$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa File: 6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa (raw, json) Hash identifier: /ryrJt5OzzPvgxiXeDk0SW005bQTSeYLaQ+E3dxtyY0= Subject key identifier: C5:38:E2:94:D7:A2:B4:11:F5:A1:C7:45:E1:85:C2:1A:94:12:EE:98 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584D44FA44AD9E721C765E21D730 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 210645 IP address blocks: 2602:2c9:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:44:ad:9e:72:1c:76:5e:21:d7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1f398333-21bf-47a6-a243-dd33ab6075cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:41:ad:81:ec:0c:d8:7b:56:71:fd:38:33: c9:6f:51:2f:12:c2:62:5b:4a:f7:c2:34:62:22:14: 1a:0a:c5:15:48:1b:cf:95:a4:56:15:1c:6b:df:d5: 7c:65:32:b0:c8:c8:33:2e:0c:73:9d:b5:da:d6:de: 7c:84:9e:49:80:9f:32:d7:58:e5:f6:68:19:c4:b7: 9c:ff:da:9e:44:d9:d1:06:93:0f:30:29:8d:0f:03: bd:44:f6:bb:d4:fe:48:21:2d:a8:75:fd:71:95:84: aa:1e:67:da:c5:68:b4:04:86:bc:66:58:d1:0a:b6: 80:bd:41:bb:1d:2d:a5:f4:6b:a6:35:55:8d:b5:af: b2:32:1d:bb:b3:87:cf:c8:9a:3d:9d:6a:6f:52:0e: db:ce:af:e1:2d:e1:46:88:0d:34:f3:ab:5a:9c:36: 5c:0f:74:c8:30:25:88:b1:8e:88:d0:dc:dc:20:09: f3:e4:0c:3e:14:61:0b:3e:99:3e:a1:77:13:f4:7c: 29:28:66:b5:58:2c:4a:54:98:ec:6b:3e:8b:b1:f3: 76:d2:b6:11:1a:47:66:d6:32:e3:b1:35:fd:02:97: d0:fb:98:d4:af:8d:71:7e:61:dd:4e:7d:5d:d3:87: ea:db:fb:97:cd:07:93:a5:8f:8b:03:c6:ef:75:49: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:38:E2:94:D7:A2:B4:11:F5:A1:C7:45:E1:85:C2:1A:94:12:EE:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/6438b4f0-6457-3b4a-add9-78b5ec57b12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3b:1c:38:7a:ad:16:03:7d:6e:f1:2e:cd:30:0f:42:d8:fd: db:c2:06:56:9e:1f:c0:4b:2e:8f:1f:9f:10:85:8d:3e:a4:e1: b2:16:27:63:b5:51:fe:d7:95:79:47:ab:76:61:0d:9f:59:ff: 10:d7:a2:c9:a7:fa:8f:c1:e9:d3:2f:83:18:91:1d:66:ba:fe: 3f:d8:15:71:e4:36:35:0b:e7:e9:d1:03:4d:48:a1:5f:d9:19: 0d:d5:34:68:65:19:c9:e0:fd:a1:f9:73:83:a2:22:15:91:2a: 65:b3:7c:fc:00:03:6f:f8:38:ff:9f:8c:b6:03:d9:f3:9c:d7: 52:86:fc:cb:3e:8d:ff:57:56:56:93:fe:df:ce:ca:bd:ba:3d: 6c:98:4c:65:4b:41:fb:ca:68:a9:23:e3:06:4a:b4:81:29:93: ff:a4:02:d5:e6:30:f0:24:bc:63:04:2d:29:b3:71:0d:ff:8b: 80:ea:65:37:e1:42:d3:30:0e:a5:d3:a0:39:0a:9d:c9:13:93: 40:da:e8:dd:17:95:c0:c1:36:4e:95:65:e6:08:0e:e6:bb:ee: 3e:67:0c:f3:c4:ad:ed:c3:af:23:6a:38:6c:72:77:75:fd:03: 0f:d0:c4:17:2f:a0:c6:64:89:61:57:12:ee:2d:c5:cf:b3:d1: 84:f5:59:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+kStnnIcdl4h1zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MWYzOTgzMzMtMjFiZi00N2E2LWEyNDMtZGQzM2FiNjA3NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHlBrYHsDNh7VnH9ODPJb1EvEsJiW0r3wjRi IhQaCsUVSBvPlaRWFRxr39V8ZTKwyMgzLgxznbXa1t58hJ5JgJ8y11jl9mgZxLec /9qeRNnRBpMPMCmNDwO9RPa71P5IIS2odf1xlYSqHmfaxWi0BIa8ZljRCraAvUG7 HS2l9GumNVWNta+yMh27s4fPyJo9nWpvUg7bzq/hLeFGiA0086tanDZcD3TIMCWI sY6I0NzcIAnz5Aw+FGELPpk+oXcT9HwpKGa1WCxKVJjsaz6LsfN20rYRGkdm1jLj sTX9ApfQ+5jUr41xfmHdTn1d04fq2/uXzQeTpY+LA8bvdUnU+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMU44pTXorQR9aHHReGFwhqUEu6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNjQzOGI0ZjAtNjQ1Ny0z YjRhLWFkZDktNzhiNWVjNTdiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQ7HDh6rRYDfW7xLs0wD0LY/dvCBlaeH8BLLo8fnxCFjT6k4bIW J2O1Uf7XlXlHq3ZhDZ9Z/xDXosmn+o/B6dMvgxiRHWa6/j/YFXHkNjUL5+nRA01I oV/ZGQ3VNGhlGcng/aH5c4OiIhWRKmWzfPwAA2/4OP+fjLYD2fOc11KG/Ms+jf9X VlaT/t/Oyr26PWyYTGVLQfvKaKkj4wZKtIEpk/+kAtXmMPAkvGMELSmzcQ3/i4Dq ZTfhQtMwDqXToDkKnckTk0Da6N0XlcDBNk6VZeYIDua77j5nDPPEre3DryNqOGxy d3X9Aw/QxBcvoMZkiWFXEu4txc+z0YT1Wdc= -----END CERTIFICATE-----Generated at Wed Mar 25 21:30:42 2026 by rpki-client