$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa File: cffa80ce-dddf-3206-be5e-b60edcafd97d.roa (raw, json) Hash identifier: 1F9gP9ONqCRmApKs8HWa9i3A7OHrDx8TSWjNxi3sQeo= Subject key identifier: AE:91:EF:1D:8E:FC:2D:4E:27:45:E4:0E:85:53:F9:61:0C:BD:B9:05 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584B84E78174894B808E154F9080 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 210645 IP address blocks: 2602:2c9:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:81:74:89:4b:80:8e:15:4f:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b81ab3d2-fd2d-4287-a647-ba3b367369a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:ab:fd:9f:7c:99:27:bc:7a:c8:f3:95:6c: b8:17:bb:64:9f:ac:47:dd:3e:93:37:b7:2b:7c:ac: ac:b5:74:b7:59:fd:0f:d4:95:dc:b7:66:e5:94:87: 94:0d:36:07:50:b8:04:14:d2:ac:c6:91:20:0b:c3: 6f:34:34:a3:85:aa:9c:be:a7:da:52:41:ef:88:09: 15:87:3c:48:01:53:97:81:f4:82:8a:76:a9:bb:3d: 0c:c5:f0:6f:72:fa:76:3c:4b:76:f7:2e:38:8c:b7: 7f:c8:36:0d:0f:d8:33:b2:48:1f:93:ad:87:8f:6f: 5a:45:72:5f:dc:d2:3b:72:5c:06:b3:1a:93:da:31: 96:a2:12:a7:a4:f6:86:63:0a:08:7f:88:61:45:0a: a7:4a:7f:61:02:a9:0f:2e:52:37:be:42:5a:c7:b9: 46:79:f1:15:87:97:a4:49:5d:7c:5e:ad:e1:20:19: d7:b4:a1:80:95:f8:6b:24:7a:39:3c:16:68:ef:61: 5f:de:be:41:fe:21:54:e5:cf:20:58:56:46:d4:9d: c5:25:ee:b2:41:20:9c:fb:40:fa:70:c0:a0:57:b0: 13:e2:cd:5f:5c:b6:14:3f:58:a1:d1:d6:e6:35:39: aa:e5:6a:f3:90:e7:b0:63:05:23:f7:e2:40:0f:ec: 7b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:91:EF:1D:8E:FC:2D:4E:27:45:E4:0E:85:53:F9:61:0C:BD:B9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:09:6a:ed:07:d4:68:29:60:c0:a0:c9:4e:9a:01:9b:f5:a2: 06:df:79:9a:28:2f:09:68:36:dd:e9:80:67:48:95:2f:0e:0d: fb:51:c4:13:8c:81:5c:29:6a:4b:e6:9a:f1:90:b3:0a:aa:82: 34:07:ea:20:ec:ef:9b:5a:b1:7b:28:3d:d4:a8:3b:1d:76:68: 4b:56:00:38:2e:d3:23:42:7e:be:7f:bf:3e:c7:81:ae:38:5c: 1e:c4:c0:a3:3e:a0:c3:34:36:c9:25:b4:e7:80:f5:bf:ff:20: 93:53:89:9e:6f:27:93:a9:93:65:97:60:06:28:35:71:8b:54: fe:c7:55:f1:5d:8f:97:7a:72:5b:d2:ef:5b:a5:a2:f0:16:e0: 35:cb:2a:f5:af:f1:68:71:21:16:c6:a6:63:4a:b7:82:94:14: 44:10:7f:26:48:6d:ae:cc:b2:ed:15:6c:ce:0d:66:c8:11:e2: 1d:5e:70:b8:a2:41:1e:89:c0:03:ce:f8:2e:a4:ea:11:3c:6f: 7e:77:48:68:2c:dc:51:18:d5:b7:9a:89:57:2d:9f:81:f2:47: b3:bf:b7:21:ec:6f:85:71:57:cf:91:c5:90:a9:e2:95:bc:b0: 63:7f:a0:67:29:3f:63:9d:d1:63:38:c1:92:6b:3b:42:2b:55: bc:5f:c6:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuE54F0iUuAjhVPkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YjgxYWIzZDItZmQyZC00Mjg3LWE2NDctYmEzYjM2NzM2OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyir/Z98mSe8esjzlWy4F7tkn6xH3T6TN7cr fKystXS3Wf0P1JXct2bllIeUDTYHULgEFNKsxpEgC8NvNDSjhaqcvqfaUkHviAkV hzxIAVOXgfSCinapuz0MxfBvcvp2PEt29y44jLd/yDYND9gzskgfk62Hj29aRXJf 3NI7clwGsxqT2jGWohKnpPaGYwoIf4hhRQqnSn9hAqkPLlI3vkJax7lGefEVh5ek SV18Xq3hIBnXtKGAlfhrJHo5PBZo72Ff3r5B/iFU5c8gWFZG1J3FJe6yQSCc+0D6 cMCgV7AT4s1fXLYUP1ih0dbmNTmq5WrzkOewYwUj9+JAD+x7wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6R7x2O/C1OJ0XkDoVT+WEMvbkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvY2ZmYTgwY2UtZGRkZi0z MjA2LWJlNWUtYjYwZWRjYWZkOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMJau0H1GgpYMCgyU6aAZv1ogbfeZooLwloNt3pgGdIlS8ODftR xBOMgVwpakvmmvGQswqqgjQH6iDs75tasXsoPdSoOx12aEtWADgu0yNCfr5/vz7H ga44XB7EwKM+oMM0NskltOeA9b//IJNTiZ5vJ5Opk2WXYAYoNXGLVP7HVfFdj5d6 clvS71ulovAW4DXLKvWv8WhxIRbGpmNKt4KUFEQQfyZIba7Msu0VbM4NZsgR4h1e cLiiQR6JwAPO+C6k6hE8b353SGgs3FEY1beaiVctn4HyR7O/tyHsb4VxV8+RxZCp 4pW8sGN/oGcpP2Od0WM4wZJrO0IrVbxfxg8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:59 2025 by rpki-client