:ba:98: ab:dc:42:87:d3:54:1c:40:c5:43:77:b8:0e:95:96: 18:16:01:b5:a2:d6:f5:b2:5b:94:64:70:0a:83:d1: 67:5e:4a:01:6d:1e:0d:d0:0c:a7:a5:7e:0b:a7:e2: 1a:2d:6e:f5:31:53:89:6e:cb:0e:86:e6:92:b2:0b: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:50:07:D5:D1:87:AE:07:DA:83:26:EC:03:61:3B:7B:43:8D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:af:d2:88:76:87:08:0f:5f:df:3d:0a:c9:cb:bf:72:32:e3: e4:17:61:ed:4c:69:c4:2d:03:f9:1e:a7:ef:f3:6d:86:d7:25: 98:1c:23:60:4b:03:d0:7d:0e:b2:d9:2b:d1:96:2c:05:03:ae: 09:bb:cc:36:eb:ce:fa:ab:ef:60:0c:10:be:e9:bf:cf:ea:ad: e0:49:ef:59:83:9e:1a:56:9a:a8:b3:69:3a:a2:45:4c:22:26: 4c:35:40:59:d5:ad:d0:e3:7f:98:38:e8:13:47:02:fb:d7:f8: b1:10:5b:ed:1d:8e:f7:a6:b7:7c:ca:f2:a6:fe:62:37:b5:ab: 65:bb:67:b2:9b:8e:22:bf:07:70:4b:96:a3:8c:52:4c:50:34: 1d:31:a1:29:04:1c:4c:e3:bf:93:13:c3:40:d0:6c:08:08:99: 35:83:b4:96:01:47:81:dd:fa:4d:60:5a:18:93:1c:1f:93:43: 9c:76:ba:76:d9:17:f2:65:14:61:39:5d:82:ad:97:38:cf:a0: 72:c1:18:3c:16:9f:7f:26:01:9f:1d:af:4a:4c:a6:ab:e4:1a: 79:f1:d4:b9:79:97:2c:8c:f7:b1:d2:f1:db:82:dc:d3:f6:ad: fb:0f:44:bd:19:d5:f4:35:80:15:3d:cb:e2:3b:b2:02:65:df: 67:80:51:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzUJwrqbUp7RWa9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzBjMWMwNWItZGQ2NC00ZWE3LTgyYjEtYTNkYWFiNTU4NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguMoKymgtyooaBHIsW19cjL9WAF/STU+svy1 VTSfMtLigmp0mfFLIcyoAZgfWHhsQHbCmt36RoY6M29olV1zNph4o/7CyDXjcvBE 1keq4urFp2N18/65U2JA+4e7AvfLAGbbgGPqPQEYIID1GcCCK21ismyevvTAbzvJ 2P7ofS0EtyzYtBFPoSUau6lkir/mwGT3MIcwHEjhntMZEIFtLDXaa3KRht1IcBKV imgXUN9BPRRByONGcMElRd7h/FjLupir3EKH01QcQMVDd7gOlZYYFgG1otb1sluU ZHAKg9FnXkoBbR4N0AynpX4Lp+IaLW71MVOJbssOhuaSsgsbwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAjtUAfV0YeuB9qDJuwDYTt7Q41QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZTJhNGE0YjMtYmMzMS0z MWIxLTk0NGUtNGE4YzM4YjliM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJCv0oh2hwgPX989CsnLv3Iy4+QXYe1MacQtA/kep+/zbYbXJZgc I2BLA9B9DrLZK9GWLAUDrgm7zDbrzvqr72AMEL7pv8/qreBJ71mDnhpWmqizaTqi RUwiJkw1QFnVrdDjf5g46BNHAvvX+LEQW+0djvemt3zK8qb+Yje1q2W7Z7KbjiK/ B3BLlqOMUkxQNB0xoSkEHEzjv5MTw0DQbAgImTWDtJYBR4Hd+k1gWhiTHB+TQ5x2 unbZF/JlFGE5XYKtlzjPoHLBGDwWn38mAZ8dr0pMpqvkGnnx1Ll5lyyM97HS8duC 3NP2rfsPRL0Z1fQ1gBU9y+I7sgJl32eAUZ0= -----END CERTIFICATE-----Generated at Wed Jul 23 23:21:50 2025 by rpki-client