$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa File: 4e00c024-f493-3f70-9db1-bef788678325.roa (raw, json) Hash identifier: fNdDyLOXJgI976asVXk5Qakt5MxHPIgDTI/A4vXgDCI= Subject key identifier: 07:E0:59:F5:5B:C0:52:C5:DB:18:A9:EB:C4:32:1E:11:38:6F:59:A3 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584B1C36CC8B83825DB91F346580 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 210645 IP address blocks: 2602:2c9::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:cc:8b:83:82:5d:b9:1f:34:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e721e8cc-cec4-4613-908d-0f4af3d3ae89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:a1:b2:2a:b1:d8:dd:80:f6:75:1b:eb:fd: 51:51:12:6c:ff:51:69:0c:12:0f:66:a6:f3:b9:ec: 63:d4:ba:86:21:87:db:9b:62:86:de:4e:a6:4c:23: 4c:39:5b:87:ae:7b:4e:bf:c4:23:30:d3:08:42:54: e7:05:57:cb:ee:f8:7c:c6:a4:fe:e5:b6:37:f1:a9: 4a:e3:c2:74:49:d3:eb:1e:e0:f1:ff:61:91:06:6f: 51:5d:7a:7c:25:9d:0b:87:53:69:60:7d:67:b1:f2: 5e:7a:11:2a:8f:d0:6a:12:75:b5:79:43:85:99:80: 66:2e:fd:e9:b0:01:92:64:f1:79:d2:33:ce:cc:7f: a0:90:5b:6e:40:2f:9d:be:9f:0d:bf:6e:94:21:95: b7:7b:6e:7d:64:67:8e:af:74:33:81:b2:ea:91:b7: 2b:54:73:dc:be:63:13:70:e7:92:46:5f:8a:75:c2: 89:ce:3c:b5:cb:75:19:a9:4d:fa:e2:8a:08:9e:24: db:69:fc:98:d8:c8:2c:62:66:37:cc:d5:5a:77:2c: 7f:0e:47:bb:78:42:3c:2d:27:01:7a:8a:b7:5e:d8: 1c:8d:2d:66:2d:10:fd:8d:2c:c5:7c:bb:3b:e9:1d: c6:ab:99:0b:4e:f2:2a:05:92:80:91:de:88:3f:cc: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E0:59:F5:5B:C0:52:C5:DB:18:A9:EB:C4:32:1E:11:38:6F:59:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7d:60:59:c3:8c:3f:f6:95:37:1d:95:d3:c1:fe:22:97:21: 99:9e:b9:52:fe:6d:ba:36:6d:db:e4:b5:43:86:a6:65:f8:22: 7d:37:02:6c:98:10:d5:02:cd:08:32:0b:d6:7c:a0:de:99:83: 79:ee:46:30:07:b1:26:f0:f2:75:93:cb:f6:e2:30:36:25:ca: c3:99:fd:ce:3e:44:69:b5:f3:dd:1a:09:49:41:ba:b1:3d:c9: e5:a3:24:05:bc:32:7c:bc:f1:09:0b:84:5a:32:bc:fa:53:47: 96:f9:4b:26:01:a4:a1:f6:d6:7c:0a:9d:a8:c9:ea:85:1c:b3: 51:e1:b9:5c:de:b5:b8:8c:e1:ae:f4:67:1b:b8:62:0b:fc:80: 5c:20:8d:e5:0a:03:72:d1:31:df:65:b3:dd:00:f0:7e:d0:9f: db:32:31:3c:0c:36:ab:11:22:c1:0c:c0:5e:5d:76:8f:ee:d2: c7:75:52:d4:a1:a0:d6:ab:6c:68:55:b9:56:aa:43:5c:1c:92: 98:7a:02:3c:2e:45:e0:cd:55:67:38:32:e5:05:fe:42:64:73: 77:83:35:1c:ba:1c:d1:39:06:e1:ea:91:8a:e7:bd:a1:eb:03: 4f:00:fa:c1:8a:bd:33:9b:26:cf:39:71:98:ff:d2:be:c8:8e: aa:ec:4e:4e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEscNsyLg4JduR80ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTcyMWU4Y2MtY2VjNC00NjEzLTkwOGQtMGY0YWYzZDNhZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNShsiqx2N2A9nUb6/1RURJs/1FpDBIPZqbz uexj1LqGIYfbm2KG3k6mTCNMOVuHrntOv8QjMNMIQlTnBVfL7vh8xqT+5bY38alK 48J0SdPrHuDx/2GRBm9RXXp8JZ0Lh1NpYH1nsfJeehEqj9BqEnW1eUOFmYBmLv3p sAGSZPF50jPOzH+gkFtuQC+dvp8Nv26UIZW3e259ZGeOr3QzgbLqkbcrVHPcvmMT cOeSRl+KdcKJzjy1y3UZqU364ooIniTbafyY2MgsYmY3zNVadyx/Dke7eEI8LScB eoq3XtgcjS1mLRD9jSzFfLs76R3Gq5kLTvIqBZKAkd6IP8y/YwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAfgWfVbwFLF2xip68QyHhE4b1mjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNGUwMGMwMjQtZjQ5My0z ZjcwLTlkYjEtYmVmNzg4Njc4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgICyQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAC31gWcOMP/aVNx2V08H+IpchmZ65Uv5tujZt2+S1Q4amZfgifTcC bJgQ1QLNCDIL1nyg3pmDee5GMAexJvDydZPL9uIwNiXKw5n9zj5EabXz3RoJSUG6 sT3J5aMkBbwyfLzxCQuEWjK8+lNHlvlLJgGkofbWfAqdqMnqhRyzUeG5XN61uIzh rvRnG7hiC/yAXCCN5QoDctEx32Wz3QDwftCf2zIxPAw2qxEiwQzAXl12j+7Sx3VS 1KGg1qtsaFW5VqpDXBySmHoCPC5F4M1VZzgy5QX+QmRzd4M1HLoc0TkG4eqRiue9 oesDTwD6wYq9M5smzzlxmP/SvsiOquxOTg== -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:41 2025 by rpki-client