$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa File: dc8b4841-4648-3afc-93d8-17cafe748add.roa (raw, json) Hash identifier: AwRitfYrekwZoNriQHOdQ6w0ZiakaTqxdKWHQIDkbeU= Subject key identifier: 18:4F:0A:81:DF:DC:49:31:B0:F6:23:3C:A2:BE:82:82:BE:76:F9:43 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584A506AEFB8F23CE03FC2D16100 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 55116 IP address blocks: 2602:2c9:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:ef:b8:f2:3c:e0:3f:c2:d1:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=f1fc446b-e713-4f70-8430-c198cf908f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:88:ae:16:dd:7d:a1:27:73:e2:29:cf:e1: 32:fe:ac:d3:73:e4:2b:b9:e3:d3:4d:ec:70:59:b6: 55:ec:2c:8d:d1:cb:bf:8d:d3:89:7c:08:a7:14:48: f7:70:4e:ba:45:7a:3d:cb:e1:2e:34:02:63:ce:40: 23:15:1e:8d:e5:d9:0b:94:fd:74:48:33:e3:3d:0f: 43:e8:ce:e5:14:65:9a:05:ba:f3:8b:65:ce:31:9c: a1:9e:8d:82:b2:32:09:ca:8b:f7:0c:cb:95:90:40: 7b:53:62:90:6d:48:20:14:92:52:7e:46:9d:1d:3a: 3e:e9:b4:3b:f1:47:27:10:3f:ff:f1:c3:f5:ee:1e: a8:5d:f0:83:22:1b:f9:ee:b8:28:35:67:64:62:37: 20:95:0a:c8:8c:0c:9f:02:ce:ca:d2:ea:d6:81:49: c9:9f:aa:aa:f2:6d:7a:73:af:bd:c2:9c:b1:01:ab: 46:93:9f:02:9c:32:ba:d2:90:d5:de:29:7c:97:9b: 89:90:a9:6e:83:d1:48:13:1e:de:55:93:6d:9f:cd: aa:9f:e1:af:e9:37:48:5d:90:84:9c:9d:70:95:87: 75:68:78:d6:a5:3c:5e:be:9f:4c:7d:ca:63:28:b6: 89:4a:78:be:99:fb:eb:d3:f5:19:af:d8:04:16:5b: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4F:0A:81:DF:DC:49:31:B0:F6:23:3C:A2:BE:82:82:BE:76:F9:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a5:1b:22:c3:a2:ca:ae:06:ff:79:df:98:9b:42:2c:30:2f: 22:bf:6f:c4:52:a7:17:99:76:6c:23:ef:83:e5:f1:20:89:26: b3:0c:d5:c0:4b:f2:5b:cc:22:83:74:bf:51:ab:2e:69:11:ab: 1b:91:76:d6:89:d4:25:a8:66:e0:5c:c0:e7:08:ae:e6:84:54: 04:39:c5:b3:3e:09:e8:de:77:32:45:49:2e:42:c7:d5:7c:34: d8:49:79:d9:82:7b:bd:e7:78:d4:1e:11:23:ae:fb:a9:c7:7a: 09:2c:95:17:4c:b8:43:a1:f6:32:8f:ee:07:c1:99:4c:4b:c7: 42:e3:32:47:38:14:31:5d:48:87:33:48:b3:1c:78:13:a4:12: 40:ef:c6:f8:38:bd:5c:12:3d:72:8b:5b:ad:ce:c6:9d:77:db: b0:62:e2:9b:11:43:01:c3:c6:98:42:11:1a:9a:0e:73:d7:bb: 2e:91:24:d0:d2:8a:e2:8c:ff:91:8a:37:44:5f:a4:a2:0c:fe: a1:7f:98:fd:71:2b:ce:b6:a6:7a:26:29:ed:25:22:35:8f:f0: 33:db:6b:3a:fb:1c:e5:64:62:48:2a:b4:b5:88:e8:b5:81:51: ba:ee:31:7c:e6:1b:a6:4e:23:f2:6e:2d:97:00:02:03:2a:ab: 80:4e:79:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpQau+48jzgP8LRYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjFmYzQ0NmItZTcxMy00ZjcwLTg0MzAtYzE5OGNmOTA4ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR+IrhbdfaEnc+Ipz+Ey/qzTc+QruePTTexw WbZV7CyN0cu/jdOJfAinFEj3cE66RXo9y+EuNAJjzkAjFR6N5dkLlP10SDPjPQ9D 6M7lFGWaBbrzi2XOMZyhno2CsjIJyov3DMuVkEB7U2KQbUggFJJSfkadHTo+6bQ7 8UcnED//8cP17h6oXfCDIhv57rgoNWdkYjcglQrIjAyfAs7K0urWgUnJn6qq8m16 c6+9wpyxAatGk58CnDK60pDV3il8l5uJkKlug9FIEx7eVZNtn82qn+Gv6TdIXZCE nJ1wlYd1aHjWpTxevp9MfcpjKLaJSni+mfvr0/UZr9gEFlsJfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBhPCoHf3EkxsPYjPKK+goK+dvlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZGM4YjQ4NDEtNDY0OC0z YWZjLTkzZDgtMTdjYWZlNzQ4YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmlGyLDosquBv9535ibQiwwLyK/b8RSpxeZdmwj74Pl8SCJJrMM 1cBL8lvMIoN0v1GrLmkRqxuRdtaJ1CWoZuBcwOcIruaEVAQ5xbM+CejedzJFSS5C x9V8NNhJedmCe73neNQeESOu+6nHegkslRdMuEOh9jKP7gfBmUxLx0LjMkc4FDFd SIczSLMceBOkEkDvxvg4vVwSPXKLW63Oxp1327Bi4psRQwHDxphCERqaDnPXuy6R JNDSiuKM/5GKN0RfpKIM/qF/mP1xK862pnomKe0lIjWP8DPbazr7HOVkYkgqtLWI 6LWBUbruMXzmG6ZOI/JuLZcAAgMqq4BOeYs= -----END CERTIFICATE-----Generated at Mon Jun 30 19:46:43 2025 by rpki-client