$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa File: e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa (raw, json) Hash identifier: dQoxJCeX+8LDhJtrPsboMslWfCVBIxCfOCAOvPSjoJU= Subject key identifier: C3:5C:8D:72:F6:3F:1C:CE:0C:FA:D7:99:D9:3D:94:1F:6E:60:25:8C Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584B540C67FC69DE02EB8A1E3D9C Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 55116 IP address blocks: 2602:2c9:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:67:fc:69:de:02:eb:8a:1e:3d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=b02ae203-0165-4da4-bab3-52f05d85b66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:fa:34:c7:62:a4:5e:b1:2a:f5:0a:fb:86: f3:d5:4e:a1:c3:26:88:97:0e:6d:34:60:ed:c8:b8: 97:b0:23:43:7a:77:dd:f8:24:d1:ab:ea:0b:9c:ec: 5a:5d:26:f7:34:a8:d0:af:0a:ed:69:73:68:28:ea: 92:01:48:46:a4:c3:9f:81:aa:eb:46:14:6d:fc:67: b5:67:39:5d:af:bc:0d:87:f9:cd:6d:a9:b0:fc:64: b3:c6:e7:95:16:58:20:02:00:e6:cd:98:19:b0:c0: 0e:56:6d:0c:57:2a:99:a7:d6:ca:1e:4d:63:86:60: c5:76:b4:6f:9f:27:03:d2:ca:6c:5e:fb:ae:c6:9b: f0:68:e1:c7:3b:af:ed:cc:dd:ca:91:84:74:8d:20: c9:74:84:3e:89:23:a4:8b:5f:1a:43:a1:e1:17:68: a8:b4:87:20:4c:ad:ea:fd:4e:b0:c6:15:1f:0b:c9: 4f:16:c0:82:41:53:12:b8:2f:de:f4:ae:9a:dc:4a: 73:e2:fa:cf:1b:b2:b7:8b:7d:4a:f7:28:6c:8c:77: db:78:3a:a0:0c:79:a3:3a:55:15:00:3b:19:f7:c5: c4:43:5e:ae:de:d0:e8:2d:b1:c7:74:a8:f6:fd:50: 8b:0c:9c:36:90:dd:c1:e0:44:6b:b2:62:c5:cb:1a: cb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5C:8D:72:F6:3F:1C:CE:0C:FA:D7:99:D9:3D:94:1F:6E:60:25:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e2a4a4b3-bc31-31b1-944e-4a8c38b9b3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5a:06:63:12:7f:1b:27:72:09:98:a9:33:7c:77:1f:ba:42: 0a:83:d9:e5:f8:ca:c3:c1:0a:c3:27:67:c2:8b:83:76:3b:77: 5c:ef:6c:5c:48:6c:4d:d8:45:24:06:29:92:f7:44:93:3b:89: 6e:07:6b:51:15:b5:a6:38:5a:c9:1a:97:ff:de:55:5c:a3:9a: 33:16:58:59:2a:49:b5:c4:8d:0d:c5:0c:09:ac:8a:6c:32:a0: 3b:9a:3c:f6:97:e9:e6:c9:52:f4:a5:53:c6:c8:4a:c3:d8:04: a7:38:31:7d:24:3d:cb:8d:e0:2d:78:51:37:d6:be:a5:f2:d4: ae:9f:b9:7f:6a:99:54:d2:b5:6c:ed:2d:08:5f:ab:8d:99:64: cd:e6:56:ef:a3:21:70:a0:b0:2a:25:67:3a:66:e6:85:b4:89: 65:de:76:76:f4:bd:5d:b7:58:ec:d1:38:48:6d:96:72:72:d0: b9:09:bd:85:15:64:d4:bb:bf:19:31:2e:5b:22:ed:da:16:cb: 5d:3b:e1:18:1a:66:1c:89:2b:fe:b7:d7:a8:58:e2:f6:80:9c: 6b:6e:48:c6:05:83:36:53:fa:01:e4:d5:17:ab:f9:2f:62:92: d3:08:8d:8c:ad:0e:28:bd:a7:4a:c4:94:94:87:56:e4:a6:4b: 69:4d:b0:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtUDGf8ad4C64oePZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YjAyYWUyMDMtMDE2NS00ZGE0LWJhYjMtNTJmMDVkODViNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzP6NMdipF6xKvUK+4bz1U6hwyaIlw5tNGDt yLiXsCNDenfd+CTRq+oLnOxaXSb3NKjQrwrtaXNoKOqSAUhGpMOfgarrRhRt/Ge1 Zzldr7wNh/nNbamw/GSzxueVFlggAgDmzZgZsMAOVm0MVyqZp9bKHk1jhmDFdrRv nycD0spsXvuuxpvwaOHHO6/tzN3KkYR0jSDJdIQ+iSOki18aQ6HhF2iotIcgTK3q /U6wxhUfC8lPFsCCQVMSuC/e9K6a3Epz4vrPG7K3i31K9yhsjHfbeDqgDHmjOlUV ADsZ98XEQ16u3tDoLbHHdKj2/VCLDJw2kN3B4ERrsmLFyxrLIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNcjXL2PxzODPrXmdk9lB9uYCWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZTJhNGE0YjMtYmMzMS0z MWIxLTk0NGUtNGE4YzM4YjliM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpaBmMSfxsncgmYqTN8dx+6QgqD2eX4ysPBCsMnZ8KLg3Y7d1zv bFxIbE3YRSQGKZL3RJM7iW4Ha1EVtaY4Wskal//eVVyjmjMWWFkqSbXEjQ3FDAms imwyoDuaPPaX6ebJUvSlU8bISsPYBKc4MX0kPcuN4C14UTfWvqXy1K6fuX9qmVTS tWztLQhfq42ZZM3mVu+jIXCgsColZzpm5oW0iWXednb0vV23WOzROEhtlnJy0LkJ vYUVZNS7vxkxLlsi7doWy1074RgaZhyJK/6316hY4vaAnGtuSMYFgzZT+gHk1Rer +S9iktMIjYytDii9p0rElJSHVuSmS2lNsJk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:38:12 2025 by rpki-client