$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa File: 7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa (raw, json) Hash identifier: fnHjM95cUJ1yPdH+bBtmSqz25qatySalltDEwUA+abE= Subject key identifier: 9B:AB:3C:4B:76:C4:FF:BE:45:F2:85:C5:FA:5B:D7:90:01:9F:A8:4A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B0746AF4FFC77F7D9DBEE4E80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 31898 IP address blocks: 158.120.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:af:4f:fc:77:f7:d9:db:ee:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=dd386433-d883-4edc-9857-15f67bf1965a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:81:d5:5c:df:8f:45:3a:79:0c:37:78:d4:9c: 51:8b:c7:76:6c:0e:7b:9f:42:d7:39:6e:48:7f:49: 52:f2:09:78:72:26:58:c5:5a:17:a9:76:3c:2b:53: 4a:53:92:8d:5b:a7:77:b9:62:de:0e:cc:d1:f8:6d: 32:5e:6f:f5:8f:1b:9b:c1:5a:e2:f1:55:82:51:4c: 29:98:8d:57:90:d8:72:e8:37:b9:cd:f5:f2:09:b8: f9:30:a8:05:3f:f8:dc:9a:db:c8:a0:55:5c:f1:b1: 6d:29:bb:a3:0c:d9:0d:14:ae:2b:87:8f:3e:d8:41: 5c:1b:a9:54:0a:68:b5:42:bf:fc:99:e0:a4:80:9f: c6:db:96:b1:d4:11:3f:f3:a6:08:c1:7a:48:af:58: 14:84:16:30:91:1d:3e:16:59:50:0f:ad:54:71:0b: 3a:23:39:8b:4a:d8:30:1b:a4:81:ad:cd:8d:2d:29: 25:12:90:94:00:eb:9f:fb:bd:b9:f4:39:de:ff:2b: 9b:1d:e6:41:8b:e0:eb:ff:8d:9f:ac:6f:18:0e:c6: 56:51:e5:07:34:80:08:e4:d7:74:7f:1a:61:ae:15: a4:47:15:a3:13:df:66:2c:a6:10:bf:f0:ed:ae:b4: 3b:83:4f:7a:3d:fb:37:cf:1a:ac:27:ff:64:19:b7: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:3C:4B:76:C4:FF:BE:45:F2:85:C5:FA:5B:D7:90:01:9F:A8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:29:28:ef:d3:cd:c1:41:ee:55:e4:12:c5:ef:47:f4:5b:96: b2:04:f0:73:b1:16:49:41:fc:08:03:1b:d3:ff:0f:13:be:33: 49:d0:ac:8e:58:0b:5b:b8:bb:78:76:f4:38:b9:54:c0:5f:b6: cb:95:a8:62:20:55:1b:c8:e1:a5:c5:f1:2c:3a:af:2c:64:70: 90:b4:1b:a4:05:be:f6:4f:59:80:44:ec:e6:d8:c8:a6:28:09: 5f:bb:f8:3d:63:bc:00:40:d3:b4:2e:0c:34:27:4b:d9:ae:1b: a6:40:3f:91:7c:05:7a:d6:98:ad:71:3f:91:47:ce:f0:5f:98: 49:b6:bd:45:6c:d2:1c:8a:b0:3c:5f:4e:e1:14:b4:44:a4:72: aa:af:32:f9:f7:a7:2e:0e:fb:02:b9:94:b6:7b:14:96:f3:b8: 46:85:df:aa:c2:d7:4e:ca:fe:a3:54:e5:2b:0a:26:f8:00:72: 0b:ac:50:93:6b:95:45:22:d6:42:60:90:dd:14:6c:3f:22:94: 14:88:b2:94:5d:16:1e:1c:7e:bf:48:09:16:8c:ab:3f:60:95: 79:72:b0:41:d5:75:86:d2:39:a8:8d:68:18:b4:49:0d:5d:d3: a1:43:b7:98:a9:5f:18:ad:2a:d4:04:80:fb:b6:dd:c2:52:a4: da:83:8e:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRq9P/Hf32dvuToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZGQzODY0MzMtZDg4My00ZWRjLTk4NTctMTVmNjdiZjE5NjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYHVXN+PRTp5DDd41JxRi8d2bA57n0LXOW5I f0lS8gl4ciZYxVoXqXY8K1NKU5KNW6d3uWLeDszR+G0yXm/1jxubwVri8VWCUUwp mI1XkNhy6De5zfXyCbj5MKgFP/jcmtvIoFVc8bFtKbujDNkNFK4rh48+2EFcG6lU Cmi1Qr/8meCkgJ/G25ax1BE/86YIwXpIr1gUhBYwkR0+FllQD61UcQs6IzmLStgw G6SBrc2NLSklEpCUAOuf+7259Dne/yubHeZBi+Dr/42frG8YDsZWUeUHNIAI5Nd0 fxphrhWkRxWjE99mLKYQv/DtrrQ7g096Pfs3zxqsJ/9kGbfqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJurPEt2xP++RfKFxfpb15ABn6hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvN2U2YzBlNWItMTIyMy0z YWY4LTllMWUtMmQzNmE1NGJiZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcpKO/TzcFB7lXkEsXvR/RblrIE8HOxFklB/AgDG9P/DxO+M0nQrI5Y C1u4u3h29Di5VMBftsuVqGIgVRvI4aXF8Sw6ryxkcJC0G6QFvvZPWYBE7ObYyKYo CV+7+D1jvABA07QuDDQnS9muG6ZAP5F8BXrWmK1xP5FHzvBfmEm2vUVs0hyKsDxf TuEUtESkcqqvMvn3py4O+wK5lLZ7FJbzuEaF36rC107K/qNU5SsKJvgAcgusUJNr lUUi1kJgkN0UbD8ilBSIspRdFh4cfr9ICRaMqz9glXlysEHVdYbSOaiNaBi0SQ1d 06FDt5ipXxitKtQEgPu23cJSpNqDjpY= -----END CERTIFICATE-----Generated at Thu Sep 18 03:55:21 2025 by rpki-client