$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa File: 1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa (raw, json) Hash identifier: fS7fLlToJ3YKqUtqJWJ1wbki+PKX8mEgV50H6TH/pOM= Subject key identifier: B9:20:1E:8E:FB:06:A4:25:F3:3D:F3:92:A1:91:EE:43:D9:14:F5:A4 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D9CEAB1943B45A0503DFBC800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa Signing time: Fri 24 Apr 2026 13:00:31 +0000 ROA not before: Fri 24 Apr 2026 13:00:31 +0000 ROA not after: Thu 23 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 158.120.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:ea:b1:94:3b:45:a0:50:3d:fb:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 24 13:00:31 2026 GMT Not After : Jul 23 13:00:31 2026 GMT Subject: CN=54abc212-ae16-4e8c-8c76-40c8ee93864b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bb:76:9e:f1:4f:ea:b5:31:f6:16:03:e2:87: 14:21:b1:d6:e9:af:56:f8:c1:81:4b:d7:d0:88:5e: a2:fb:a2:e2:f7:ca:5e:4b:02:67:ac:c7:11:ed:37: 48:21:47:8b:9d:ca:6d:34:cc:15:dd:e9:a3:c8:81: 66:22:30:78:37:84:2c:ae:3d:83:6c:05:4e:7c:92: 0e:e0:cf:ae:fa:96:49:97:d0:58:15:ba:30:d8:c8: 29:1c:54:0d:1b:78:cc:8c:b9:a9:26:8f:36:7c:17: e6:8b:83:11:c9:cf:eb:5a:a1:24:90:58:70:72:1e: 00:69:28:43:3a:d3:ad:25:1a:31:8e:94:86:15:b7: 4e:23:9b:e7:c5:77:ef:41:19:1c:4a:88:d8:92:3e: 10:7d:eb:ec:f1:6d:97:9a:55:ba:57:68:47:fa:5c: 60:d3:7b:4e:1f:0f:e5:22:dc:5d:7e:22:b4:36:e2: 84:f2:92:d0:8a:69:82:b2:d2:45:fc:78:c3:2c:95: 8c:56:46:29:27:2b:3f:5a:0f:d6:e4:9d:12:92:65: 08:85:a7:04:1b:0f:6b:f8:7c:c7:9a:84:a2:e2:03: 7c:ea:46:59:94:1f:1a:01:f6:ca:95:e2:7a:ff:45: 17:6b:a8:e6:57:1c:6f:e0:a8:a6:9b:b8:df:0e:ec: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:20:1E:8E:FB:06:A4:25:F3:3D:F3:92:A1:91:EE:43:D9:14:F5:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:74:85:1e:bd:cf:39:1c:a3:12:e0:3a:49:e1:5b:46:52:c3: 55:f5:1f:da:8c:2d:47:9b:c1:74:f2:f9:0a:29:aa:70:54:66: 43:b9:5d:a9:78:1e:04:48:7c:7f:bc:ea:65:dd:af:05:2e:f1: 00:47:8b:01:8b:be:51:ee:ba:50:ab:70:8a:b3:83:5d:14:42: 42:91:88:32:fe:0d:ee:4b:ce:cc:69:c3:eb:8b:b1:0c:27:b1: 74:0f:4e:89:c3:ca:4d:0b:6d:04:a7:ef:4d:04:1b:23:86:77: 47:70:29:17:6c:0f:40:a3:92:dc:f1:12:4d:83:e0:e2:bf:b2: d7:23:08:28:65:5f:fd:0f:e1:43:33:05:08:65:7d:44:4d:ce: 27:08:9a:97:52:12:5a:21:56:59:12:a2:89:75:66:1a:bd:96: f3:46:35:5b:2e:0b:5e:28:31:1c:af:26:ce:00:a4:db:72:40: e0:11:e3:a4:f3:65:7e:32:4f:4d:ce:a1:8c:d8:ea:3e:08:75: c3:71:fb:ff:7e:d2:6a:26:07:46:9f:31:cf:ec:3f:f8:3f:80: 11:08:6d:c9:76:1c:27:44:6a:38:42:a8:4a:5b:a8:39:76:0c: 29:e0:ab:f6:80:9d:7b:e4:ad:6e:3c:82:19:8c:8c:c9:fc:86: 49:8c:a9:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2c6rGUO0WgUD37yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQyNDEzMDAzMVoXDTI2MDcyMzEzMDAzMVowLzEtMCsGA1UEAxMk NTRhYmMyMTItYWUxNi00ZThjLThjNzYtNDBjOGVlOTM4NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrt2nvFP6rUx9hYD4ocUIbHW6a9W+MGBS9fQ iF6i+6Li98peSwJnrMcR7TdIIUeLncptNMwV3emjyIFmIjB4N4Qsrj2DbAVOfJIO 4M+u+pZJl9BYFbow2MgpHFQNG3jMjLmpJo82fBfmi4MRyc/rWqEkkFhwch4AaShD OtOtJRoxjpSGFbdOI5vnxXfvQRkcSojYkj4Qfevs8W2XmlW6V2hH+lxg03tOHw/l ItxdfiK0NuKE8pLQimmCstJF/HjDLJWMVkYpJys/Wg/W5J0SkmUIhacEGw9r+HzH moSi4gN86kZZlB8aAfbKleJ6/0UXa6jmVxxv4Kimm7jfDuymbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkgHo77BqQl8z3zkqGR7kPZFPWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMWU1Y2ZmYjYtMGQ2OS0z YjgzLWFhYTgtNWUyMDM0YzJkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ0hR69zzkcoxLgOknhW0ZSw1X1H9qMLUebwXTy+QopqnBUZkO5Xal4 HgRIfH+86mXdrwUu8QBHiwGLvlHuulCrcIqzg10UQkKRiDL+De5Lzsxpw+uLsQwn sXQPTonDyk0LbQSn700EGyOGd0dwKRdsD0CjktzxEk2D4OK/stcjCChlX/0P4UMz BQhlfURNzicImpdSElohVlkSool1Zhq9lvNGNVsuC14oMRyvJs4ApNtyQOAR46Tz ZX4yT03OoYzY6j4IdcNx+/9+0momB0afMc/sP/g/gBEIbcl2HCdEajhCqEpbqDl2 DCngq/aAnXvkrW48ghmMjMn8hkmMqUw= -----END CERTIFICATE-----Generated at Wed May 13 15:37:52 2026 by rpki-client