$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa File: 6bf652f0-96db-31c2-820e-46026e39ff44.roa (raw, json) Hash identifier: Gaf2t6bValhB2wFgPtSyrv3UaBAK/E+93pAQ+kggubE= Subject key identifier: 7E:1B:E9:1C:5B:20:51:0A:D9:D3:7E:22:E0:18:3D:D5:54:E6:B9:5A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F2EED14D36D30C43569BF1800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 158.120.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:14:d3:6d:30:c4:35:69:bf:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=4b03e50e-3abe-4b75-9a87-4fe216068783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:de:73:3f:99:4f:52:68:1c:28:ba:a7:ae: 61:e2:83:0a:c9:9f:18:6f:9a:55:47:57:61:18:c4: 06:ea:fd:3f:c5:a1:b0:70:b0:b0:7e:59:a0:45:44: ac:56:45:c7:3e:7a:f8:0f:91:6f:86:c3:b7:80:7e: be:32:15:54:e3:ef:98:c0:9f:7a:da:d1:91:9b:83: 0f:4d:a0:9f:b4:26:90:78:9e:f8:d4:27:55:fb:d7: 33:2c:00:cf:87:c5:ed:f8:d5:3f:db:94:73:80:3d: 12:46:f6:2c:e2:76:4f:90:d6:a5:1d:f7:47:67:38: 2d:58:33:7a:14:f6:c4:f2:71:e7:fa:47:9c:c1:0b: ba:3c:65:32:03:f3:11:71:5a:9d:6b:56:7a:f9:a3: 7b:9b:64:8d:91:f7:6d:57:d1:6e:2e:b0:2d:84:32: 56:11:4e:ca:ee:28:38:3b:1e:f7:4d:38:81:ad:9e: 27:71:dd:60:ba:ec:87:08:38:f1:d8:31:a3:ab:30: 58:21:a4:d6:fb:f9:99:bc:a6:ee:5d:3d:83:b7:69: a0:fb:d8:b6:4c:10:e9:50:ad:c7:fa:72:55:c9:d4: 5a:5a:02:34:f5:e4:81:d0:6c:cc:8c:06:48:eb:cd: 42:e6:9a:68:6a:58:65:17:9f:e5:2d:cb:82:da:cc: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:E9:1C:5B:20:51:0A:D9:D3:7E:22:E0:18:3D:D5:54:E6:B9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:a1:4b:28:60:2d:c9:46:21:e4:c6:b7:a8:3c:f2:1a:12:ee: 4e:33:a7:ea:fa:7c:89:6a:f7:15:6e:c6:f3:f1:1d:59:ca:3c: ae:6b:7e:fb:09:0a:28:66:35:22:82:9b:27:18:de:6d:51:6e: da:0c:99:63:d3:cd:e7:25:b3:24:8b:17:7a:c1:36:84:ee:23: 85:9c:c9:97:48:5b:88:4f:f5:67:e3:d6:83:8b:9d:00:45:81: c0:ad:a8:d7:c0:d0:4c:92:6d:17:51:6c:1b:32:e4:24:b8:db: 46:d9:6a:a9:51:83:15:cd:85:a2:e0:ba:67:c8:74:2c:15:cd: 9f:78:d7:e6:bc:87:21:41:5d:61:39:35:66:ee:65:14:44:d9: 17:21:bc:8a:2b:8d:dc:a8:c4:d3:9c:04:86:f2:2a:81:84:64: ad:9f:1e:64:b0:ec:08:1f:8e:7a:84:65:9b:bb:9b:f9:cc:85: cf:b1:96:7d:cb:2a:6c:5f:b4:99:1c:44:3a:4a:ff:2a:aa:67: 45:72:17:89:9d:ce:dd:54:2c:49:0d:8c:1b:a3:b3:79:77:84: 68:92:62:7a:2f:48:c1:75:bc:11:a5:d1:63:15:d2:7e:d3:62: f2:02:0a:f3:86:f8:3a:19:e0:92:11:c7:50:c7:b7:d6:9a:f4: 8b:80:fe:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RTTbTDENWm/GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NGIwM2U1MGUtM2FiZS00Yjc1LTlhODctNGZlMjE2MDY4NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRrecz+ZT1JoHCi6p65h4oMKyZ8Yb5pVR1dh GMQG6v0/xaGwcLCwflmgRUSsVkXHPnr4D5FvhsO3gH6+MhVU4++YwJ962tGRm4MP TaCftCaQeJ741CdV+9czLADPh8Xt+NU/25RzgD0SRvYs4nZPkNalHfdHZzgtWDN6 FPbE8nHn+kecwQu6PGUyA/MRcVqda1Z6+aN7m2SNkfdtV9FuLrAthDJWEU7K7ig4 Ox73TTiBrZ4ncd1guuyHCDjx2DGjqzBYIaTW+/mZvKbuXT2Dt2mg+9i2TBDpUK3H +nJVydRaWgI09eSB0GzMjAZI681C5ppoalhlF5/lLcuC2sxVFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4b6RxbIFEK2dN+IuAYPdVU5rlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmJmNjUyZjAtOTZkYi0z MWMyLTgyMGUtNDYwMjZlMzlmZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnngcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMmhSyhgLclGIeTGt6g88hoS7k4zp+r6fIlq9xVuxvPxHVnKPK5rfvsJ CihmNSKCmycY3m1RbtoMmWPTzeclsySLF3rBNoTuI4WcyZdIW4hP9Wfj1oOLnQBF gcCtqNfA0EySbRdRbBsy5CS420bZaqlRgxXNhaLgumfIdCwVzZ941+a8hyFBXWE5 NWbuZRRE2RchvIorjdyoxNOcBIbyKoGEZK2fHmSw7AgfjnqEZZu7m/nMhc+xln3L KmxftJkcRDpK/yqqZ0VyF4mdzt1ULEkNjBujs3l3hGiSYnovSMF1vBGl0WMV0n7T YvICCvOG+DoZ4JIRx1DHt9aa9IuA/h0= -----END CERTIFICATE-----Generated at Sun Oct 4 21:18:34 2026 by rpki-client