$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa File: 03e688c7-732f-3297-8ea1-e37d0210334f.roa (raw, json) Hash identifier: EJ/P3vsoJRlVCiZUGNuvWWeRfRwcF9NI58uMBGEND3I= Subject key identifier: 0A:35:D8:62:2F:0B:15:AC:55:B9:B5:89:49:FA:6B:51:5F:20:98:36 Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F4328584EB2B1B809B245C9410B65A380 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 53407 IP address blocks: 158.120.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:b8:09:b2:45:c9:41:0b:65:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=98baec5d-1b9f-48d1-a8b6-287d331a9141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:84:86:5a:d5:08:f0:c1:cb:c7:dc:89:66: 10:6c:0e:32:3d:6a:27:1b:cb:7d:52:05:b3:94:19: 1f:37:61:c3:40:18:04:0b:bc:6c:49:b8:8c:ef:e3: 4f:b0:94:8a:69:ee:77:a4:85:46:f3:2f:9a:4e:18: 1c:59:4a:fa:45:5c:1f:7f:88:4e:dd:d7:cd:cb:61: 38:ba:fa:af:cd:f9:7b:bd:b3:3a:2e:9f:2c:50:d0: 98:bd:be:37:3d:c0:79:aa:77:c2:b1:cd:63:3d:62: 68:78:70:08:39:25:22:b8:5b:3d:9c:ff:17:b4:04: 5f:e9:e5:40:4b:e6:d0:d5:f9:8f:47:14:f9:8c:61: f7:12:27:89:71:79:87:0e:8f:06:91:09:e5:c7:6f: 99:c0:2c:29:82:f1:11:61:1f:8a:35:5a:f5:26:21: 39:6e:74:a0:3c:1b:ed:ff:07:cb:b3:ed:f3:2d:88: 82:ac:18:1f:e6:19:9c:b0:4d:30:98:c2:7f:c4:1d: 22:4d:e2:0d:69:21:dc:6a:e9:35:11:34:85:cb:67: f8:19:98:58:d1:63:a1:f7:44:3e:c2:de:da:01:27: b8:fb:f9:f2:2a:fa:29:ad:cc:92:38:80:68:c3:79: 56:67:3c:af:fb:66:62:7d:5f:82:1f:4a:ee:5e:10: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:35:D8:62:2F:0B:15:AC:55:B9:B5:89:49:FA:6B:51:5F:20:98:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/03e688c7-732f-3297-8ea1-e37d0210334f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 158.120.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:53:3d:a2:23:4e:9b:41:5b:64:a5:72:0d:b8:17:2f:ad:cc: b2:dc:9b:e6:99:87:3e:64:a9:f9:b0:f9:75:24:4a:73:dc:db: 9e:87:5d:12:e5:69:ec:1e:52:20:7a:5a:a3:9d:06:6b:7f:5e: 7d:7c:13:95:54:c9:a0:95:df:99:0a:97:18:39:d5:7e:30:ad: f6:e9:27:57:f7:d0:72:c3:83:47:0f:94:d8:e5:17:02:cc:c1: c8:73:db:a9:b0:ea:e7:d1:0e:b6:d9:53:9f:ab:8a:4d:0f:bd: da:41:b5:fb:c4:4f:bb:6c:b9:0d:96:dd:19:90:38:5d:98:c2: 4a:a8:e4:52:1d:85:e7:97:c5:06:20:e0:a6:62:eb:c2:49:3f: 50:6d:c9:85:7f:b8:be:e5:ae:16:29:13:4e:22:e2:f3:e8:12: 76:1b:ea:d9:e6:59:51:fa:54:19:fb:22:71:7f:03:ca:93:a5: 3a:dd:c0:0d:b5:49:e2:65:98:02:c1:86:c4:ff:e3:0e:02:1c: 21:5d:a3:ec:c3:40:9b:e1:5d:b5:ff:85:c1:55:03:f7:9a:71: a0:ca:9d:96:01:29:68:33:30:a2:b6:e4:ac:01:41:8b:a0:30: 1a:da:27:a6:b2:15:f2:5a:20:c0:c0:2b:8e:81:46:a4:4f:3c: 4e:5e:fc:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbgJskXJQQtlo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OThiYWVjNWQtMWI5Zi00OGQxLWE4YjYtMjg3ZDMzMWE5MTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD2EhlrVCPDBy8fciWYQbA4yPWonG8t9UgWz lBkfN2HDQBgEC7xsSbiM7+NPsJSKae53pIVG8y+aThgcWUr6RVwff4hO3dfNy2E4 uvqvzfl7vbM6Lp8sUNCYvb43PcB5qnfCsc1jPWJoeHAIOSUiuFs9nP8XtARf6eVA S+bQ1fmPRxT5jGH3EieJcXmHDo8GkQnlx2+ZwCwpgvERYR+KNVr1JiE5bnSgPBvt /wfLs+3zLYiCrBgf5hmcsE0wmMJ/xB0iTeINaSHcauk1ETSFy2f4GZhY0WOh90Q+ wt7aASe4+/nyKvoprcySOIBow3lWZzyv+2ZifV+CH0ruXhAPPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo12GIvCxWsVbm1iUn6a1FfIJg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvMDNlNjg4YzctNzMyZi0z Mjk3LThlYTEtZTM3ZDAyMTAzMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnngoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARTPaIjTptBW2Slcg24Fy+tzLLcm+aZhz5kqfmw+XUkSnPc256HXRLl aeweUiB6WqOdBmt/Xn18E5VUyaCV35kKlxg51X4wrfbpJ1f30HLDg0cPlNjlFwLM wchz26mw6ufRDrbZU5+rik0PvdpBtfvET7tsuQ2W3RmQOF2Ywkqo5FIdheeXxQYg 4KZi68JJP1BtyYV/uL7lrhYpE04i4vPoEnYb6tnmWVH6VBn7InF/A8qTpTrdwA21 SeJlmALBhsT/4w4CHCFdo+zDQJvhXbX/hcFVA/eacaDKnZYBKWgzMKK25KwBQYug MBraJ6ayFfJaIMDAK46BRqRPPE5e/Js= -----END CERTIFICATE-----Generated at Fri Aug 21 02:01:39 2026 by rpki-client