$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa File: fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa (raw, json) Hash identifier: NMW71VNlbnjHSFbsJPlm9Pi2BB7sN0LIIBXyKG1YcqE= Subject key identifier: 58:95:D7:FF:1E:19:2C:05:B6:68:71:24:3F:D7:0E:C4:36:EC:71:A9 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A268AB04E725DFD9D0CEC0580 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 31898 IP address blocks: 158.120.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:b0:4e:72:5d:fd:9d:0c:ec:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=157c26b1-1d5f-4fa8-b38e-b7fa79a9303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:32:4d:75:26:c9:a0:bc:a2:5c:8e:68:ab:00: 45:4a:60:f1:12:85:b6:8d:b4:c5:d5:5e:9f:2b:15: 74:98:d4:c5:51:90:cf:f2:69:a7:7e:18:45:4c:5a: 8a:81:f4:c9:b7:69:70:74:b9:b3:65:6e:53:2f:92: 1c:c2:96:58:ef:f9:ba:29:81:33:b6:e0:5e:ec:0a: 3d:8b:33:65:a9:3f:95:32:69:9d:7c:6e:9e:57:2a: b1:f7:03:57:78:84:06:b0:ac:29:0c:41:37:7b:91: 9f:a7:74:9e:77:8e:43:62:bb:cc:54:eb:9e:ce:79: a9:5b:e7:1d:dc:1c:c2:06:21:91:f8:5a:89:e2:42: be:c1:41:54:83:3c:20:24:ca:08:da:c6:68:65:b7: 4a:61:4a:29:2d:aa:1d:b5:19:da:a1:c6:d9:b9:a2: 66:87:93:dd:8f:44:cb:73:c0:88:f5:61:18:cc:a5: e4:e3:b3:47:7a:37:8a:cb:db:6f:ad:d8:59:68:ca: 27:25:f0:4f:07:9e:66:68:17:bf:68:1b:f0:05:a9: 2b:4d:86:c7:9b:c0:46:81:e5:da:04:51:3f:b7:15: 0e:b0:d6:f9:97:5e:0a:2b:c5:29:be:70:89:7f:62: d1:c0:e3:51:13:a1:40:0e:a0:bb:b3:56:6a:4d:a1: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:95:D7:FF:1E:19:2C:05:B6:68:71:24:3F:D7:0E:C4:36:EC:71:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:c0:98:9c:09:2b:4d:dd:6b:02:fd:2a:c6:99:63:1e:91:7e: 79:70:f8:70:89:29:33:eb:f3:19:93:ee:2e:12:4d:fe:ff:fe: 7c:9c:10:53:b3:53:c8:a9:0c:83:d6:aa:65:cc:6a:d1:1c:77: f7:bd:da:1b:b0:60:7b:b0:9c:f3:04:4f:3a:fc:e3:02:ac:f9: 1f:e3:81:7d:e8:05:d2:96:28:50:89:95:df:6c:8f:5e:d5:ce: dd:21:ba:1a:18:03:96:d5:9e:2d:15:04:fe:40:9a:c2:9d:d3: 3e:7d:f5:0a:38:bf:07:74:60:59:1a:1e:ec:c3:26:31:36:7b: 28:04:1f:cb:47:0e:32:a3:14:26:34:49:6b:44:03:30:4f:19: 8b:a3:33:37:31:a7:e8:97:cf:6f:a4:5d:71:93:c1:39:08:e5: a1:f6:c3:24:83:88:d4:35:b9:2f:8d:92:a5:1b:e3:18:2c:d1: e8:67:2e:81:54:10:a1:bd:d3:b3:8a:8c:0d:1b:b1:c8:46:60: 55:4c:1b:9f:e3:24:c4:8e:a8:75:ac:fa:20:f1:3b:50:eb:98: 6d:61:ac:5d:f2:97:3a:38:8f:6b:b6:3b:0b:a1:da:13:6d:7c: f6:e8:e1:df:17:93:9c:d2:39:77:5d:64:8b:13:3c:29:26:f2: 32:82:ca:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirBOcl39nQzsBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MTU3YzI2YjEtMWQ1Zi00ZmE4LWIzOGUtYjdmYTc5YTkzMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTJNdSbJoLyiXI5oqwBFSmDxEoW2jbTF1V6f KxV0mNTFUZDP8mmnfhhFTFqKgfTJt2lwdLmzZW5TL5IcwpZY7/m6KYEztuBe7Ao9 izNlqT+VMmmdfG6eVyqx9wNXeIQGsKwpDEE3e5Gfp3Sed45DYrvMVOueznmpW+cd 3BzCBiGR+FqJ4kK+wUFUgzwgJMoI2sZoZbdKYUopLaodtRnaocbZuaJmh5Pdj0TL c8CI9WEYzKXk47NHejeKy9tvrdhZaMonJfBPB55maBe/aBvwBakrTYbHm8BGgeXa BFE/txUOsNb5l14KK8UpvnCJf2LRwONRE6FADqC7s1ZqTaExVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiV1/8eGSwFtmhxJD/XDsQ27HGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmFmZDhjYTktYjg0NS0z ODA0LThkNDItMmYxMTdhYTY4ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/AmJwJK03dawL9KsaZYx6Rfnlw+HCJKTPr8xmT7i4STf7//nycEFOz U8ipDIPWqmXMatEcd/e92huwYHuwnPMETzr84wKs+R/jgX3oBdKWKFCJld9sj17V zt0huhoYA5bVni0VBP5AmsKd0z599Qo4vwd0YFkaHuzDJjE2eygEH8tHDjKjFCY0 SWtEAzBPGYujMzcxp+iXz2+kXXGTwTkI5aH2wySDiNQ1uS+NkqUb4xgs0ehnLoFU EKG907OKjA0bschGYFVMG5/jJMSOqHWs+iDxO1DrmG1hrF3ylzo4j2u2Owuh2hNt fPbo4d8Xk5zSOXddZIsTPCkm8jKCylA= -----END CERTIFICATE-----Generated at Mon Jun 16 16:35:26 2025 by rpki-client