$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa File: cffa80ce-dddf-3206-be5e-b60edcafd97d.roa (raw, json) Hash identifier: i8J4l8MYRlBPMU6LOps0++wplzdJT+tFJx4YcfnVhjI= Subject key identifier: 98:79:F3:D1:8C:5A:F3:C0:FD:50:B6:06:97:33:9C:17:2A:65:4A:88 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584F698D853872D17BD47AA970E0 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 210645 IP address blocks: 2602:2c9:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:85:38:72:d1:7b:d4:7a:a9:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=79cc33f0-4a48-4747-ad8c-cb4510fb683e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:9a:17:cb:6a:5a:8c:c9:cf:de:6d:b1:0b: f9:33:7e:6a:e4:f2:8a:64:8f:55:51:bf:06:ef:f0: 44:ca:5a:d7:5a:92:2b:78:6f:71:04:f8:8e:29:95: 98:a3:50:26:dd:fe:16:11:14:ac:50:19:b6:f1:41: 41:82:4e:59:11:9d:01:79:d3:34:f5:2b:53:d3:e2: 21:81:70:6d:5a:9f:91:d7:c2:61:0d:7c:c6:12:31: cc:12:50:3c:ba:7e:86:e9:f1:16:ec:a5:b1:24:44: 34:40:e9:34:a6:81:05:17:6b:9d:7e:a0:b6:f7:31: 6c:64:9c:09:39:94:d7:3d:60:f0:37:9f:cb:09:64: a1:54:2b:7c:14:5a:6d:9f:7f:4f:21:38:65:c7:da: 6c:80:ff:19:9c:c4:3a:7c:bc:0b:57:01:f6:11:14: ea:d3:19:d4:92:80:9f:70:22:59:81:d0:16:34:7f: 16:b2:89:1e:16:16:65:a0:b9:5d:b0:93:48:99:ad: 81:27:07:39:18:f1:f4:d1:1b:b5:94:8c:7d:fe:04: 7f:e8:56:2c:a5:04:cc:33:39:2d:2b:c4:17:3a:b7: 1c:aa:a7:cb:b4:27:31:b5:68:13:92:35:89:9d:61: cb:16:7f:5f:91:01:4f:4c:e7:b4:f5:fe:1f:33:e2: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:79:F3:D1:8C:5A:F3:C0:FD:50:B6:06:97:33:9C:17:2A:65:4A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:86:6c:22:2d:b0:7c:ef:df:1c:14:56:5f:d3:55:d3:e4:3d: c8:de:b3:63:36:0b:5b:d1:f6:5f:16:ad:8d:a6:3e:d2:e3:1b: 67:40:66:31:63:67:53:11:02:b9:08:2c:d6:db:db:34:28:25: 35:df:8d:61:e6:10:7c:d9:07:5f:bf:ac:5d:ad:3d:98:15:bd: 67:11:38:16:e4:0c:12:fe:fe:bc:af:c7:32:30:78:e6:c4:5c: 4c:45:3e:d3:e2:9f:d9:ef:40:85:04:ef:00:13:44:94:48:38: 0c:08:dd:46:18:5b:1f:48:52:0c:7c:0a:88:5b:f2:76:fd:18: f8:7b:1c:b7:a8:ff:2b:2d:ed:f2:af:b8:0b:7f:7a:b8:09:51: 61:4b:a0:20:f1:36:03:d8:32:86:8a:16:97:1a:66:ca:c2:7c: 7d:b3:8c:b6:c9:c9:f5:6e:3d:4d:63:e0:db:29:26:c1:15:e1: 36:1e:54:f3:ea:8a:19:dc:c5:3e:dc:d2:c5:e5:17:fc:ce:b1: 8c:24:1c:bf:c9:f4:a4:67:e9:80:03:cd:d5:6a:68:b5:63:75: 37:73:89:af:fc:37:d2:a9:8f:15:09:81:fa:6b:cd:66:9d:1a: 4d:c9:37:2c:69:84:cf:89:c8:0e:7c:ea:cf:1b:cd:7a:30:b2: a3:f5:21:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9pjYU4ctF71HqpcOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NzljYzMzZjAtNGE0OC00NzQ3LWFkOGMtY2I0NTEwZmI2ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd2aF8tqWozJz95tsQv5M35q5PKKZI9VUb8G 7/BEylrXWpIreG9xBPiOKZWYo1Am3f4WERSsUBm28UFBgk5ZEZ0BedM09StT0+Ih gXBtWp+R18JhDXzGEjHMElA8un6G6fEW7KWxJEQ0QOk0poEFF2udfqC29zFsZJwJ OZTXPWDwN5/LCWShVCt8FFptn39PIThlx9psgP8ZnMQ6fLwLVwH2ERTq0xnUkoCf cCJZgdAWNH8WsokeFhZloLldsJNIma2BJwc5GPH00Ru1lIx9/gR/6FYspQTMMzkt K8QXOrccqqfLtCcxtWgTkjWJnWHLFn9fkQFPTOe09f4fM+KgZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJh589GMWvPA/VC2BpcznBcqZUqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvY2ZmYTgwY2UtZGRkZi0z MjA2LWJlNWUtYjYwZWRjYWZkOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALqGbCItsHzv3xwUVl/TVdPkPcjes2M2C1vR9l8WrY2mPtLjG2dA ZjFjZ1MRArkILNbb2zQoJTXfjWHmEHzZB1+/rF2tPZgVvWcROBbkDBL+/ryvxzIw eObEXExFPtPin9nvQIUE7wATRJRIOAwI3UYYWx9IUgx8Cohb8nb9GPh7HLeo/yst 7fKvuAt/ergJUWFLoCDxNgPYMoaKFpcaZsrCfH2zjLbJyfVuPU1j4NspJsEV4TYe VPPqihncxT7c0sXlF/zOsYwkHL/J9KRn6YADzdVqaLVjdTdzia/8N9KpjxUJgfpr zWadGk3JNyxphM+JyA586s8bzXowsqP1IZg= -----END CERTIFICATE-----Generated at Sun Oct 25 14:33:44 2026 by rpki-client