$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa File: dc8b4841-4648-3afc-93d8-17cafe748add.roa (raw, json) Hash identifier: 9QpILKn8Ffsl4w1xrGvM9Az1MJg6SxshLa/BwAphOMc= Subject key identifier: DE:51:6A:E6:68:B9:C3:7E:1B:0D:DD:9E:F5:7C:29:1D:86:FA:FC:AA Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584B3126EFD1A2AB9C02A0265F00 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 55116 IP address blocks: 2602:2c9:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:ef:d1:a2:ab:9c:02:a0:26:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=71a220f8-ff26-47f3-b0c4-c531dad8ce70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:a2:1b:1f:84:43:94:c5:2d:74:80:d1:1b: a6:a8:a4:27:56:d4:37:bc:39:f4:47:21:40:73:aa: 58:d5:26:bc:e4:56:0d:7d:ce:90:2e:23:e5:b4:dd: 56:89:74:08:d9:7e:a2:02:df:c1:53:1c:d0:ea:e4: 4d:6c:7b:fa:b5:26:37:c9:b1:41:e2:b6:c8:cc:7f: 63:59:14:75:bf:cd:ca:01:e2:09:66:7b:97:6b:a4: b9:03:3a:2c:5c:52:7f:0f:14:0e:51:4e:e2:7f:a8: 68:cc:8c:3c:2b:5a:5d:f0:a8:f0:eb:38:15:49:a0: 9e:8a:01:ea:40:35:e4:9c:f4:e9:68:fc:fd:ab:e9: 7a:e4:91:4b:9c:0a:a4:e8:50:70:eb:6f:87:91:32: b3:5d:e1:6d:0e:83:e8:32:29:3e:2f:38:3b:ab:79: 28:90:5e:74:fa:ab:3a:df:21:8a:93:92:e4:8b:c7: 4e:58:a5:77:5d:a9:4d:3e:ef:3f:af:1f:0a:4d:48: 24:04:61:b8:49:d0:05:ef:2a:5c:30:4d:fa:6c:f1: 35:78:6c:c9:5b:cf:63:a8:6f:cb:16:79:ee:f7:96: aa:4d:1f:2a:96:47:a2:4a:59:78:77:b4:8b:01:48: dd:d0:99:34:f0:ef:27:7d:fe:3a:5e:e8:99:37:18: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:51:6A:E6:68:B9:C3:7E:1B:0D:DD:9E:F5:7C:29:1D:86:FA:FC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2e:bf:8a:84:c8:a2:8e:0d:82:a2:6e:7c:e5:6a:fe:b8:22: 49:0d:0e:4d:83:b0:31:d8:d1:23:55:6c:77:f7:4b:d2:46:61: 45:16:3e:15:ca:4a:c5:de:5b:5f:28:c7:66:18:d8:23:6b:ab: d0:ab:95:e6:9f:cf:a6:ca:4f:cb:9c:56:5f:b6:f0:07:da:bc: 59:50:29:a4:3f:74:90:4e:5b:13:af:cd:7a:bd:3b:0a:d7:e8: 03:34:d4:38:39:b5:f6:e1:9e:b8:42:e8:72:6b:bb:99:52:82: bf:40:cf:00:da:c5:04:46:ae:2e:8a:d1:c2:66:72:bf:08:fe: eb:2c:f1:ec:66:1d:64:05:62:6c:56:ad:33:b5:b7:48:d2:87: e3:6e:4e:e9:c1:5a:95:9d:2f:8c:91:a2:9b:bf:08:4a:4e:e1: 1f:13:91:da:ba:09:43:29:56:0c:5a:57:86:fc:a4:5c:5d:9c: 01:01:e1:2c:12:ac:4a:f8:81:88:4f:90:66:fa:ef:77:9b:28: d0:9b:9b:87:17:23:4e:33:0c:e8:94:ec:a9:52:11:4c:3f:fd: 42:69:cc:20:78:e3:fe:f4:2b:7c:0b:c2:f9:d3:8f:60:ca:7a: 96:59:75:f9:91:ba:b1:db:53:fb:b8:7b:15:b2:8d:a3:8f:2a: bf:4f:03:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsxJu/RoqucAqAmXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk NzFhMjIwZjgtZmYyNi00N2YzLWIwYzQtYzUzMWRhZDhjZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3iiGx+EQ5TFLXSA0RumqKQnVtQ3vDn0RyFA c6pY1Sa85FYNfc6QLiPltN1WiXQI2X6iAt/BUxzQ6uRNbHv6tSY3ybFB4rbIzH9j WRR1v83KAeIJZnuXa6S5AzosXFJ/DxQOUU7if6hozIw8K1pd8Kjw6zgVSaCeigHq QDXknPTpaPz9q+l65JFLnAqk6FBw62+HkTKzXeFtDoPoMik+Lzg7q3kokF50+qs6 3yGKk5Lki8dOWKV3XalNPu8/rx8KTUgkBGG4SdAF7ypcME36bPE1eGzJW89jqG/L Fnnu95aqTR8qlkeiSll4d7SLAUjd0Jk08O8nff46XuiZNxinFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN5RauZoucN+Gw3dnvV8KR2G+vyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZGM4YjQ4NDEtNDY0OC0z YWZjLTkzZDgtMTdjYWZlNzQ4YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEcuv4qEyKKODYKibnzlav64IkkNDk2DsDHY0SNVbHf3S9JGYUUW PhXKSsXeW18ox2YY2CNrq9Crleafz6bKT8ucVl+28AfavFlQKaQ/dJBOWxOvzXq9 OwrX6AM01Dg5tfbhnrhC6HJru5lSgr9AzwDaxQRGri6K0cJmcr8I/uss8exmHWQF YmxWrTO1t0jSh+NuTunBWpWdL4yRopu/CEpO4R8Tkdq6CUMpVgxaV4b8pFxdnAEB 4SwSrEr4gYhPkGb673ebKNCbm4cXI04zDOiU7KlSEUw//UJpzCB44/70K3wLwvnT j2DKepZZdfmRurHbU/u4exWyjaOPKr9PA0k= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:24 2025 by rpki-client