$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa File: 2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa (raw, json) Hash identifier: FeZnJpFtM6g1px37+Qy/YTlzmdE1ohcvG5Ch4YzIhNM= Subject key identifier: F2:A7:D5:47:62:5A:BD:EF:1D:22:B4:5E:FF:4C:3C:FE:2C:FF:CE:47 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584E9BE5006E6DC9C3B0CAB3F8E8 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 158.120.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:00:6e:6d:c9:c3:b0:ca:b3:f8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=c3f3153f-40b1-40fe-a458-7b46404a7c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:8c:8f:68:42:19:ac:c3:95:69:90:05:b1: 5d:5c:99:3d:04:07:95:27:d0:69:ce:6e:5f:95:81: af:d5:2c:76:5a:e2:8f:ba:13:70:fe:1d:0b:d5:e4: cb:e0:43:64:d4:46:30:1a:ef:6a:96:b2:ed:fb:1d: e1:be:69:08:0a:9e:85:a4:2c:55:84:60:0d:c4:96: 78:ef:f9:cf:21:fa:4c:37:6a:c8:ad:15:8e:cf:e8: 53:44:ce:a7:aa:85:59:51:df:a9:05:cc:c2:ab:f5: 8b:63:80:95:f2:33:cc:4f:f0:ea:e5:97:73:22:12: 0c:0b:67:e3:e1:0c:a4:51:15:87:ea:da:31:6b:92: 5e:4f:b8:09:57:7c:9b:d1:14:c3:e1:24:fb:77:a4: a1:17:df:52:a3:1a:1f:1d:73:0a:13:43:89:54:42: 9d:9d:90:87:3f:48:06:83:9b:f8:5f:9d:7a:e3:c4: 93:2f:7a:c1:d0:d0:bb:9b:a8:5d:1b:72:7a:5e:45: 6d:c8:43:a1:6a:55:57:52:b0:45:c2:f5:4d:16:47: d1:3e:06:05:58:6b:6c:1a:5a:fd:cf:b2:f3:fa:a2: fe:28:c3:10:8b:49:9f:f6:15:3d:cb:52:be:b0:74: d2:4e:9e:33:e5:80:de:6b:cc:35:d6:3e:db:25:c0: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A7:D5:47:62:5A:BD:EF:1D:22:B4:5E:FF:4C:3C:FE:2C:FF:CE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/2f3de87f-ebe5-3ea0-9383-9ca21f04ab58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ff:b2:89:ae:0d:21:b2:d5:2b:1b:ce:0d:90:25:69:1e:59: 5d:f1:52:38:00:1a:c3:7b:1a:a1:3e:31:ce:6d:e2:64:64:04: a2:92:47:90:b4:5b:2d:d1:dd:90:54:a4:1e:c4:36:eb:13:b4: 54:6b:49:42:ab:1b:96:d7:1e:4c:b1:fe:56:09:1f:27:96:0b: 04:a2:a0:95:72:31:24:b1:b7:5a:b9:f2:53:c7:84:e2:79:f7: e3:89:0e:ed:dd:99:9b:35:9f:4b:0c:f4:a0:52:8d:be:67:ed: dd:ce:0f:4b:02:b3:4e:6f:84:5a:27:cf:95:df:08:de:df:79: e9:c5:05:e4:79:1d:e1:c5:88:26:10:c1:66:78:f6:2d:b2:8e: ae:e9:d9:6e:0e:60:d8:2c:a8:71:a6:13:3e:13:2c:8d:41:bf: aa:ab:b2:bb:58:bb:96:dd:1c:1d:45:75:87:14:e1:67:fb:d0: 0b:fa:b7:8a:42:fe:d4:78:83:84:74:20:ee:c3:69:69:4f:98: d7:68:d4:46:00:61:77:7d:e5:53:b8:c5:de:80:b6:22:a6:8d: d9:60:ec:24:f6:e4:ce:c3:13:6c:bb:5a:2b:1e:d7:76:57:da: c4:1b:db:7f:74:77:6a:9f:7a:37:09:5e:a3:b3:96:0e:7b:38: 46:b6:be:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QBubcnDsMqz+OgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YzNmMzE1M2YtNDBiMS00MGZlLWE0NTgtN2I0NjQwNGE3YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGuMj2hCGazDlWmQBbFdXJk9BAeVJ9Bpzm5f lYGv1Sx2WuKPuhNw/h0L1eTL4ENk1EYwGu9qlrLt+x3hvmkICp6FpCxVhGANxJZ4 7/nPIfpMN2rIrRWOz+hTRM6nqoVZUd+pBczCq/WLY4CV8jPMT/Dq5ZdzIhIMC2fj 4QykURWH6toxa5JeT7gJV3yb0RTD4ST7d6ShF99SoxofHXMKE0OJVEKdnZCHP0gG g5v4X51648STL3rB0NC7m6hdG3J6XkVtyEOhalVXUrBFwvVNFkfRPgYFWGtsGlr9 z7Lz+qL+KMMQi0mf9hU9y1K+sHTSTp4z5YDea8w11j7bJcC0QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKn1UdiWr3vHSK0Xv9MPP4s/85HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMmYzZGU4N2YtZWJlNS0z ZWEwLTkzODMtOWNhMjFmMDRhYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv/somuDSGy1Ssbzg2QJWkeWV3xUjgAGsN7GqE+Mc5t4mRkBKKSR5C0 Wy3R3ZBUpB7ENusTtFRrSUKrG5bXHkyx/lYJHyeWCwSioJVyMSSxt1q58lPHhOJ5 9+OJDu3dmZs1n0sM9KBSjb5n7d3OD0sCs05vhFonz5XfCN7feenFBeR5HeHFiCYQ wWZ49i2yjq7p2W4OYNgsqHGmEz4TLI1Bv6qrsrtYu5bdHB1FdYcU4Wf70Av6t4pC /tR4g4R0IO7DaWlPmNdo1EYAYXd95VO4xd6AtiKmjdlg7CT25M7DE2y7Wise13ZX 2sQb2390d2qfejcJXqOzlg57OEa2vgY= -----END CERTIFICATE-----Generated at Tue Jul 28 17:23:15 2026 by rpki-client