$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa File: 6bf652f0-96db-31c2-820e-46026e39ff44.roa (raw, json) Hash identifier: gtCVbr6sP2APN7Fkn+U8yKdzSOIkemW3zKJkB8RoRS0= Subject key identifier: A7:23:62:B0:2F:DF:21:5A:2F:B5:D4:AB:E0:31:A0:67:43:FB:4C:C1 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B0B76AE477C89B0B26B668000 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 31898 IP address blocks: 158.120.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ae:47:7c:89:b0:b2:6b:66:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=43e10810-e7c1-41b1-be8a-006c84f236ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:3c:82:39:01:df:5d:ac:8a:d5:97:46:9b: f7:5d:56:f5:7c:b6:c0:8e:99:07:2c:4e:48:52:db: 21:e4:f3:c6:72:f9:0c:d2:fc:46:0f:e3:6f:48:10: 3b:2e:b5:ad:f9:22:26:68:56:87:25:44:1a:9e:a5: 77:0d:62:6c:b2:ee:47:a4:a1:d7:46:31:2b:a3:f0: f5:e4:a6:67:7c:a2:f9:a4:e3:62:86:64:13:20:aa: 5c:8e:f5:e9:66:19:c5:04:ae:11:8e:18:03:10:e0: 9e:05:85:69:d7:f7:7c:8d:19:3d:6d:b7:73:23:3f: e9:b9:b5:87:02:a6:0e:24:13:d2:b6:24:9a:bd:41: 21:d2:10:03:8f:a2:c6:0d:14:76:9a:41:a7:aa:e4: fe:09:a9:f8:64:b7:01:a0:b5:cc:52:71:84:7c:fe: ed:ea:07:f5:5b:05:26:60:f9:b5:c4:c4:5b:b3:33: 97:52:46:41:af:40:4a:84:a9:0b:46:75:c5:cc:97: 76:77:3a:35:8f:23:08:00:bf:0a:dc:e8:6d:00:d4: 3f:e8:7b:84:e7:08:af:13:04:ae:2f:1a:1d:29:f0: 0f:5e:af:21:5e:71:1b:37:60:b4:7c:39:11:65:f2: 17:77:da:e6:19:14:a4:eb:c9:59:a6:45:e1:2c:17: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:23:62:B0:2F:DF:21:5A:2F:B5:D4:AB:E0:31:A0:67:43:FB:4C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ce:4a:63:e3:0b:05:8b:a5:2c:c3:e5:c9:55:55:9d:a6:35: a7:b0:0a:80:e9:45:53:42:e0:da:e1:32:50:df:ac:17:fe:81: b9:bc:4a:ec:25:00:62:18:94:ac:71:53:e5:cb:fd:66:44:0a: d5:b0:1d:2b:6f:42:1e:d6:a9:b4:ba:43:1f:5a:d9:75:ad:e5: ce:6a:38:45:c3:b3:bc:f6:13:8b:ff:ec:a8:e9:1c:5c:3a:55: 6f:67:cb:ad:0e:74:1d:e3:00:7a:92:0b:e2:29:c2:02:e9:bd: 65:32:86:e9:7a:12:11:10:35:bd:5a:e2:fa:15:73:d1:29:b6: 35:4a:81:fc:f4:21:fa:d3:52:84:25:a2:ea:43:46:d4:b7:ae: 7f:73:6a:ac:80:2f:b2:18:4c:44:78:5d:bb:f7:52:16:5c:64: 04:46:7a:8a:ce:3f:10:84:37:43:47:75:ed:a9:c0:e8:a8:06: 6b:aa:de:2b:52:e9:4f:9c:ad:60:b6:33:26:81:ad:44:44:23: 34:ae:02:44:1a:b1:cf:83:55:a3:8f:8e:f3:7f:7d:12:70:3c: 63:e3:38:db:65:ed:41:24:3a:47:97:c7:b6:e6:b2:e8:b2:a5: 0e:3a:e3:f6:44:44:e8:ef:00:e5:54:02:46:b2:29:0d:16:c1: 1f:08:c0:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq5HfImwsmtmgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NDNlMTA4MTAtZTdjMS00MWIxLWJlOGEtMDA2Yzg0ZjIzNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z88gjkB312sitWXRpv3XVb1fLbAjpkHLE5I Utsh5PPGcvkM0vxGD+NvSBA7LrWt+SImaFaHJUQanqV3DWJssu5HpKHXRjEro/D1 5KZnfKL5pONihmQTIKpcjvXpZhnFBK4RjhgDEOCeBYVp1/d8jRk9bbdzIz/pubWH AqYOJBPStiSavUEh0hADj6LGDRR2mkGnquT+Can4ZLcBoLXMUnGEfP7t6gf1WwUm YPm1xMRbszOXUkZBr0BKhKkLRnXFzJd2dzo1jyMIAL8K3OhtANQ/6HuE5wivEwSu LxodKfAPXq8hXnEbN2C0fDkRZfIXd9rmGRSk68lZpkXhLBf1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcjYrAv3yFaL7XUq+AxoGdD+0zBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmJmNjUyZjAtOTZkYi0z MWMyLTgyMGUtNDYwMjZlMzlmZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnngcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfOSmPjCwWLpSzD5clVVZ2mNaewCoDpRVNC4NrhMlDfrBf+gbm8Suwl AGIYlKxxU+XL/WZECtWwHStvQh7WqbS6Qx9a2XWt5c5qOEXDs7z2E4v/7KjpHFw6 VW9ny60OdB3jAHqSC+IpwgLpvWUyhul6EhEQNb1a4voVc9EptjVKgfz0IfrTUoQl oupDRtS3rn9zaqyAL7IYTER4Xbv3UhZcZARGeorOPxCEN0NHde2pwOioBmuq3itS 6U+crWC2MyaBrUREIzSuAkQasc+DVaOPjvN/fRJwPGPjONtl7UEkOkeXx7bmsuiy pQ464/ZEROjvAOVUAkayKQ0WwR8IwBc= -----END CERTIFICATE-----Generated at Thu Sep 18 04:01:35 2025 by rpki-client