$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/9023ce17-cd8d-33b7-bf93-922cb3d96c8a.roa File: 9023ce17-cd8d-33b7-bf93-922cb3d96c8a.roa (raw, json) Hash identifier: hUo/8pNHeNKmsTW7AHq87kGYlA+IXS2ZGCE9E4lfLuQ= Subject key identifier: CC:2B:24:1A:FF:68:56:B2:E2:EB:1C:CF:F9:3E:E1:67:15:FF:CD:21 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584E779A1883C950DFED5FC2E100 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/9023ce17-cd8d-33b7-bf93-922cb3d96c8a.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 44733 IP address blocks: 2602:2c9:fe0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:18:83:c9:50:df:ed:5f:c2:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=a3c8c9c0-9779-4fa5-b68b-cb10dc5593d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:9a:2a:ca:de:50:1e:98:b3:90:90:05:3a: dd:bb:1c:2f:4b:cb:18:0e:89:b8:96:c7:48:68:2b: 91:a4:35:d8:b5:2f:f2:af:3a:ec:75:8c:c2:10:71: 40:21:54:7d:f8:dc:9e:59:89:32:45:bd:b7:fd:e1: a4:b8:d1:24:72:cc:31:5b:22:25:7e:11:c8:00:3c: 7d:96:90:cd:21:3f:cc:a8:93:a2:31:37:f7:4c:91: c6:5c:de:59:6c:34:49:f9:04:e2:12:96:89:e3:9a: d0:c9:cd:97:6a:45:0d:5d:02:a8:1f:48:88:86:ba: 8c:1c:6b:23:0c:66:41:ba:f5:bf:2c:58:99:e9:a9: dd:e6:1e:2a:b1:21:ec:5f:2f:b1:8a:3a:d7:1b:61: 0c:0e:de:b9:98:91:67:23:8c:a9:55:37:c8:89:93: b7:3c:e5:46:82:a6:34:2c:89:fd:4b:3e:6b:7a:9c: 9c:b8:c5:f8:fd:dd:5f:76:3c:6f:2c:29:d6:e6:6d: 3c:1a:56:5f:32:7c:12:9c:79:4f:37:04:37:81:81: 6f:a3:db:de:53:3d:29:72:08:b7:15:9a:1d:c9:38: aa:21:84:e2:4a:b4:39:8e:f8:6d:01:6b:e3:61:82: 1a:7a:c7:66:bb:d4:16:49:de:91:d3:23:dd:72:76: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:24:1A:FF:68:56:B2:E2:EB:1C:CF:F9:3E:E1:67:15:FF:CD:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/9023ce17-cd8d-33b7-bf93-922cb3d96c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:fe0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:05:a1:1a:86:d7:3b:e2:7c:7e:23:ef:04:41:fb:63:0b:fe: b2:7b:1b:c1:17:81:37:e6:f5:c7:e5:74:6a:a2:d8:03:eb:92: 0d:12:1e:85:8f:4b:e2:d3:d2:81:84:ba:e4:86:a3:71:66:43: d5:9c:48:a2:f7:0e:80:80:b6:c9:d0:ae:75:43:af:7b:fc:dc: 1c:e7:90:37:a9:d2:81:85:fd:e1:6b:ef:14:ef:56:e5:da:28: 8c:fb:6a:b5:82:53:31:34:12:8c:28:55:0c:64:98:62:bd:a0: 5c:d9:48:57:bc:19:bb:51:e4:80:d8:2a:1b:d3:c6:04:fb:19: 37:a2:5a:6e:b7:1e:09:df:6b:52:7b:c4:f2:8f:85:bb:a6:9d: fe:e9:7f:4d:77:a9:40:eb:14:d4:33:1c:98:da:c5:98:71:34: 0a:81:ac:95:05:cf:90:23:31:aa:ee:65:c5:31:62:f5:c3:69: b1:db:66:f0:09:98:aa:27:92:11:95:a2:3f:10:37:13:e9:21: 6a:2f:c7:10:ec:83:af:4f:16:6b:34:5e:0f:8d:16:72:cb:8b: d2:4d:81:03:ce:c3:af:39:76:28:3b:a8:d5:e0:8f:22:97:3e: da:64:aa:af:fe:aa:be:34:f8:b5:7f:05:dc:86:28:e8:b9:2a: 84:c6:3a:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE53mhiDyVDf7V/C4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk YTNjOGM5YzAtOTc3OS00ZmE1LWI2OGItY2IxMGRjNTU5M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplyaKsreUB6Ys5CQBTrduxwvS8sYDom4lsdI aCuRpDXYtS/yrzrsdYzCEHFAIVR9+NyeWYkyRb23/eGkuNEkcswxWyIlfhHIADx9 lpDNIT/MqJOiMTf3TJHGXN5ZbDRJ+QTiEpaJ45rQyc2XakUNXQKoH0iIhrqMHGsj DGZBuvW/LFiZ6and5h4qsSHsXy+xijrXG2EMDt65mJFnI4ypVTfIiZO3POVGgqY0 LIn9Sz5repycuMX4/d1fdjxvLCnW5m08GlZfMnwSnHlPNwQ3gYFvo9veUz0pcgi3 FZodyTiqIYTiSrQ5jvhtAWvjYYIaesdmu9QWSd6R0yPdcnY7AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMwrJBr/aFay4uscz/k+4WcV/80hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvOTAyM2NlMTctY2Q4ZC0z M2I3LWJmOTMtOTIyY2IzZDk2YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICyQ/g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEFoRqG1zvifH4j7wRB+2ML/rJ7G8EXgTfm9cfldGqi2APrkg0S HoWPS+LT0oGEuuSGo3FmQ9WcSKL3DoCAtsnQrnVDr3v83BznkDep0oGF/eFr7xTv VuXaKIz7arWCUzE0EowoVQxkmGK9oFzZSFe8GbtR5IDYKhvTxgT7GTeiWm63Hgnf a1J7xPKPhbumnf7pf013qUDrFNQzHJjaxZhxNAqBrJUFz5AjMaruZcUxYvXDabHb ZvAJmKonkhGVoj8QNxPpIWovxxDsg69PFms0Xg+NFnLLi9JNgQPOw685dig7qNXg jyKXPtpkqq/+qr40+LV/BdyGKOi5KoTGOo8= -----END CERTIFICATE-----Generated at Fri Jul 24 04:41:27 2026 by rpki-client