$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa File: cffa80ce-dddf-3206-be5e-b60edcafd97d.roa (raw, json) Hash identifier: dJ9zrVH2H+yGitrCd9SESsZJFOs8jq5fqI9b/EfMoX0= Subject key identifier: 6B:18:05:54:D0:D0:E0:0F:E4:19:F1:1C:96:44:09:98:B1:56:2D:77 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584EC7A1D3E2B0B67A484D7E0A80 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 210645 IP address blocks: 2602:2c9:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d3:e2:b0:b6:7a:48:4d:7e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=b27816c8-f178-4af1-889c-97cbf6943444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:e7:f3:e1:2e:ef:43:bc:13:f5:d4:b6:82: fd:97:c2:66:54:bd:eb:92:4e:38:84:ab:f0:5d:9b: 7e:11:bb:26:97:ea:e3:7e:fe:87:b9:99:b1:7b:ea: d0:fa:1c:25:c1:47:52:6c:1f:0b:be:d9:df:ae:b8: c6:57:b2:a3:86:43:a1:a2:72:67:b6:d8:8a:88:29: aa:3c:ec:09:c0:66:30:7b:91:b0:9c:8e:87:74:97: eb:59:30:52:ac:e8:0b:08:a4:c2:fe:7f:66:8a:1e: 9c:98:81:04:a3:62:5f:9c:67:ed:55:3c:de:8c:be: d6:7c:ca:2e:19:c3:1c:41:af:6b:04:e6:49:8a:67: b4:b4:6d:f6:15:e9:7d:22:f7:58:34:b1:9b:1d:66: 7f:48:f7:c0:c5:6b:4e:d4:5f:97:47:4a:03:fd:1e: a8:2d:61:ec:54:2e:6f:c7:7b:7a:90:b4:11:b4:c2: 3a:99:89:e1:11:a4:d6:1a:eb:09:f6:45:f3:7c:4a: fa:cd:d2:85:7f:ea:ba:68:f7:72:7b:a2:eb:17:8e: 8d:83:84:06:cc:52:41:53:29:f3:e4:92:da:ea:07: 84:60:84:6b:1d:6b:7c:2f:c5:e0:24:3c:43:6b:0d: bf:e4:dc:8c:ca:82:1e:a1:5a:d4:30:98:38:a0:8c: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:18:05:54:D0:D0:E0:0F:E4:19:F1:1C:96:44:09:98:B1:56:2D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ae:40:22:e0:4b:de:d2:2d:c2:2e:4f:8e:94:af:08:63:b2: 28:bc:dd:10:76:d2:ef:8a:5d:f3:44:4c:d8:3e:0b:66:95:3b: 49:f8:d9:e0:eb:39:82:5d:47:00:0f:8a:de:d8:44:3d:e1:eb: 2c:69:b8:45:44:ea:79:d6:bd:35:66:0c:6e:39:35:71:60:37: bf:7d:57:88:4e:97:fa:db:47:41:cc:ae:91:a2:85:09:f7:16: 71:0b:60:19:21:ab:5e:f8:36:d6:8b:77:5a:18:8a:6a:4a:ab: a0:a1:96:39:5b:98:c2:0f:e1:9d:73:3f:de:22:bd:f4:5a:4e: 62:86:93:fc:b2:ab:44:92:41:b3:0a:df:e7:bd:6a:21:e5:75: e6:31:db:52:32:1a:5e:67:10:7f:aa:90:23:aa:3a:1e:95:88: dc:dd:de:7a:57:17:70:98:36:7f:05:ef:7e:be:40:db:10:05: 8d:01:af:45:2b:69:6d:d9:54:47:b7:98:c5:1f:eb:3b:03:8d: 78:7f:55:92:d3:b5:47:72:a3:cd:63:2d:73:45:09:55:e4:06: 54:fe:cf:39:13:a9:16:7e:e7:71:4f:04:cb:a4:4d:a3:8a:1a: 9e:2c:df:63:04:ab:97:5d:67:6d:b1:85:3f:44:e9:1a:5b:ca: 9e:7e:58:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7HodPisLZ6SE1+CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjI3ODE2YzgtZjE3OC00YWYxLTg4OWMtOTdjYmY2OTQzNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGrn8+Eu70O8E/XUtoL9l8JmVL3rkk44hKvw XZt+Ebsml+rjfv6HuZmxe+rQ+hwlwUdSbB8LvtnfrrjGV7KjhkOhonJnttiKiCmq POwJwGYwe5GwnI6HdJfrWTBSrOgLCKTC/n9mih6cmIEEo2JfnGftVTzejL7WfMou GcMcQa9rBOZJime0tG32Fel9IvdYNLGbHWZ/SPfAxWtO1F+XR0oD/R6oLWHsVC5v x3t6kLQRtMI6mYnhEaTWGusJ9kXzfEr6zdKFf+q6aPdye6LrF46Ng4QGzFJBUynz 5JLa6geEYIRrHWt8L8XgJDxDaw2/5NyMyoIeoVrUMJg4oIyjvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGsYBVTQ0OAP5BnxHJZECZixVi13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvY2ZmYTgwY2UtZGRkZi0z MjA2LWJlNWUtYjYwZWRjYWZkOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2uQCLgS97SLcIuT46Urwhjsii83RB20u+KXfNETNg+C2aVO0n4 2eDrOYJdRwAPit7YRD3h6yxpuEVE6nnWvTVmDG45NXFgN799V4hOl/rbR0HMrpGi hQn3FnELYBkhq174NtaLd1oYimpKq6ChljlbmMIP4Z1zP94ivfRaTmKGk/yyq0SS QbMK3+e9aiHldeYx21IyGl5nEH+qkCOqOh6ViNzd3npXF3CYNn8F736+QNsQBY0B r0UraW3ZVEe3mMUf6zsDjXh/VZLTtUdyo81jLXNFCVXkBlT+zzkTqRZ+53FPBMuk TaOKGp4s32MEq5ddZ22xhT9E6Rpbyp5+WKU= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:13 2026 by rpki-client