$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa File: cffa80ce-dddf-3206-be5e-b60edcafd97d.roa (raw, json) Hash identifier: CiQBpBiidsRtPK8+To8xCwvuwS+4Hu7teNtwlmls/kI= Subject key identifier: A0:1F:7A:A2:0F:AA:17:83:B3:20:36:EA:CF:E9:FC:DF:0E:09:8D:06 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584D44FA44976F3CFBB5CFC69600 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 210645 IP address blocks: 2602:2c9:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:44:97:6f:3c:fb:b5:cf:c6:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=aa3338dc-7cba-445f-8114-5429223c4d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:fc:b7:29:d3:7d:1d:53:9a:20:11:33:39: 96:92:97:05:ae:fc:f1:42:6e:1a:02:4c:19:36:c8: 08:29:a7:a0:55:65:0f:15:41:56:7d:a4:95:10:39: 84:22:9f:cb:ef:62:e2:a6:c2:6e:df:57:50:17:fd: b9:d3:57:66:23:f4:df:a3:5c:83:19:dc:ae:f3:5b: 73:28:43:8e:0b:11:0f:d1:7b:7b:e2:6c:55:db:55: d9:69:32:4d:ba:fb:1a:3e:ec:59:dd:9f:e6:44:01: 4c:5b:82:a7:36:9f:8d:ac:16:71:41:8e:86:5b:1c: 3e:ce:4b:e7:2b:16:0c:09:33:a2:2b:fd:3a:22:55: 33:37:7a:87:45:ef:07:cf:cb:10:d6:6c:63:e5:e4: b8:cf:a8:c2:03:cd:bf:f8:3b:71:10:8b:d8:4d:24: c3:5e:38:5d:17:d8:c7:1b:b3:2a:ec:d1:32:80:03: 5f:71:fc:f1:fb:06:18:72:8b:68:2a:e2:32:00:fd: 49:84:f0:d4:23:67:44:b0:8b:01:d7:4f:07:cf:05: e7:4b:43:8a:bd:4a:2d:eb:ea:7a:da:d9:e0:76:3f: 75:12:3f:7a:fe:7d:b9:41:5b:ce:cb:0c:ac:dd:35: a9:42:43:ec:3d:fe:5d:db:ea:e2:d7:3a:c7:bf:53: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1F:7A:A2:0F:AA:17:83:B3:20:36:EA:CF:E9:FC:DF:0E:09:8D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:1d:0c:6e:8a:db:09:d8:cc:fe:d9:6e:53:91:6e:21:51:56: be:a3:7e:fc:bd:e4:a2:b7:6b:1a:00:06:4a:5b:2a:7b:d5:4f: 32:2b:78:81:b0:6a:31:e8:8d:c3:80:ef:9e:fb:b2:40:a2:a8: db:2e:db:54:99:04:90:9a:36:be:7f:04:9f:32:a4:62:20:fe: 16:bd:b7:fc:b2:78:82:37:31:cd:bb:28:50:f6:04:ac:a7:af: 44:bc:d4:83:87:1a:f8:cc:59:f4:70:e2:af:92:b7:47:e9:f1: 27:61:dc:e3:2f:c5:7c:34:87:9d:29:67:ef:3a:36:b9:ff:2b: a5:bd:70:81:b3:4c:98:6a:04:1a:55:41:ef:c9:00:ba:38:14: ca:9b:da:b5:b7:c1:2a:d1:47:d1:07:68:8d:45:d8:56:a5:3f: 7c:fb:f0:f5:37:7a:7b:8f:7b:03:e4:81:e4:dc:f8:85:e5:7b: b7:50:ae:17:1f:32:5b:6f:2d:d9:5e:63:45:50:c2:3a:5c:12: 54:3e:31:f6:bd:25:62:6c:6e:27:4d:14:c1:54:d6:af:f0:f3: bd:5d:40:a2:43:7d:e7:43:16:5e:e9:2f:fa:82:7f:74:2a:76: 80:2d:7b:21:f2:27:66:3d:80:b6:76:c8:cf:c5:a5:c4:27:67: fb:ca:36:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+kSXbzz7tc/GlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YWEzMzM4ZGMtN2NiYS00NDVmLTgxMTQtNTQyOTIyM2M0ZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN38tynTfR1TmiARMzmWkpcFrvzxQm4aAkwZ NsgIKaegVWUPFUFWfaSVEDmEIp/L72LipsJu31dQF/2501dmI/Tfo1yDGdyu81tz KEOOCxEP0Xt74mxV21XZaTJNuvsaPuxZ3Z/mRAFMW4KnNp+NrBZxQY6GWxw+zkvn KxYMCTOiK/06IlUzN3qHRe8Hz8sQ1mxj5eS4z6jCA82/+DtxEIvYTSTDXjhdF9jH G7Mq7NEygANfcfzx+wYYcotoKuIyAP1JhPDUI2dEsIsB108HzwXnS0OKvUot6+p6 2tngdj91Ej96/n25QVvOywys3TWpQkPsPf5d2+ri1zrHv1PCWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKAfeqIPqheDsyA26s/p/N8OCY0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvY2ZmYTgwY2UtZGRkZi0z MjA2LWJlNWUtYjYwZWRjYWZkOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL0dDG6K2wnYzP7ZblORbiFRVr6jfvy95KK3axoABkpbKnvVTzIr eIGwajHojcOA7577skCiqNsu21SZBJCaNr5/BJ8ypGIg/ha9t/yyeII3Mc27KFD2 BKynr0S81IOHGvjMWfRw4q+St0fp8Sdh3OMvxXw0h50pZ+86Nrn/K6W9cIGzTJhq BBpVQe/JALo4FMqb2rW3wSrRR9EHaI1F2FalP3z78PU3enuPewPkgeTc+IXle7dQ rhcfMltvLdleY0VQwjpcElQ+Mfa9JWJsbidNFMFU1q/w871dQKJDfedDFl7pL/qC f3QqdoAteyHyJ2Y9gLZ2yM/FpcQnZ/vKNhQ= -----END CERTIFICATE-----Generated at Wed Mar 25 21:28:55 2026 by rpki-client