$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa File: 2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa (raw, json) Hash identifier: xqHLBBFUNPYEf8slrD15cuA1jQKf+DbX0SU84mZhVno= Subject key identifier: A1:94:20:80:A7:0B:F0:9B:58:F6:F3:87:64:81:A3:5D:BF:33:3B:01 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F3E47FF1999536676C7825270 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 158.120.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ff:19:99:53:66:76:c7:82:52:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=3f2eb0e0-498d-4c09-9b0e-a7c8c9536ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:c3:ad:0c:73:75:cb:b4:fe:33:cf:ff:0a: e1:16:5c:ce:d7:8c:f6:07:f9:35:c1:0f:58:e8:cf: 29:fa:a9:08:7a:1e:db:f7:24:14:67:dc:0b:df:c2: f0:6e:ff:e3:28:ce:8c:e3:6b:e9:62:8c:53:55:3c: 38:02:ca:39:8a:65:67:d4:8e:e4:16:0e:7c:30:dd: 3e:60:3d:69:5b:62:74:08:99:b9:71:a1:7a:7a:fb: 4d:ea:7c:6b:18:d4:ef:47:73:02:43:97:02:a2:7b: 95:84:d5:43:aa:56:e9:a9:f0:48:fb:e4:87:5e:a5: 37:10:ff:97:f5:ed:4f:0e:78:1a:0b:0c:6c:91:39: e7:f8:c2:4c:94:f8:3f:9f:12:26:d0:cb:26:2f:22: dc:af:5a:1e:48:c3:16:7e:a0:f1:d0:55:ac:50:6d: 3c:01:06:00:ce:b1:e0:4a:45:63:7c:86:59:08:59: b9:97:3d:f0:8e:d1:a6:e9:77:24:95:61:13:8f:01: 60:2b:3b:3e:67:d0:00:72:d6:b2:68:fa:e5:e2:46: 39:0d:fe:d5:3b:59:40:27:25:8d:d5:43:30:c0:eb: f0:c1:9d:02:5f:40:43:2f:36:29:26:89:51:97:41: 22:c1:1a:74:43:36:88:67:c8:d9:55:93:ee:48:3b: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:20:80:A7:0B:F0:9B:58:F6:F3:87:64:81:A3:5D:BF:33:3B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:78:38:d7:f3:da:de:a1:f0:ac:07:c1:bb:b9:d2:07:8b:84: 4c:44:08:7b:39:c3:e3:23:8e:68:a6:33:d5:58:03:c2:d8:e3: 4f:0f:24:cc:ae:d9:9f:8f:e2:32:7e:8a:f7:1e:49:fa:ac:87: 68:f7:9e:06:f8:b0:51:e9:71:8b:9a:12:b0:d0:c2:99:d2:ae: e6:2b:5b:35:8b:33:3d:ae:1c:95:ad:9a:6a:0e:57:cc:d0:a0: f8:b5:7a:65:6e:5b:a9:d6:9f:28:0f:1a:aa:56:3b:b3:ef:7a: 18:5a:c7:0c:64:f7:ab:84:f0:a6:c2:fc:f8:9d:6b:05:51:08: 5d:8d:21:a3:07:ae:fc:16:9e:c2:99:a1:16:f2:fc:af:0a:9f: ea:cd:7c:e4:ff:57:7a:f1:64:1a:e5:c8:30:d7:8d:49:c7:2c: ef:89:b9:47:8c:55:a1:ec:4b:f4:17:9c:1d:6e:96:de:87:52: 78:73:4f:9a:8d:93:7a:09:02:58:42:ee:6e:5e:09:4e:9c:bd: 64:61:ed:84:58:ac:84:07:c4:07:84:e6:c6:23:1b:cb:93:d7: 76:84:d8:49:94:ad:fd:a3:df:cd:1a:10:23:3e:03:49:0c:90: 07:59:77:90:6a:93:c1:d2:27:b7:ec:94:ce:1f:88:18:a4:15: 37:27:4a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/8ZmVNmdseCUnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk M2YyZWIwZTAtNDk4ZC00YzA5LTliMGUtYTdjOGM5NTM2Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVbDrQxzdcu0/jPP/wrhFlzO14z2B/k1wQ9Y 6M8p+qkIeh7b9yQUZ9wL38Lwbv/jKM6M42vpYoxTVTw4Aso5imVn1I7kFg58MN0+ YD1pW2J0CJm5caF6evtN6nxrGNTvR3MCQ5cConuVhNVDqlbpqfBI++SHXqU3EP+X 9e1PDngaCwxskTnn+MJMlPg/nxIm0MsmLyLcr1oeSMMWfqDx0FWsUG08AQYAzrHg SkVjfIZZCFm5lz3wjtGm6XcklWETjwFgKzs+Z9AActayaPrl4kY5Df7VO1lAJyWN 1UMwwOvwwZ0CX0BDLzYpJolRl0EiwRp0QzaIZ8jZVZPuSDtR6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGUIICnC/CbWPbzh2SBo12/MzsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMmYzZGU4N2YtZWJlNS0z ZWEwLTkzODMtOWNhMjFmMDRhYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH14ONfz2t6h8KwHwbu50geLhExECHs5w+MjjmimM9VYA8LY408PJMyu 2Z+P4jJ+ivceSfqsh2j3ngb4sFHpcYuaErDQwpnSruYrWzWLMz2uHJWtmmoOV8zQ oPi1emVuW6nWnygPGqpWO7Pvehhaxwxk96uE8KbC/PidawVRCF2NIaMHrvwWnsKZ oRby/K8Kn+rNfOT/V3rxZBrlyDDXjUnHLO+JuUeMVaHsS/QXnB1ult6HUnhzT5qN k3oJAlhC7m5eCU6cvWRh7YRYrIQHxAeE5sYjG8uT13aE2EmUrf2j380aECM+A0kM kAdZd5Bqk8HSJ7fslM4fiBikFTcnSl8= -----END CERTIFICATE-----Generated at Tue Sep 22 20:34:21 2026 by rpki-client