$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa File: 6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa (raw, json) Hash identifier: CyRbQ2N7Y0WRay/qvYcdWEe4YTN2RrRoqIVVsCtUgn0= Subject key identifier: 8A:8D:37:DE:A5:25:E8:21:04:B1:20:01:8B:13:7C:91:FD:C5:89:35 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584F698D85446286A5BF5DD6BE80 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 210645 IP address blocks: 2602:2c9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:85:44:62:86:a5:bf:5d:d6:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=0b4c8a75-93b1-4051-939c-b3dd174e206a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:41:b4:ff:f1:be:7b:9b:ca:28:74:49:07: 85:a5:d1:72:ba:57:65:5d:36:03:dc:c0:c3:6b:3e: 19:93:1b:38:43:c5:6c:4a:1f:16:23:c5:e7:10:8a: f3:75:d3:a1:c9:e3:c7:8b:91:b0:6e:55:e7:fa:d1: 05:74:b5:99:2c:73:7e:a8:26:df:c8:a8:55:8b:21: 25:7e:28:c6:a4:69:35:a3:fc:f3:e0:e3:7d:dc:a3: 9f:ef:15:9a:a4:4c:a1:52:7f:f9:f1:cc:67:13:60: e1:6b:fa:10:ff:5e:ad:9f:c7:86:72:a3:93:1c:a7: 0e:28:50:cb:8a:61:65:21:0f:a6:23:84:47:a9:71: 82:96:72:57:92:21:56:a0:70:9f:21:f8:f8:2c:a4: e8:64:93:f6:40:ac:b4:6a:53:9c:19:a1:a1:58:82: 78:d7:18:18:20:c3:27:6f:b4:a1:fa:4f:12:93:2a: e4:df:4d:fb:50:f3:1d:81:07:fc:ed:5b:8f:88:be: d9:a9:17:8a:98:7c:14:a7:4c:e5:15:e3:82:cf:b4: ef:d9:0f:ac:94:74:0d:ea:1d:aa:a7:c8:6d:cc:5e: 2a:b3:ac:44:4f:09:1c:49:82:93:d0:b2:7b:23:e9: 42:88:b3:f9:f4:0a:f9:4c:5c:5a:72:d9:64:de:bd: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:37:DE:A5:25:E8:21:04:B1:20:01:8B:13:7C:91:FD:C5:89:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:81:b4:83:cc:77:b5:c6:d3:fd:7e:ea:af:e5:be:4c:63:dd: d5:fe:67:4f:cf:36:04:28:e9:e5:fb:73:74:22:2f:23:44:5e: a2:d7:07:25:a9:18:65:82:9e:7f:f0:6b:bd:39:e3:42:2b:2d: d9:5e:50:7c:f7:c0:8b:35:23:d6:c1:02:d5:37:dd:07:6b:05: 20:43:00:65:71:db:2b:92:d2:ce:78:49:b8:b1:bc:f7:20:79: 54:00:b4:d1:02:c7:b8:b7:52:a6:80:bd:49:14:e6:91:b9:f1: 24:25:1c:57:b5:2d:94:72:01:32:b7:58:77:04:23:15:5a:23: 6f:cc:62:e7:ad:e5:d2:da:fc:a6:4b:b4:33:ce:50:9d:08:3f: 31:c9:ae:2c:8e:ce:78:54:98:2c:31:1c:ee:04:69:b2:4a:19: 38:1b:d2:98:4e:21:61:ba:c0:60:23:55:6f:ba:cb:fa:6f:b4: 16:49:c8:48:28:ea:da:66:2b:9e:a1:89:a8:5a:fe:98:11:32: d1:ff:e3:90:59:82:58:6b:e6:80:46:f5:43:e8:4f:8d:2f:f8: 9b:fe:09:d8:73:8b:82:cd:f1:c2:59:5e:95:ff:79:69:03:c5: 24:0b:f0:d9:a2:e2:3a:8b:f2:27:5c:c1:81:3c:18:6a:35:e4: c1:3c:d5:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9pjYVEYoalv13WvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MGI0YzhhNzUtOTNiMS00MDUxLTkzOWMtYjNkZDE3NGUyMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAlBtP/xvnubyih0SQeFpdFyuldlXTYD3MDD az4Zkxs4Q8VsSh8WI8XnEIrzddOhyePHi5GwblXn+tEFdLWZLHN+qCbfyKhViyEl fijGpGk1o/zz4ON93KOf7xWapEyhUn/58cxnE2Dha/oQ/16tn8eGcqOTHKcOKFDL imFlIQ+mI4RHqXGClnJXkiFWoHCfIfj4LKToZJP2QKy0alOcGaGhWIJ41xgYIMMn b7Sh+k8Skyrk3037UPMdgQf87VuPiL7ZqReKmHwUp0zlFeOCz7Tv2Q+slHQN6h2q p8htzF4qs6xETwkcSYKT0LJ7I+lCiLP59Ar5TFxactlk3r3wdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIqNN96lJeghBLEgAYsTfJH9xYk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNjQzOGI0ZjAtNjQ1Ny0z YjRhLWFkZDktNzhiNWVjNTdiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB2BtIPMd7XG0/1+6q/lvkxj3dX+Z0/PNgQo6eX7c3QiLyNEXqLX ByWpGGWCnn/wa70540IrLdleUHz3wIs1I9bBAtU33QdrBSBDAGVx2yuS0s54Sbix vPcgeVQAtNECx7i3UqaAvUkU5pG58SQlHFe1LZRyATK3WHcEIxVaI2/MYuet5dLa /KZLtDPOUJ0IPzHJriyOznhUmCwxHO4EabJKGTgb0phOIWG6wGAjVW+6y/pvtBZJ yEgo6tpmK56hiaha/pgRMtH/45BZglhr5oBG9UPoT40v+Jv+Cdhzi4LN8cJZXpX/ eWkDxSQL8Nmi4jqL8idcwYE8GGo15ME81c0= -----END CERTIFICATE-----Generated at Thu Oct 29 00:49:25 2026 by rpki-client