$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa File: 4e00c024-f493-3f70-9db1-bef788678325.roa (raw, json) Hash identifier: xxwhA1f0SL3uXVXP7SptHV6aQbGi21jIPoG1+fzOh9Y= Subject key identifier: DC:B3:75:8F:2A:2D:2A:1F:9B:56:2C:3C:41:BE:4C:81:DA:53:A1:9A Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584F3FAD3EF8137B21E8889F0380 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 210645 IP address blocks: 2602:2c9::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3e:f8:13:7b:21:e8:88:9f:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=051673e9-82c5-4d54-a97e-5fcd9d99eded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:3e:70:93:2c:69:66:1c:57:71:4e:51:9f: e0:d2:c1:1a:ad:d2:aa:9c:c6:ff:a5:73:58:46:54: 79:4d:6b:14:e6:c6:e3:51:10:8f:5d:8d:87:d5:bc: dc:4b:43:89:cd:c6:8a:1e:20:53:a4:9f:c3:e8:9c: 5e:3c:4d:8f:9b:54:ff:fc:51:7b:3e:41:2c:90:59: 2f:52:4a:f4:41:ff:9e:f3:0d:bd:0c:15:04:38:63: 8a:23:6e:84:80:ae:5c:c8:89:d3:86:78:79:bd:8b: 2c:30:54:06:a1:84:9c:da:fd:99:52:a3:62:e1:0c: b7:f7:98:c8:c2:de:c3:b9:76:14:81:46:3f:d0:05: f8:fb:ff:77:16:e0:e6:49:54:80:51:8d:53:f4:0e: 5c:f3:45:9c:91:63:26:e9:70:a9:15:0c:90:cf:f7: 67:6b:ce:e1:c5:16:5c:e3:f5:89:0d:5d:1f:96:d2: 33:e1:bb:b6:d7:39:6f:55:9a:1e:76:89:27:a7:8c: a2:1f:cc:07:67:3d:aa:84:7a:5a:71:5a:ac:6e:99: 6d:f3:1a:82:ba:89:1a:72:15:35:e5:07:d7:14:92: 24:0d:43:36:4d:55:6c:81:e8:c9:c9:70:61:0b:96: 6f:1e:77:a0:2d:ec:1b:76:a2:0f:1d:ca:4b:5d:14: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B3:75:8F:2A:2D:2A:1F:9B:56:2C:3C:41:BE:4C:81:DA:53:A1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:70:3d:67:d1:d3:50:34:56:f8:f2:6b:2a:3a:f7:cb:19:24: 42:f7:11:a4:96:4d:b1:27:e0:ea:d7:8e:f5:21:79:9a:25:17: 62:e6:35:7e:9e:5c:78:b7:28:24:d1:48:19:36:bb:b5:73:be: b2:5c:3f:56:62:6f:5c:69:d4:33:db:64:a8:b3:82:06:26:92: cc:93:65:5a:ff:15:86:72:06:43:ef:ca:d3:27:ef:f1:ef:be: ba:f5:12:bf:51:75:db:5e:9b:dd:52:40:35:1b:1b:b3:49:79: b5:d6:5e:98:a5:f0:e5:3b:ad:04:92:9e:e1:5a:86:59:9f:23: 9d:5a:f7:09:2f:70:82:76:58:10:60:f3:54:22:85:a7:46:2d: 08:fe:81:56:ed:13:db:50:cc:c3:65:da:48:05:50:71:25:1b: b9:68:1f:53:2a:b0:39:cd:f7:15:25:df:60:b0:2a:2b:fe:17: 8a:5c:08:ee:f1:7b:e0:3a:5e:1c:91:3d:7d:28:b0:f5:a4:5d: 49:be:05:e0:0e:86:34:0f:0f:78:22:c4:a1:d7:4b:31:54:82: 46:4b:88:0d:3c:64:b7:4a:34:95:b8:16:d6:87:cf:8a:66:41: 19:69:39:b1:18:ef:b3:7b:f2:eb:63:3b:d6:9e:65:b9:10:a8: e0:3e:aa:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8/rT74E3sh6IifA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDUxNjczZTktODJjNS00ZDU0LWE5N2UtNWZjZDlkOTllZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO4+cJMsaWYcV3FOUZ/g0sEardKqnMb/pXNY RlR5TWsU5sbjURCPXY2H1bzcS0OJzcaKHiBTpJ/D6JxePE2Pm1T//FF7PkEskFkv Ukr0Qf+e8w29DBUEOGOKI26EgK5cyInThnh5vYssMFQGoYSc2v2ZUqNi4Qy395jI wt7DuXYUgUY/0AX4+/93FuDmSVSAUY1T9A5c80WckWMm6XCpFQyQz/dna87hxRZc 4/WJDV0fltIz4bu21zlvVZoedoknp4yiH8wHZz2qhHpacVqsbplt8xqCuokachU1 5QfXFJIkDUM2TVVsgejJyXBhC5ZvHnegLewbdqIPHcpLXRTLDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNyzdY8qLSofm1YsPEG+TIHaU6GaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNGUwMGMwMjQtZjQ5My0z ZjcwLTlkYjEtYmVmNzg4Njc4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgICyQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkHA9Z9HTUDRW+PJrKjr3yxkkQvcRpJZNsSfg6teO9SF5miUXYuY1 fp5ceLcoJNFIGTa7tXO+slw/VmJvXGnUM9tkqLOCBiaSzJNlWv8VhnIGQ+/K0yfv 8e++uvUSv1F1216b3VJANRsbs0l5tdZemKXw5TutBJKe4VqGWZ8jnVr3CS9wgnZY EGDzVCKFp0YtCP6BVu0T21DMw2XaSAVQcSUbuWgfUyqwOc33FSXfYLAqK/4XilwI 7vF74DpeHJE9fSiw9aRdSb4F4A6GNA8PeCLEoddLMVSCRkuIDTxkt0o0lbgW1ofP imZBGWk5sRjvs3vy62M71p5luRCo4D6q8g== -----END CERTIFICATE-----Generated at Thu Oct 8 16:51:23 2026 by rpki-client