$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa File: cfddd6a1-ab8f-3790-8282-f78bc658b358.roa (raw, json) Hash identifier: 3+O3Be568qazN+BtSwXa4nD8/ufhiSMaKfatIzUhIOs= Subject key identifier: 69:FF:56:7E:35:40:B0:7A:35:66:0C:F7:DD:1D:50:80:0D:30:68:BD Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584DA81576AC2645E08835475800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 158.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:76:ac:26:45:e0:88:35:47:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=8f61364b-03d7-4ab3-94c0-73370c8505a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:0e:16:70:00:d1:a8:ac:f4:71:f9:d2:ac: f5:a7:17:f2:1c:55:4c:bf:b6:bd:59:3f:7c:1b:7c: 88:82:15:5b:f5:a4:33:27:c0:06:ec:40:d2:e8:d2: fc:56:2c:87:a1:14:61:b4:6c:7f:6a:e8:2b:94:ae: 06:41:54:96:8b:8b:97:1f:d0:2d:d7:c8:e4:17:d4: d3:fa:10:e3:0b:f6:9e:2a:d8:8f:be:5e:03:df:ec: f6:a8:c8:db:d9:ae:d8:3a:f7:cb:ad:11:2e:fa:35: 1f:76:ab:a4:6f:91:2d:f6:5d:1f:79:be:35:12:f3: 37:70:e0:5d:ec:3f:39:5f:bc:b0:89:80:ff:f7:1a: c5:cd:fe:4a:e2:6e:c0:27:94:ab:ba:f2:33:97:41: ad:4b:54:be:69:5a:45:e6:e1:d9:84:50:79:7f:77: 97:2b:85:4f:48:81:93:7b:70:bc:0b:c0:f9:35:a2: e4:e2:99:af:fd:d4:11:db:d3:6a:72:d4:67:f0:3b: 6d:0b:9c:b6:31:cf:22:35:db:0f:79:cf:b7:c2:db: 56:60:de:04:c9:11:6c:4c:52:b8:00:8e:74:98:c5: a8:8a:55:08:67:5b:a4:4f:42:2d:18:f4:2d:02:b7: 11:40:f7:f4:9f:d0:e9:ac:84:a5:71:fc:b9:f5:bb: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:56:7E:35:40:B0:7A:35:66:0C:F7:DD:1D:50:80:0D:30:68:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:70:ef:13:e1:88:0f:3c:1f:e7:b3:49:62:58:d6:75:65:54: 85:20:c0:c0:d0:9c:cd:60:52:4e:8f:55:44:1e:fb:db:66:fe: f3:c6:12:6f:a0:e0:8e:d0:83:f3:38:95:9d:36:4b:0f:5d:2a: 20:2f:cf:f9:63:bd:b3:83:c7:3a:71:52:cf:67:cf:f9:f7:6b: dc:60:b0:c9:63:2c:ec:7d:85:68:77:80:7b:99:82:d9:69:5e: 80:88:20:54:57:5e:41:6d:7a:62:66:99:81:c8:c2:e5:b1:78: 79:a9:1b:41:17:cc:c4:8b:15:8d:dd:55:c2:08:c4:15:ae:12: 7a:5c:7d:e6:87:d5:5c:06:c9:da:17:c7:04:17:85:d1:7c:4e: 7f:ef:62:25:3a:f4:dc:c6:a2:23:ed:35:73:e9:d7:15:fd:30: 67:32:75:70:cb:9d:30:81:d5:e3:94:01:a5:d4:59:09:99:ee: d0:89:be:11:d0:de:1b:02:ba:6e:db:53:a2:c1:c4:cd:54:f6: ef:6c:dc:aa:9a:97:b5:5d:87:52:cd:dd:d8:7b:2a:19:ac:90: d0:e1:55:17:42:6f:b0:5b:b8:23:6d:57:72:b3:65:01:43:8e: d5:a5:71:3c:c4:aa:bb:b6:de:91:ae:3b:64:f0:14:ab:bb:27: 19:40:2b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXasJkXgiDVHWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk OGY2MTM2NGItMDNkNy00YWIzLTk0YzAtNzMzNzBjODUwNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz0OFnAA0ais9HH50qz1pxfyHFVMv7a9WT98 G3yIghVb9aQzJ8AG7EDS6NL8ViyHoRRhtGx/augrlK4GQVSWi4uXH9At18jkF9TT +hDjC/aeKtiPvl4D3+z2qMjb2a7YOvfLrREu+jUfdqukb5Et9l0feb41EvM3cOBd 7D85X7ywiYD/9xrFzf5K4m7AJ5SruvIzl0GtS1S+aVpF5uHZhFB5f3eXK4VPSIGT e3C8C8D5NaLk4pmv/dQR29NqctRn8DttC5y2Mc8iNdsPec+3wttWYN4EyRFsTFK4 AI50mMWoilUIZ1ukT0ItGPQtArcRQPf0n9DprISlcfy59bsGpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn/Vn41QLB6NWYM990dUIANMGi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2ZkZGQ2YTEtYWI4Zi0z NzkwLTgyODItZjc4YmM2NThiMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5w7xPhiA88H+ezSWJY1nVlVIUgwMDQnM1gUk6PVUQe+9tm/vPGEm+g 4I7Qg/M4lZ02Sw9dKiAvz/ljvbODxzpxUs9nz/n3a9xgsMljLOx9hWh3gHuZgtlp XoCIIFRXXkFtemJmmYHIwuWxeHmpG0EXzMSLFY3dVcIIxBWuEnpcfeaH1VwGydoX xwQXhdF8Tn/vYiU69NzGoiPtNXPp1xX9MGcydXDLnTCB1eOUAaXUWQmZ7tCJvhHQ 3hsCum7bU6LBxM1U9u9s3Kqal7Vdh1LN3dh7KhmskNDhVRdCb7BbuCNtV3KzZQFD jtWlcTzEqru23pGuO2TwFKu7JxlAK0s= -----END CERTIFICATE-----Generated at Wed May 13 16:38:02 2026 by rpki-client