$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa File: 3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json) Hash identifier: m7lOEdEiRW2nnjAEAL0HrltRh6qict8TQuDfcWvdtlw= Subject key identifier: 16:E9:59:CB:9E:73:B5:B2:DA:6B:CC:20:68:0E:2B:A0:B9:6D:98:C3 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584A3B7B00C7C005DDFDF1E78880 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 210645 IP address blocks: 2602:2c9:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:00:c7:c0:05:dd:fd:f1:e7:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=894ff6ba-00a5-45bb-b164-9382da1b6a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:97:e2:46:01:34:b8:33:99:ea:06:9d:45:40: c4:08:31:38:f2:ff:3c:47:b4:00:51:6c:aa:77:c9: 7d:75:e3:41:6b:5c:f4:97:1b:07:cc:22:96:19:97: 3e:74:56:84:ab:49:f8:f0:ba:ac:20:8f:45:42:01: 0e:98:ef:bf:0f:7a:5f:60:f7:dd:a8:a4:35:91:b0: c8:14:ca:44:aa:df:22:77:78:2e:42:3c:f1:00:c2: 82:db:0c:97:fb:44:59:99:df:7d:5c:91:23:7c:95: d8:72:27:c6:81:0c:9d:73:d6:13:8b:80:aa:ae:30: 0f:c3:cb:b5:24:95:ee:f1:48:83:80:ab:51:8d:13: cc:aa:6f:05:11:89:3b:65:a6:5b:0a:17:60:b9:ac: bb:7f:7b:da:b0:d5:49:f7:2d:2b:ab:7e:c6:66:1a: a8:bd:9e:95:83:cc:f2:e6:92:c5:65:35:1f:08:52: 8d:9b:1e:77:85:29:80:72:7c:57:ae:b5:2e:06:e4: 84:f0:cd:e6:f0:97:67:68:f6:40:0c:cb:80:e0:d5: 83:bf:ee:52:ff:a3:80:80:c9:45:4e:11:7c:66:f1: cc:6d:93:aa:4a:92:16:a3:73:ef:d0:29:c2:32:eb: 44:2f:0a:8b:a2:ca:bd:08:55:45:65:9c:87:b2:bd: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:59:CB:9E:73:B5:B2:DA:6B:CC:20:68:0E:2B:A0:B9:6D:98:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f6:68:b3:4a:c3:b9:56:51:9a:a2:57:65:a3:43:e8:cb:0e: 95:d0:a2:73:fe:e9:f3:b0:d7:79:8d:ab:82:6e:92:98:99:35: f0:4a:c4:38:2c:43:31:aa:c4:2a:fc:12:c8:96:74:83:8e:30: d4:a2:bf:98:a0:eb:0f:b3:ca:7a:db:05:e5:b7:2b:5a:07:34: 47:75:0c:82:53:7b:04:e1:b5:3a:2d:87:60:ca:3f:cd:ad:ec: 6f:2e:bc:40:ed:30:05:4b:a8:15:fe:df:6b:b8:d8:a1:3d:4f: 29:c6:94:2d:07:07:bd:4f:9c:77:09:ec:2c:83:6b:4b:31:81: 82:07:16:d9:33:46:8e:2b:ab:6d:d8:cb:b1:5a:a5:56:7d:6d: 2d:2f:07:51:a2:37:08:41:6c:58:f3:b3:48:0e:b4:ba:6c:4b: 9d:8b:c8:08:74:69:1e:17:06:72:47:a0:3a:ed:fe:b6:50:16: c3:19:16:16:bf:bc:ae:3f:10:42:c1:ac:35:76:fd:0e:0c:29: a8:46:9c:6c:57:c1:53:f1:df:61:4d:f1:56:92:2d:e0:89:1c: f3:44:31:5e:36:06:d0:3e:39:26:aa:96:68:dc:ff:c8:6d:8a: c3:70:d1:9a:51:a4:d7:e0:02:96:b4:a0:a9:20:c9:ea:22:10: a3:39:c1:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7ewDHwAXd/fHniIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ODk0ZmY2YmEtMDBhNS00NWJiLWIxNjQtOTM4MmRhMWI2YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65fiRgE0uDOZ6gadRUDECDE48v88R7QAUWyq d8l9deNBa1z0lxsHzCKWGZc+dFaEq0n48LqsII9FQgEOmO+/D3pfYPfdqKQ1kbDI FMpEqt8id3guQjzxAMKC2wyX+0RZmd99XJEjfJXYcifGgQydc9YTi4CqrjAPw8u1 JJXu8UiDgKtRjRPMqm8FEYk7ZaZbChdguay7f3vasNVJ9y0rq37GZhqovZ6Vg8zy 5pLFZTUfCFKNmx53hSmAcnxXrrUuBuSE8M3m8JdnaPZADMuA4NWDv+5S/6OAgMlF ThF8ZvHMbZOqSpIWo3Pv0CnCMutELwqLosq9CFVFZZyHsr0BowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbpWcuec7Wy2mvMIGgOK6C5bZjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvM2ZlZGU0Y2ItNGYyZS0z OGYyLWJiNmQtZGE3NGIxYzI3YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIn2aLNKw7lWUZqiV2WjQ+jLDpXQonP+6fOw13mNq4JukpiZNfBK xDgsQzGqxCr8EsiWdIOOMNSiv5ig6w+zynrbBeW3K1oHNEd1DIJTewThtToth2DK P82t7G8uvEDtMAVLqBX+32u42KE9TynGlC0HB71PnHcJ7CyDa0sxgYIHFtkzRo4r q23Yy7FapVZ9bS0vB1GiNwhBbFjzs0gOtLpsS52LyAh0aR4XBnJHoDrt/rZQFsMZ Fha/vK4/EELBrDV2/Q4MKahGnGxXwVPx32FN8VaSLeCJHPNEMV42BtA+OSaqlmjc /8htisNw0ZpRpNfgApa0oKkgyeoiEKM5wTE= -----END CERTIFICATE-----Generated at Mon Jun 30 13:59:35 2025 by rpki-client