$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa File: cfddd6a1-ab8f-3790-8282-f78bc658b358.roa (raw, json) Hash identifier: bYsTc0m2RXrLfEtP8C7XN43gr6UYUzOh8JAu6YMvkag= Subject key identifier: 49:03:56:00:9C:BB:3B:29:AD:2C:F7:4B:E2:39:12:F2:DE:13:CA:CE Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584E885A3E134D691608BDBAB4A0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 158.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:3e:13:4d:69:16:08:bd:ba:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=668a0b04-ca67-46db-8e86-3da54531093b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c1:87:11:d7:23:bb:cd:54:4d:da:30:f3:f8: 6c:a3:99:14:65:71:2d:0e:f0:b4:13:41:17:b0:3c: f8:9a:47:5c:2d:c8:97:87:e6:13:e3:51:98:8c:2f: 87:27:01:cd:d3:33:f5:15:a4:07:48:b8:b5:97:0a: 87:2d:aa:05:e3:f9:ac:de:72:b4:ed:ed:05:87:e4: f1:b6:73:f2:95:62:62:32:61:07:2a:38:b3:30:20: c6:13:a1:f2:1d:0d:7f:54:28:f4:fb:1c:65:c4:80: 78:ef:e8:28:0c:48:c5:85:ef:96:5a:7e:43:5a:fc: f7:59:f0:db:74:73:3e:32:71:99:6a:11:26:38:ed: ee:8f:8b:f9:69:7d:60:55:bf:96:f7:87:c2:ac:92: df:c6:79:19:a9:2f:80:a6:ac:15:4a:31:14:c6:cc: de:91:3c:6b:85:32:fe:d6:20:73:9d:66:30:62:04: ef:c2:51:a8:d1:0e:2e:08:43:f4:dc:3e:60:69:6c: 19:0e:5e:8a:d8:9c:59:af:81:db:c4:94:54:3f:13: 7b:1a:ec:0c:ee:55:d5:35:45:f9:29:50:86:83:cb: 87:f6:44:b2:3c:bc:61:7e:fb:7e:2d:2e:32:20:9c: 54:b7:14:a3:2e:8d:04:8d:99:4b:10:aa:44:dd:d8: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:03:56:00:9C:BB:3B:29:AD:2C:F7:4B:E2:39:12:F2:DE:13:CA:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:68:34:73:50:41:7e:61:bb:d8:bb:e7:f2:8b:66:94:14:fc: aa:78:b0:a1:ed:79:38:a5:77:62:58:a3:3c:d7:f6:60:da:b6: bf:ef:2f:64:41:3d:3c:02:ab:3f:2b:8b:24:cc:47:b6:c1:1d: d5:be:d1:1c:31:d2:22:a2:81:d5:85:98:4c:a2:c3:a9:b5:0d: 7e:ca:a6:48:23:6e:1b:8b:a0:1f:ed:66:54:b6:46:3b:46:24: ba:b4:0a:f5:41:c8:b8:02:27:c4:66:9e:17:49:c7:9f:75:7e: fd:1e:18:73:37:d1:0c:e1:d6:76:bc:ff:89:59:a5:ed:2e:e7: 58:34:b8:09:1d:95:cb:c4:7c:34:b1:f0:cc:95:64:7d:0f:3d: e1:80:d7:82:1d:64:4c:de:b1:4f:2e:3e:02:be:55:74:bd:da: 32:77:40:ec:09:3c:6f:73:04:9b:17:b3:7a:61:ab:86:57:f5: f1:c0:53:f0:2d:9c:ac:f4:82:55:a0:01:2d:2d:3c:c1:a8:fb: 40:89:da:cc:62:bd:77:86:e2:70:5d:2d:e5:27:d3:6d:ef:84: 4a:af:e7:12:07:04:e3:3f:a2:59:e2:3f:80:24:ca:f0:2d:ae: 63:c1:5d:75:f1:f8:1e:4b:f3:f6:c9:2e:d1:b9:18:ac:1b:d1: 68:02:9f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWj4TTWkWCL26tKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk NjY4YTBiMDQtY2E2Ny00NmRiLThlODYtM2RhNTQ1MzEwOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisGHEdcju81UTdow8/hso5kUZXEtDvC0E0EX sDz4mkdcLciXh+YT41GYjC+HJwHN0zP1FaQHSLi1lwqHLaoF4/ms3nK07e0Fh+Tx tnPylWJiMmEHKjizMCDGE6HyHQ1/VCj0+xxlxIB47+goDEjFhe+WWn5DWvz3WfDb dHM+MnGZahEmOO3uj4v5aX1gVb+W94fCrJLfxnkZqS+ApqwVSjEUxszekTxrhTL+ 1iBznWYwYgTvwlGo0Q4uCEP03D5gaWwZDl6K2JxZr4HbxJRUPxN7GuwM7lXVNUX5 KVCGg8uH9kSyPLxhfvt+LS4yIJxUtxSjLo0EjZlLEKpE3dgMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkDVgCcuzsprSz3S+I5EvLeE8rOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2ZkZGQ2YTEtYWI4Zi0z NzkwLTgyODItZjc4YmM2NThiMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZoNHNQQX5hu9i75/KLZpQU/Kp4sKHteTild2JYozzX9mDatr/vL2RB PTwCqz8riyTMR7bBHdW+0Rwx0iKigdWFmEyiw6m1DX7KpkgjbhuLoB/tZlS2RjtG JLq0CvVByLgCJ8RmnhdJx591fv0eGHM30Qzh1na8/4lZpe0u51g0uAkdlcvEfDSx 8MyVZH0PPeGA14IdZEzesU8uPgK+VXS92jJ3QOwJPG9zBJsXs3phq4ZX9fHAU/At nKz0glWgAS0tPMGo+0CJ2sxivXeG4nBdLeUn023vhEqv5xIHBOM/olniP4AkyvAt rmPBXXXx+B5L8/bJLtG5GKwb0WgCn5M= -----END CERTIFICATE-----Generated at Fri Jul 24 16:27:32 2026 by rpki-client