$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa File: 6bf652f0-96db-31c2-820e-46026e39ff44.roa (raw, json) Hash identifier: ymGQdus50qavmbG/jMShz8DYtAzCfVGakxFrK2R8OnE= Subject key identifier: A0:22:4C:D1:23:E8:83:FF:E6:25:8E:4A:21:9A:BB:59:54:2A:41:88 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A2ABAE1B49DF8BF858539CC80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 31898 IP address blocks: 158.120.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e1:b4:9d:f8:bf:85:85:39:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=4df1a9fa-48ed-4325-b3ed-f771db26f467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:96:d7:1c:22:29:38:8d:9a:a7:3c:fd:20: 8c:50:4c:49:a3:b1:b8:c2:d2:06:09:b3:6e:b8:51: a4:a5:f5:b5:a2:d3:30:da:59:2a:35:32:3a:2e:b9: 20:24:5b:d3:82:46:46:d5:f2:d9:50:40:20:8c:82: 69:bb:55:b3:be:9e:ab:b2:cc:08:0c:6f:5d:aa:9b: 5e:f5:cb:16:e3:ce:e1:d2:42:b6:d2:d3:98:7a:c7: 4b:f6:9f:a6:37:57:ab:31:03:60:7f:c0:3d:0f:ce: 99:c2:a5:29:43:80:a1:71:bf:29:ba:be:45:96:de: 79:fa:d5:a8:0b:39:e5:d8:69:f6:72:6b:68:af:06: e7:07:d4:11:48:f4:e4:f8:16:f9:7c:ea:45:ff:b6: 06:bd:75:da:87:ca:72:74:13:32:2b:ec:df:37:96: ca:c1:7b:69:6e:64:cb:e8:bc:90:14:31:56:f8:d3: 9f:07:42:b3:20:8f:f1:e5:25:7d:11:04:1d:61:7e: 7a:e4:08:73:cd:a8:86:c1:c4:6e:5d:f9:ba:e8:02: 3d:f4:14:38:71:a8:19:f3:01:44:ac:a5:6e:6e:d1: 82:7f:d8:62:96:bb:b0:34:b3:e1:f8:05:23:8d:29: a6:b5:6e:f1:73:03:63:83:09:9a:11:0e:4e:29:39: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:22:4C:D1:23:E8:83:FF:E6:25:8E:4A:21:9A:BB:59:54:2A:41:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:88:0c:98:58:7d:a0:ed:cc:24:76:e8:c1:9f:6d:85:b8:bc: 2f:d8:71:56:67:cc:07:52:64:16:1a:a9:4a:34:d8:34:15:1a: 69:bd:ee:94:e3:2a:0c:e6:0b:ea:4b:41:8d:df:0f:97:03:6b: 25:eb:64:c9:f8:43:b7:f2:f0:19:c2:3e:f7:0d:b1:10:27:c3: d2:14:e2:ee:83:25:c2:04:17:a9:fc:05:bb:72:60:95:8c:d8: 21:ee:e5:96:d0:ea:9c:35:ad:7f:6d:24:09:72:23:85:ff:85: 7d:85:b8:30:e4:76:23:2c:0f:03:58:86:83:2c:d4:be:58:54: 05:4a:b3:90:1b:64:be:50:fb:00:75:6a:47:ef:7c:76:4d:c5: b6:cc:de:f0:0b:cf:cb:16:8e:49:a1:82:37:46:0c:5c:df:2e: 67:ef:77:b9:73:13:b0:86:15:ec:15:8b:1f:bd:55:48:f2:7a: 9e:37:fd:63:ee:85:d4:5a:ae:b3:93:7e:e1:43:72:28:e7:83: d5:d2:7d:d2:c2:53:bb:a7:e8:e5:5d:41:d0:e3:9f:60:75:e9: 9d:b6:dc:0a:01:dd:de:a7:67:b1:0d:e1:7d:d0:ff:12:f4:db: 0f:fa:96:8c:84:10:60:d2:03:c5:ff:d3:ac:04:d1:0c:7c:94: ad:08:aa:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuG0nfi/hYU5zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NGRmMWE5ZmEtNDhlZC00MzI1LWIzZWQtZjc3MWRiMjZmNDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0yW1xwiKTiNmqc8/SCMUExJo7G4wtIGCbNu uFGkpfW1otMw2lkqNTI6LrkgJFvTgkZG1fLZUEAgjIJpu1Wzvp6rsswIDG9dqpte 9csW487h0kK20tOYesdL9p+mN1erMQNgf8A9D86ZwqUpQ4Chcb8pur5Flt55+tWo Cznl2Gn2cmtorwbnB9QRSPTk+Bb5fOpF/7YGvXXah8pydBMyK+zfN5bKwXtpbmTL 6LyQFDFW+NOfB0KzII/x5SV9EQQdYX565AhzzaiGwcRuXfm66AI99BQ4cagZ8wFE rKVubtGCf9hilruwNLPh+AUjjSmmtW7xcwNjgwmaEQ5OKTkH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAiTNEj6IP/5iWOSiGau1lUKkGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmJmNjUyZjAtOTZkYi0z MWMyLTgyMGUtNDYwMjZlMzlmZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnngcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+IDJhYfaDtzCR26MGfbYW4vC/YcVZnzAdSZBYaqUo02DQVGmm97pTj KgzmC+pLQY3fD5cDayXrZMn4Q7fy8BnCPvcNsRAnw9IU4u6DJcIEF6n8BbtyYJWM 2CHu5ZbQ6pw1rX9tJAlyI4X/hX2FuDDkdiMsDwNYhoMs1L5YVAVKs5AbZL5Q+wB1 akfvfHZNxbbM3vALz8sWjkmhgjdGDFzfLmfvd7lzE7CGFewVix+9VUjyep43/WPu hdRarrOTfuFDcijng9XSfdLCU7un6OVdQdDjn2B16Z223AoB3d6nZ7EN4X3Q/xL0 2w/6loyEEGDSA8X/06wE0Qx8lK0IqnU= -----END CERTIFICATE-----Generated at Sun Jun 29 14:11:41 2025 by rpki-client