$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa File: e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa (raw, json) Hash identifier: F5dfC5FeFE2Qvq0t7dnzkI7chnpLNDHnvLzbh3vwLtA= Subject key identifier: 13:EC:43:4C:DB:13:E6:23:CB:0C:2E:1C:FA:0F:FA:01:DD:A7:D1:CA Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584DF4DB5C36A62A4333A7B75680 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 55116 IP address blocks: 2602:2c9:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:5c:36:a6:2a:43:33:a7:b7:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=c85549c1-99e7-4745-8e91-a4ad103d98df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:a5:97:bb:99:df:0f:0d:36:1e:fd:78:42: 8d:52:0c:61:55:70:30:a9:ff:94:14:ec:33:a9:11: b9:64:89:69:25:c8:fd:2d:48:16:c3:df:1e:1e:cf: dc:45:07:00:08:19:a2:80:7b:fd:9a:91:e7:c3:94: e2:af:1a:0a:f6:ef:10:d8:3a:c5:bf:30:59:d4:de: 85:af:93:f5:ed:25:d3:f7:c7:cd:6a:83:0d:a8:68: e7:40:9c:16:23:1a:b7:e6:ac:dd:48:4b:b9:55:16: 35:ef:28:16:02:a0:73:66:6a:27:bc:05:f1:51:e4: 62:61:67:0b:ed:7a:de:79:10:2e:1b:49:c5:00:13: 99:d7:1f:be:8e:31:d1:82:e5:4f:96:fb:4c:07:d5: 51:1e:44:a3:8a:24:fd:b1:88:93:57:33:2c:b6:6b: 80:c1:9e:ac:d9:10:f2:62:49:18:67:b1:fc:ca:12: 78:90:4c:c1:66:81:ff:ba:78:f2:70:da:5e:fc:b8: f7:ce:9d:5d:1a:fd:8b:ec:6d:f3:9a:79:e4:3b:30: c2:74:1f:aa:33:42:e5:d1:70:0b:c7:d5:c8:98:c1: 3c:50:83:64:15:70:6c:34:cb:23:09:2b:8f:5c:e6: ff:3e:38:ea:dd:04:ba:85:1e:19:d3:7d:24:9c:51: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EC:43:4C:DB:13:E6:23:CB:0C:2E:1C:FA:0F:FA:01:DD:A7:D1:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:79:a8:03:01:97:69:3c:80:5d:55:ff:51:71:ba:55:e4:f2: e5:24:31:17:96:0c:c8:03:38:f3:e0:7c:57:5b:b9:8f:ec:53: 7d:97:22:15:36:a9:4a:1f:d9:f0:ed:eb:f3:c1:2d:9e:72:d2: 63:f9:a9:ce:99:b5:e5:07:7e:89:b1:be:1c:57:e7:5a:4e:d9: 3f:05:b0:23:92:48:5b:01:f9:ce:c6:a3:b8:a9:1c:d5:c1:91: 7a:75:bb:70:38:97:c5:6c:6b:5a:ac:be:93:3d:0c:2c:84:ba: 9c:bf:71:62:2f:5a:3f:e4:32:94:17:7d:87:f8:f1:47:0a:17: a5:59:81:0f:69:29:60:7c:2b:b2:52:e5:65:28:1a:c4:e6:48: 62:09:92:25:81:f0:54:8e:ef:5c:b2:89:f4:88:09:ba:b9:8c: 9a:c1:ed:8e:ad:75:fb:c5:3b:b4:e5:ea:e0:d6:ee:8f:c7:10: c9:c3:16:91:85:c1:62:8c:b0:ed:9a:0a:b4:58:d9:10:9a:51: 88:36:ac:e7:e4:68:7a:bc:d6:93:c7:7f:66:cf:64:7a:52:aa: 80:d9:d3:00:95:60:6e:df:0a:34:c4:e0:35:e3:43:b9:e4:5e: d5:2e:7d:5a:c0:6d:21:04:bf:df:94:5f:c3:ae:b9:b2:c0:b4: dc:11:41:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3021w2pipDM6e3VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk Yzg1NTQ5YzEtOTllNy00NzQ1LThlOTEtYTRhZDEwM2Q5OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisqll7uZ3w8NNh79eEKNUgxhVXAwqf+UFOwz qRG5ZIlpJcj9LUgWw98eHs/cRQcACBmigHv9mpHnw5TirxoK9u8Q2DrFvzBZ1N6F r5P17SXT98fNaoMNqGjnQJwWIxq35qzdSEu5VRY17ygWAqBzZmonvAXxUeRiYWcL 7XreeRAuG0nFABOZ1x++jjHRguVPlvtMB9VRHkSjiiT9sYiTVzMstmuAwZ6s2RDy YkkYZ7H8yhJ4kEzBZoH/unjycNpe/Lj3zp1dGv2L7G3zmnnkOzDCdB+qM0Ll0XAL x9XImME8UINkFXBsNMsjCSuPXOb/Pjjq3QS6hR4Z030knFGWDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPsQ0zbE+YjywwuHPoP+gHdp9HKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZTJhNGE0YjMtYmMzMS0z MWIxLTk0NGUtNGE4YzM4YjliM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALB5qAMBl2k8gF1V/1FxulXk8uUkMReWDMgDOPPgfFdbuY/sU32X IhU2qUof2fDt6/PBLZ5y0mP5qc6ZteUHfomxvhxX51pO2T8FsCOSSFsB+c7Go7ip HNXBkXp1u3A4l8Vsa1qsvpM9DCyEupy/cWIvWj/kMpQXfYf48UcKF6VZgQ9pKWB8 K7JS5WUoGsTmSGIJkiWB8FSO71yyifSICbq5jJrB7Y6tdfvFO7Tl6uDW7o/HEMnD FpGFwWKMsO2aCrRY2RCaUYg2rOfkaHq81pPHf2bPZHpSqoDZ0wCVYG7fCjTE4DXj Q7nkXtUufVrAbSEEv9+UX8OuubLAtNwRQao= -----END CERTIFICATE-----Generated at Sat Jun 6 08:51:15 2026 by rpki-client