$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa File: 56c386da-86c1-3818-b3b3-0d3250bfb54f.roa (raw, json) Hash identifier: HETBZyPkjsbUW2z1Qv67LZKeLhnTnIEYIPVS/+tqkSk= Subject key identifier: EE:99:7D:EB:52:EE:2E:4D:1B:DF:4D:D6:F0:E3:11:DB:23:C9:57:B2 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584A3B7AFF2396833E26AFCC9D00 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 215909 IP address blocks: 2602:2c9:ff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ff:23:96:83:3e:26:af:cc:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=b3aeb8fb-c375-4097-a48b-deab77a43d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8e:01:cc:ff:59:0b:9f:0e:c1:1d:27:be:1f: 64:68:00:e9:b8:53:6c:86:b2:9a:fa:d0:be:c3:e5: 60:9d:1b:54:7b:86:fc:00:3d:8d:78:3c:92:3a:d0: b2:54:5f:81:6e:4b:35:26:3f:66:2c:44:55:df:c3: 90:b6:d4:1a:12:a2:cb:b5:0c:f9:12:b7:f6:b2:f3: a4:d1:cb:62:12:7a:cb:db:80:c3:22:3a:03:54:88: 3e:9a:58:30:34:82:c0:1d:d8:92:11:04:89:c2:d9: ab:29:2c:21:75:56:ff:28:f0:91:4d:22:49:28:4c: 29:c0:39:03:af:4c:14:e0:36:76:77:12:07:58:18: a0:e7:be:40:cd:ad:30:fc:b0:ac:5a:45:6c:a4:bf: a5:0c:38:f2:aa:11:9c:f4:ab:a5:48:be:50:57:ab: 5b:dc:0e:49:7d:e2:8b:0c:71:d7:aa:b9:80:21:6a: c9:8a:d8:aa:57:51:34:2a:40:b7:6d:f4:b5:47:21: cc:81:66:17:70:76:d0:30:6a:cd:6f:65:dd:e5:bb: 79:5a:14:5a:e6:9c:36:34:7f:7c:36:ca:34:e8:2c: 9d:84:4c:fe:65:90:21:53:08:1c:ce:03:98:26:00: ab:28:b3:f4:3f:40:27:53:59:d7:f0:d4:cb:4e:29: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:99:7D:EB:52:EE:2E:4D:1B:DF:4D:D6:F0:E3:11:DB:23:C9:57:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/56c386da-86c1-3818-b3b3-0d3250bfb54f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:93:e7:62:b0:b9:04:02:23:dd:f2:d5:e0:39:1d:49:3d:26: 8f:53:48:9b:8e:6d:44:fc:8d:32:b4:4b:c5:f9:ef:a6:aa:62: c0:23:53:4f:92:bb:e1:fd:c2:ba:54:da:ae:6d:2e:20:b9:f5: ca:dd:88:e5:ee:b5:e2:46:10:cb:12:87:28:8d:74:35:de:be: f6:16:aa:91:61:a3:e2:7a:b1:4f:b3:cc:ec:41:20:19:7c:97: c6:cf:b4:7a:36:4f:25:f7:52:00:23:6c:b7:09:f9:5e:71:f5: b9:50:c9:ee:02:2a:6b:8f:e5:0a:c0:6a:50:70:30:6e:1d:bb: eb:41:4a:4a:17:11:98:aa:b9:21:fe:ae:61:17:2c:d1:60:cf: ca:96:47:e5:c1:f0:0e:84:84:33:98:63:33:e1:c6:bb:e8:a2: 3d:86:a6:b1:2e:64:5d:03:c4:78:3e:6a:39:ae:0a:07:49:a3: ca:39:5d:21:27:b6:61:05:7e:ae:ba:4b:95:4d:d7:63:a7:69: 4e:84:40:ad:83:57:37:47:4b:ae:15:72:36:8f:6d:81:65:7e: 45:3b:b0:b0:03:36:f3:ef:d0:d5:2a:e2:f5:57:ea:e3:1c:6a: 95:0a:38:e6:7d:5f:65:0e:fe:29:df:88:1f:ca:eb:aa:8e:2f: ff:d8:e4:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7ev8jloM+Jq/MnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YjNhZWI4ZmItYzM3NS00MDk3LWE0OGItZGVhYjc3YTQzZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo4BzP9ZC58OwR0nvh9kaADpuFNshrKa+tC+ w+VgnRtUe4b8AD2NeDySOtCyVF+Bbks1Jj9mLERV38OQttQaEqLLtQz5Erf2svOk 0ctiEnrL24DDIjoDVIg+mlgwNILAHdiSEQSJwtmrKSwhdVb/KPCRTSJJKEwpwDkD r0wU4DZ2dxIHWBig575Aza0w/LCsWkVspL+lDDjyqhGc9KulSL5QV6tb3A5JfeKL DHHXqrmAIWrJitiqV1E0KkC3bfS1RyHMgWYXcHbQMGrNb2Xd5bt5WhRa5pw2NH98 Nso06CydhEz+ZZAhUwgczgOYJgCrKLP0P0AnU1nX8NTLTim0RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6ZfetS7i5NG99N1vDjEdsjyVeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNTZjMzg2ZGEtODZjMS0z ODE4LWIzYjMtMGQzMjUwYmZiNTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICyQ/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGyT52KwuQQCI93y1eA5HUk9Jo9TSJuObUT8jTK0S8X576aqYsAj U0+Su+H9wrpU2q5tLiC59crdiOXuteJGEMsShyiNdDXevvYWqpFho+J6sU+zzOxB IBl8l8bPtHo2TyX3UgAjbLcJ+V5x9blQye4CKmuP5QrAalBwMG4du+tBSkoXEZiq uSH+rmEXLNFgz8qWR+XB8A6EhDOYYzPhxrvooj2GprEuZF0DxHg+ajmuCgdJo8o5 XSEntmEFfq66S5VN12OnaU6EQK2DVzdHS64VcjaPbYFlfkU7sLADNvPv0NUq4vVX 6uMcapUKOOZ9X2UO/infiB/K66qOL//Y5EE= -----END CERTIFICATE-----Generated at Tue Jul 1 02:44:08 2025 by rpki-client