$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa File: 3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa (raw, json) Hash identifier: jiSBY+H/0zGoHfst+m2u6taIyuMC2w2ZSLVgU0IzDQw= Subject key identifier: 7B:84:17:E1:50:0C:88:90:63:96:D7:58:A0:E2:54:25:1F:19:32:7E Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584DBD059FEB8FD3280DBBC2B300 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 210645 IP address blocks: 2602:2c9:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:9f:eb:8f:d3:28:0d:bb:c2:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=48118b32-83ca-4763-b5ef-514dab6260db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:6b:4d:67:79:ec:7e:20:62:18:96:08:dd: 08:5a:72:e0:9b:99:2f:ed:ad:1c:c8:6b:1d:44:b9: 9a:52:80:22:8c:ec:fe:42:df:2a:54:f3:46:32:11: 61:b6:34:f3:10:09:7f:64:a0:66:0a:e4:0b:8d:ef: 42:ba:62:bf:42:89:be:54:81:bd:25:42:ce:ca:6a: 77:a1:95:78:35:9b:8b:e7:36:52:8d:2e:b7:6e:fa: f6:53:2f:af:70:01:6e:97:b0:34:d8:97:17:4d:a5: ca:c1:9e:e0:fe:6f:4d:40:65:26:e3:25:75:ed:24: 7d:6d:a2:c7:39:98:ae:e1:65:65:80:8d:8f:14:e3: 7e:03:dc:25:25:af:25:9c:70:97:7d:d9:97:08:b7: d4:03:2b:eb:00:a8:05:e8:d9:95:d1:d9:83:98:1a: 92:22:2c:80:f6:ee:c3:87:ec:61:83:a0:60:ba:58: 3c:94:da:eb:62:01:05:75:51:9c:2d:ae:d5:c6:bd: f1:fc:5b:b7:c6:74:d8:06:dd:78:7c:9c:cd:4c:19: 55:96:ad:d6:76:b3:6a:51:e8:3e:26:e8:e5:84:a9: 4f:4f:f2:46:db:88:d2:fe:12:ca:98:ab:49:b5:f1: a0:40:60:d6:13:65:42:d7:44:7f:c3:12:84:e3:49: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:84:17:E1:50:0C:88:90:63:96:D7:58:A0:E2:54:25:1F:19:32:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/3fede4cb-4f2e-38f2-bb6d-da74b1c27a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c3:e2:f6:9a:a5:f7:ed:d2:3f:90:b6:15:12:43:72:43:f6: 09:d7:c8:df:73:66:12:4d:40:a7:ba:dc:1c:c7:2d:1c:cc:ef: b2:b3:4d:c2:54:9d:03:4a:3a:2f:17:81:ad:fa:b1:52:5e:ab: 0c:a6:7e:a3:5e:b3:4d:73:05:a9:9c:25:2e:09:ef:82:10:60: fa:64:88:cf:90:16:ee:6f:58:b1:0c:5e:86:f5:fc:60:e6:92: 94:a6:e7:87:0f:b6:8d:c1:2a:c8:5b:9a:0a:3c:9c:7f:49:0e: fe:47:b3:1e:9c:28:9c:84:07:47:5d:37:39:f9:8c:e5:ac:2f: 2c:30:60:e9:e4:21:18:8f:8b:c7:9a:a9:92:39:6f:37:fc:37: d3:09:4b:0f:c1:fd:7f:af:e0:66:95:36:4e:fe:52:09:1d:ba: 2d:45:c6:aa:7f:ce:92:01:fe:9c:84:71:1d:1a:a4:b5:45:1c: c3:74:a4:00:1b:70:42:41:2c:01:41:c9:84:80:3a:3d:e7:83: d6:0c:0d:03:27:96:69:d2:32:e6:a8:00:13:e0:09:45:0f:b0: c8:cc:9a:d6:c1:f0:4b:67:43:c6:9a:eb:54:7b:f0:16:bb:85: 29:40:a7:3d:09:b2:21:59:c6:35:d3:69:fc:00:15:96:86:f3: 41:1a:50:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29BZ/rj9MoDbvCswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NDgxMThiMzItODNjYS00NzYzLWI1ZWYtNTE0ZGFiNjI2MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup1rTWd57H4gYhiWCN0IWnLgm5kv7a0cyGsd RLmaUoAijOz+Qt8qVPNGMhFhtjTzEAl/ZKBmCuQLje9CumK/Qom+VIG9JULOymp3 oZV4NZuL5zZSjS63bvr2Uy+vcAFul7A02JcXTaXKwZ7g/m9NQGUm4yV17SR9baLH OZiu4WVlgI2PFON+A9wlJa8lnHCXfdmXCLfUAyvrAKgF6NmV0dmDmBqSIiyA9u7D h+xhg6Bgulg8lNrrYgEFdVGcLa7Vxr3x/Fu3xnTYBt14fJzNTBlVlq3WdrNqUeg+ JujlhKlPT/JG24jS/hLKmKtJtfGgQGDWE2VC10R/wxKE40lhpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHuEF+FQDIiQY5bXWKDiVCUfGTJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvM2ZlZGU0Y2ItNGYyZS0z OGYyLWJiNmQtZGE3NGIxYzI3YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA7D4vaapfft0j+QthUSQ3JD9gnXyN9zZhJNQKe63BzHLRzM77Kz TcJUnQNKOi8Xga36sVJeqwymfqNes01zBamcJS4J74IQYPpkiM+QFu5vWLEMXob1 /GDmkpSm54cPto3BKshbmgo8nH9JDv5Hsx6cKJyEB0ddNzn5jOWsLywwYOnkIRiP i8eaqZI5bzf8N9MJSw/B/X+v4GaVNk7+Ugkdui1Fxqp/zpIB/pyEcR0apLVFHMN0 pAAbcEJBLAFByYSAOj3ng9YMDQMnlmnSMuaoABPgCUUPsMjMmtbB8EtnQ8aa61R7 8Ba7hSlApz0JsiFZxjXTafwAFZaG80EaUIo= -----END CERTIFICATE-----Generated at Wed May 13 06:21:10 2026 by rpki-client