$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa File: e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa (raw, json) Hash identifier: cIqw/FWfAGm6YdHc1tqQmI3Aqd0bCfv5lzmPaCg5KYI= Subject key identifier: BA:DC:53:C1:E3:C3:12:F3:E9:B5:36:95:89:74:DD:66:FB:0D:FA:D2 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584EA79655406D3C713C096C6480 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 55116 IP address blocks: 2602:2c9:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:55:40:6d:3c:71:3c:09:6c:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b323c9db-e794-4969-a323-b30799186224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:66:f3:ee:c1:6e:73:e7:1e:aa:e2:7d:d3: e3:e1:b9:6b:7e:dc:c2:e9:cf:e0:17:43:ee:7e:a2: e2:b7:36:2f:c9:9d:21:0a:6e:85:90:a4:2a:1f:7a: 2c:a0:64:4e:33:99:68:45:d6:6a:57:7a:9a:2b:6c: 22:9c:02:37:0a:c5:12:fb:51:5f:2e:b4:b8:b9:4e: fe:68:c1:b4:4d:92:58:41:89:55:70:43:60:86:32: a7:e4:86:64:16:a8:f6:9a:b7:bf:eb:5c:91:20:e2: 12:ed:42:a6:fe:55:b4:b8:2a:6c:99:64:e0:7a:2b: af:d1:eb:f2:68:ae:65:b0:4d:0b:48:ef:8d:28:2e: 6b:88:d7:c3:5c:bd:4d:31:ea:c5:d0:b7:d9:21:e2: f2:ba:c1:bb:c0:73:8f:42:95:94:e7:88:8f:c6:30: b0:9a:46:b7:12:88:57:04:3e:27:ea:20:7b:1b:c9: 6a:34:2d:88:96:ae:88:7e:49:63:d7:95:ff:4c:59: e2:ce:70:bf:09:fc:84:00:cd:65:19:2a:0a:90:34: 2b:f5:6e:5c:58:ed:55:a2:5f:a6:0b:74:e3:8a:c9: 5d:8b:14:20:b4:06:29:8a:fb:00:7b:8e:6c:a6:c4: 38:75:3f:91:3a:a4:a2:6d:ec:50:a8:fc:eb:08:ae: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DC:53:C1:E3:C3:12:F3:E9:B5:36:95:89:74:DD:66:FB:0D:FA:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2a:ab:d8:9b:e4:99:01:4c:97:2e:bd:23:97:f4:45:6a:2f: a3:98:74:2a:eb:70:10:97:9b:d5:f9:e8:07:a7:07:89:b9:4f: 71:82:dc:b9:4d:92:83:c6:3a:d0:54:70:ba:8c:f7:07:1e:44: 36:9c:d0:2f:c6:1a:95:85:cb:b3:17:d0:50:0a:1d:1e:88:24: d2:3f:08:a7:26:b4:c6:d6:63:90:d0:12:63:df:15:f8:c1:99: 8f:76:35:0a:a3:64:fc:ce:15:35:af:65:b6:d4:1d:04:39:43: 3d:2b:80:3f:09:a6:be:83:dc:71:63:a6:c5:0d:ce:de:02:54: f0:72:66:e4:42:7e:24:d3:4c:74:4f:76:59:54:01:a7:93:e2: ef:7c:da:b1:92:6c:2c:37:77:c5:72:5d:f9:94:6f:50:9e:79: 49:7b:fa:b4:d6:a9:c8:ce:8a:b8:ea:ca:d5:4a:85:b0:10:10: fc:86:ba:1d:61:91:4c:f1:94:38:fb:2b:1f:b7:cb:b2:9c:55: 07:3b:f1:20:62:e5:2c:d4:d0:60:ee:aa:63:e0:70:50:f3:48: f3:c1:32:da:5c:91:b5:ac:ae:5d:6c:7e:79:40:e3:38:8f:48: d5:86:fa:fc:1d:b1:f0:70:47:05:8e:aa:ff:d9:4f:ee:d8:3b: 5c:df:02:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nllVAbTxxPAlsZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjMyM2M5ZGItZTc5NC00OTY5LWEzMjMtYjMwNzk5MTg2MjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXNm8+7BbnPnHqrifdPj4blrftzC6c/gF0Pu fqLitzYvyZ0hCm6FkKQqH3osoGROM5loRdZqV3qaK2winAI3CsUS+1FfLrS4uU7+ aMG0TZJYQYlVcENghjKn5IZkFqj2mre/61yRIOIS7UKm/lW0uCpsmWTgeiuv0evy aK5lsE0LSO+NKC5riNfDXL1NMerF0LfZIeLyusG7wHOPQpWU54iPxjCwmka3EohX BD4n6iB7G8lqNC2Ilq6Ifklj15X/TFniznC/CfyEAM1lGSoKkDQr9W5cWO1Vol+m C3TjisldixQgtAYpivsAe45spsQ4dT+ROqSibexQqPzrCK4KZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLrcU8HjwxLz6bU2lYl03Wb7DfrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZTJhNGE0YjMtYmMzMS0z MWIxLTk0NGUtNGE4YzM4YjliM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMqq9ib5JkBTJcuvSOX9EVqL6OYdCrrcBCXm9X56AenB4m5T3GC 3LlNkoPGOtBUcLqM9wceRDac0C/GGpWFy7MX0FAKHR6IJNI/CKcmtMbWY5DQEmPf FfjBmY92NQqjZPzOFTWvZbbUHQQ5Qz0rgD8Jpr6D3HFjpsUNzt4CVPByZuRCfiTT THRPdllUAaeT4u982rGSbCw3d8VyXfmUb1CeeUl7+rTWqcjOirjqytVKhbAQEPyG uh1hkUzxlDj7Kx+3y7KcVQc78SBi5SzU0GDuqmPgcFDzSPPBMtpckbWsrl1sfnlA 4ziPSNWG+vwdsfBwRwWOqv/ZT+7YO1zfAg0= -----END CERTIFICATE-----Generated at Sat Sep 5 07:13:45 2026 by rpki-client