$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa File: 1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa (raw, json) Hash identifier: z0vMLJu4shyNemEzQ24P7rckDqXIjhDu99jSiacC454= Subject key identifier: AA:54:E4:69:FF:70:CD:E2:0F:CD:0D:33:68:4D:AC:D7:48:1D:4B:A2 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F1F9248EE3285C5D55E8F1380 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 158.120.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:48:ee:32:85:c5:d5:5e:8f:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=b40d4185-8ccf-4b8e-b3cf-5b1c34d0e200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:7c:83:91:3e:34:39:93:eb:24:95:70:01: 27:00:6a:71:fb:b8:62:9c:01:63:5f:00:a1:9d:a0: 3f:1f:4b:74:0b:61:4b:c3:d8:0d:7a:06:3b:10:ab: cb:f7:2c:93:39:80:b3:e3:1a:2d:d3:75:88:7f:05: 5d:4d:d1:d7:bc:d5:d4:b5:40:73:88:f1:65:33:9e: 96:f2:37:e0:48:b6:76:0a:95:82:24:08:b3:10:68: b5:27:73:8d:09:39:8a:2e:70:0e:a7:9d:90:dd:9c: ea:f3:63:8e:4e:26:52:84:3d:c4:a0:f7:d8:5d:e1: d6:8a:42:20:de:85:68:fe:c6:a0:15:33:63:35:6c: 59:f4:2c:e0:53:76:19:61:d8:54:b8:95:1f:d8:84: 19:c2:ba:12:71:6f:0a:f4:17:0e:aa:e6:70:f0:e1: 10:b5:fe:6d:be:e2:dd:31:eb:c7:e8:11:bb:da:4c: 80:5b:dc:0e:d8:fd:16:c1:92:52:aa:40:30:d2:80: 0d:12:e0:1a:a7:e9:d2:38:c1:2b:d7:a2:56:21:be: 67:08:5c:df:cc:3d:1d:fd:ea:7c:3a:5f:f9:94:b4: 6a:fb:d0:c6:02:03:f4:cf:0f:c4:6b:44:14:89:43: 56:be:a2:05:fb:a6:cb:a9:d9:72:28:14:37:37:12: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:54:E4:69:FF:70:CD:E2:0F:CD:0D:33:68:4D:AC:D7:48:1D:4B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:1d:11:d1:30:c6:1f:45:89:44:af:eb:29:66:0b:62:13:4b: 77:58:90:11:3b:0a:c2:2f:61:64:d3:d6:51:55:52:f6:d3:74: e7:cb:19:12:67:84:58:b3:c3:fd:15:8b:82:0e:1c:c1:06:6e: e7:29:5f:5c:c7:73:70:37:69:d7:21:4b:f7:f3:42:ec:79:96: 79:f1:ab:52:0b:b7:e4:6f:ea:a0:41:ad:24:9a:23:f3:a6:32: 04:65:23:01:14:4c:9c:52:05:f6:38:18:fa:60:03:5f:a9:e3: 99:f8:63:16:7d:76:2d:06:50:cf:97:a5:77:cd:ff:48:ed:6d: 52:3a:e0:83:46:68:bc:8b:65:69:ee:4d:11:1a:72:9c:06:90: 80:74:57:fa:e4:31:a5:5c:37:a7:7f:02:0d:ef:1a:7a:b8:0c: f8:b0:8d:34:1a:4f:fb:3b:ff:a6:68:10:3a:a0:3f:9d:ea:b5: 26:10:b2:2b:f6:20:3d:ff:87:bd:a9:9b:41:75:3b:14:bd:d0: 6e:e8:53:ad:83:94:1c:08:7b:3d:d7:7b:80:21:1e:a0:c9:cd: db:d9:d8:f3:b9:c8:1c:52:63:5b:a7:d2:ef:b6:2d:23:78:e1: 5a:b1:49:92:a6:f7:c8:ed:45:e3:c0:42:85:21:52:28:11:2c: 07:21:8b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkjuMoXF1V6PE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YjQwZDQxODUtOGNjZi00YjhlLWIzY2YtNWIxYzM0ZDBlMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyR8g5E+NDmT6ySVcAEnAGpx+7hinAFjXwCh naA/H0t0C2FLw9gNegY7EKvL9yyTOYCz4xot03WIfwVdTdHXvNXUtUBziPFlM56W 8jfgSLZ2CpWCJAizEGi1J3ONCTmKLnAOp52Q3Zzq82OOTiZShD3EoPfYXeHWikIg 3oVo/sagFTNjNWxZ9CzgU3YZYdhUuJUf2IQZwroScW8K9BcOquZw8OEQtf5tvuLd MevH6BG72kyAW9wO2P0WwZJSqkAw0oANEuAap+nSOMEr16JWIb5nCFzfzD0d/ep8 Ol/5lLRq+9DGAgP0zw/Ea0QUiUNWvqIF+6bLqdlyKBQ3NxJ7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpU5Gn/cM3iD80NM2hNrNdIHUuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMWU1Y2ZmYjYtMGQ2OS0z YjgzLWFhYTgtNWUyMDM0YzJkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEdEdEwxh9FiUSv6ylmC2ITS3dYkBE7CsIvYWTT1lFVUvbTdOfLGRJn hFizw/0Vi4IOHMEGbucpX1zHc3A3adchS/fzQux5lnnxq1ILt+Rv6qBBrSSaI/Om MgRlIwEUTJxSBfY4GPpgA1+p45n4YxZ9di0GUM+XpXfN/0jtbVI64INGaLyLZWnu TREacpwGkIB0V/rkMaVcN6d/Ag3vGnq4DPiwjTQaT/s7/6ZoEDqgP53qtSYQsiv2 ID3/h72pm0F1OxS90G7oU62DlBwIez3Xe4AhHqDJzdvZ2PO5yBxSY1un0u+2LSN4 4VqxSZKm98jtRePAQoUhUigRLAchi8E= -----END CERTIFICATE-----Generated at Mon Sep 21 18:39:30 2026 by rpki-client