$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa File: 1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa (raw, json) Hash identifier: 8cjAtXhJvCjeUAZlAOTImc9vev/uKbjAbbWJ4/0LSmQ= Subject key identifier: 98:C1:F7:82:82:A2:DA:F6:BB:BB:BD:B4:71:6C:CD:BD:70:F2:FE:C8 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BDC64E3A0BBB2D808E774B1A8 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa Signing time: Fri 14 Nov 2025 21:08:49 +0000 ROA not before: Fri 14 Nov 2025 21:08:49 +0000 ROA not after: Thu 12 Feb 2026 21:08:49 +0000 asID: 31898 IP address blocks: 158.120.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:64:e3:a0:bb:b2:d8:08:e7:74:b1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 14 21:08:49 2025 GMT Not After : Feb 12 21:08:49 2026 GMT Subject: CN=91761cde-04a6-4bfc-8bcc-461ba9dc5e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:70:b3:e3:d3:93:37:bc:7e:b2:0b:4d:cd: 4c:07:00:cd:26:28:40:1d:9e:f8:00:40:af:0c:f2: b9:0b:78:f3:76:93:ae:88:56:57:bf:53:2c:c6:03: b7:c0:6e:09:2e:6e:96:3f:f6:5d:cc:df:00:17:f0: 40:5f:bb:6b:e5:b6:34:8f:cd:3e:be:5a:4e:c5:49: 76:21:bf:52:42:2a:5a:d5:7a:24:12:ce:49:64:d6: f9:4a:d6:44:99:82:db:e1:22:88:fc:76:3c:cb:10: cc:3b:f0:88:37:15:4b:22:e3:48:8f:53:86:fb:1a: 45:43:f8:ba:75:eb:6c:13:62:39:9a:f5:dc:c4:04: 62:97:d5:fe:b1:cf:50:5e:22:9f:f2:7a:ef:4e:a9: 51:4e:ba:b7:83:7a:94:f8:52:4b:b0:b6:18:5f:ff: e7:57:fa:5a:cb:a3:25:3f:8c:fe:0d:e2:5e:69:49: 97:76:cb:da:77:43:2e:aa:46:64:6e:95:f6:f6:8b: 05:e0:32:fd:94:e6:d1:e5:9b:2a:64:89:7e:3b:50: ba:7c:78:1d:8a:a8:44:ec:e5:a7:59:41:91:57:8b: 0b:e8:f6:db:23:85:a3:f1:fb:24:7e:56:38:cc:d9: a6:b6:d4:bb:a2:69:a2:5c:9b:3d:da:2e:3f:f1:b3: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:F7:82:82:A2:DA:F6:BB:BB:BD:B4:71:6C:CD:BD:70:F2:FE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/1e5cffb6-0d69-3b83-aaa8-5e2034c2d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e1:88:2b:f7:54:22:10:ad:5b:99:20:a5:e5:5a:bf:f7:6e: 25:dd:c7:19:1a:a9:99:8b:f3:32:77:78:c2:54:fc:5a:f9:d4: db:46:b5:8e:f7:96:c2:35:1d:a3:a4:72:c6:68:45:53:50:fc: 95:98:df:bc:6f:94:27:ad:15:bf:09:c9:18:bf:24:e3:2e:e4: ad:86:bd:a7:9c:15:5c:f2:5d:60:41:b0:d0:6a:63:94:96:15: d9:57:a6:dc:77:4f:38:90:44:fc:ea:18:a2:b9:69:d7:0e:24: 95:ef:e9:29:22:02:55:e4:95:91:f1:b3:6e:8c:2e:21:a9:79: 48:4f:73:fc:03:c8:a2:b9:8c:6d:58:f9:0c:70:7b:ed:e3:71: c4:e1:14:db:3d:25:06:40:ba:1e:e0:02:33:f8:49:b5:e1:44: 18:a5:52:dc:c6:c8:af:b6:e6:09:c8:13:e6:d5:2f:21:b6:a8: 52:d4:30:77:60:ca:43:d7:92:2e:a5:1d:60:3a:8b:b3:e1:ee: 6c:7c:a3:5b:a5:21:3f:17:c9:11:12:0d:92:4e:b2:4d:5c:7f: 58:78:79:27:fe:e9:14:fb:8d:c1:5d:bb:85:b5:a8:7b:bd:1d: ff:be:01:0e:e8:3e:bb:8b:98:b3:63:d4:21:d1:9b:a8:0d:6d: 01:77:6d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvcZOOgu7LYCOd0sagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTExNDIxMDg0OVoXDTI2MDIxMjIxMDg0OVowLzEtMCsGA1UEAxMk OTE3NjFjZGUtMDRhNi00YmZjLThiY2MtNDYxYmE5ZGM1ZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcdws+PTkze8frILTc1MBwDNJihAHZ74AECv DPK5C3jzdpOuiFZXv1MsxgO3wG4JLm6WP/ZdzN8AF/BAX7tr5bY0j80+vlpOxUl2 Ib9SQipa1XokEs5JZNb5StZEmYLb4SKI/HY8yxDMO/CINxVLIuNIj1OG+xpFQ/i6 detsE2I5mvXcxARil9X+sc9QXiKf8nrvTqlRTrq3g3qU+FJLsLYYX//nV/pay6Ml P4z+DeJeaUmXdsvad0MuqkZkbpX29osF4DL9lObR5ZsqZIl+O1C6fHgdiqhE7OWn WUGRV4sL6PbbI4Wj8fskflY4zNmmttS7ommiXJs92i4/8bMTcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjB94KCotr2u7u9tHFszb1w8v7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMWU1Y2ZmYjYtMGQ2OS0z YjgzLWFhYTgtNWUyMDM0YzJkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnhiCv3VCIQrVuZIKXlWr/3biXdxxkaqZmL8zJ3eMJU/Fr51NtGtY73 lsI1HaOkcsZoRVNQ/JWY37xvlCetFb8JyRi/JOMu5K2GvaecFVzyXWBBsNBqY5SW FdlXptx3TziQRPzqGKK5adcOJJXv6SkiAlXklZHxs26MLiGpeUhPc/wDyKK5jG1Y +Qxwe+3jccThFNs9JQZAuh7gAjP4SbXhRBilUtzGyK+25gnIE+bVLyG2qFLUMHdg ykPXki6lHWA6i7Ph7mx8o1ulIT8XyRESDZJOsk1cf1h4eSf+6RT7jcFdu4W1qHu9 Hf++AQ7oPruLmLNj1CHRm6gNbQF3bX4= -----END CERTIFICATE-----Generated at Tue Nov 18 02:34:58 2025 by rpki-client