$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/22602df3-16e2-3987-a89a-fec985b84c16.roa File: 22602df3-16e2-3987-a89a-fec985b84c16.roa (raw, json) Hash identifier: UBwGaH+3jG/JzQ9f98rEtB+Veuq1BUiJTgtAX5AYSIc= Subject key identifier: 85:95:4D:FA:04:B8:1A:BA:58:A5:48:C2:E2:20:5C:A4:FE:D4:DF:5F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F2D87C6FA01621C822EA56780 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/22602df3-16e2-3987-a89a-fec985b84c16.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 158.120.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c6:fa:01:62:1c:82:2e:a5:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=fe0fc85a-04b9-4fd1-976e-f5bccbdab165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:99:cc:4b:94:75:b6:25:c9:80:4e:bb:62: a2:0e:93:14:cf:d1:b2:1e:6f:7f:d9:51:b5:4b:c8: 79:24:ae:0e:7b:3d:71:26:63:e8:60:e7:76:bb:0e: e7:1a:9d:db:5c:76:c5:04:17:b6:30:ed:71:9a:49: 88:31:ac:b2:a5:b4:40:46:28:94:a5:09:12:44:ee: c3:85:be:d3:e4:b8:ce:0c:b7:11:f3:25:d3:18:79: cf:9b:1c:c8:2a:dc:f3:87:d0:e8:bf:2d:21:82:29: ba:f3:08:4f:86:60:df:8d:0c:d0:d9:95:6e:88:9a: b2:f4:50:07:3a:cd:01:8d:7c:d6:4c:28:57:ce:74: 57:5c:0c:37:b9:a1:67:2b:dd:22:62:15:a6:17:a1: 5f:32:68:f3:08:4b:17:c1:ec:1a:97:74:c2:03:b1: d0:6c:46:af:47:cb:7c:cc:43:44:aa:35:c4:15:d3: 21:e4:c6:f0:45:56:72:e8:cd:8e:6c:6a:a8:54:07: aa:87:33:2c:b0:ef:d2:d6:67:f8:1f:46:10:1d:8d: 39:25:a7:d5:aa:7c:87:9d:03:13:d7:63:83:08:f6: 88:51:a8:da:92:68:ce:71:f6:ab:12:7b:69:23:e9: 87:e9:64:e0:84:bc:2c:c6:82:23:ed:a9:2d:97:38: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:95:4D:FA:04:B8:1A:BA:58:A5:48:C2:E2:20:5C:A4:FE:D4:DF:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/22602df3-16e2-3987-a89a-fec985b84c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:29:c5:59:02:c7:10:50:b8:50:d1:ce:f8:d5:17:af:6d:c3: ef:e8:8b:75:74:43:07:1b:e7:24:ca:59:e4:d8:56:cd:00:76: d1:42:94:df:d7:a0:39:44:cb:f4:6d:b0:2c:18:f5:f7:67:d6: 5f:e4:ce:f6:3f:24:3b:49:16:8e:32:a8:45:1c:39:a4:86:14: f4:0d:34:c2:6a:01:c2:40:4e:c4:79:27:07:0f:b8:a8:be:3a: f8:eb:a1:ff:9c:74:fb:0a:3a:35:7e:79:c8:44:57:7b:95:81: 23:60:2d:c6:ac:ba:ca:dd:e4:fd:6d:45:d8:fe:c2:f5:2d:57: ff:b6:9a:70:45:73:11:0f:a7:f5:4f:0a:4a:99:0f:dc:3f:a0: dd:98:4b:39:15:0e:96:40:1a:29:f7:ff:22:55:ff:dd:6f:e4: 1f:08:af:cb:98:22:4e:14:bb:07:1f:bd:4c:d9:1c:0b:b6:9c: 83:b4:2d:54:36:d1:bf:c3:86:d1:62:e5:12:4e:34:a1:b1:ff: d8:9c:39:0f:61:a1:8a:29:c2:29:9e:b4:58:52:9a:41:83:9d: a8:e1:d6:47:a8:17:b2:54:f0:d6:4b:26:8c:b5:89:6e:fb:69: 8a:64:1f:f8:40:01:d9:10:9e:01:35:99:b5:b7:fc:dd:45:09: 12:02:e0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th8b6AWIcgi6lZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmUwZmM4NWEtMDRiOS00ZmQxLTk3NmUtZjViY2NiZGFiMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLqZzEuUdbYlyYBOu2KiDpMUz9GyHm9/2VG1 S8h5JK4Oez1xJmPoYOd2uw7nGp3bXHbFBBe2MO1xmkmIMayypbRARiiUpQkSRO7D hb7T5LjODLcR8yXTGHnPmxzIKtzzh9Dovy0hgim68whPhmDfjQzQ2ZVuiJqy9FAH Os0BjXzWTChXznRXXAw3uaFnK90iYhWmF6FfMmjzCEsXwewal3TCA7HQbEavR8t8 zENEqjXEFdMh5MbwRVZy6M2ObGqoVAeqhzMssO/S1mf4H0YQHY05JafVqnyHnQMT 12ODCPaIUajakmjOcfarEntpI+mH6WTghLwsxoIj7aktlzj70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWVTfoEuBq6WKVIwuIgXKT+1N9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMjI2MDJkZjMtMTZlMi0z OTg3LWE4OWEtZmVjOTg1Yjg0YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnngYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwpxVkCxxBQuFDRzvjVF69tw+/oi3V0Qwcb5yTKWeTYVs0AdtFClN/X oDlEy/RtsCwY9fdn1l/kzvY/JDtJFo4yqEUcOaSGFPQNNMJqAcJATsR5JwcPuKi+ Ovjrof+cdPsKOjV+echEV3uVgSNgLcasusrd5P1tRdj+wvUtV/+2mnBFcxEPp/VP CkqZD9w/oN2YSzkVDpZAGin3/yJV/91v5B8Ir8uYIk4UuwcfvUzZHAu2nIO0LVQ2 0b/DhtFi5RJONKGx/9icOQ9hoYopwimetFhSmkGDnajh1keoF7JU8NZLJoy1iW77 aYpkH/hAAdkQngE1mbW3/N1FCRIC4HE= -----END CERTIFICATE-----Generated at Mon Sep 28 10:34:39 2026 by rpki-client