$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa File: cfddd6a1-ab8f-3790-8282-f78bc658b358.roa (raw, json) Hash identifier: UZ4nGxoEnoeelnn+01XU58yM8sTAhqRhgBLQtKQxikI= Subject key identifier: F1:B3:F6:E2:94:0C:16:A3:80:AF:32:0F:2F:A7:66:2B:7E:57:57:0A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CC77733F30A14EEAF32176F00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 31898 IP address blocks: 158.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:33:f3:0a:14:ee:af:32:17:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=fa0fc7e9-3786-4c0e-990c-e9c5b9972db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:44:35:37:2f:72:b7:6b:bc:23:de:ec:b8: ac:99:21:56:20:cd:b8:2e:95:a8:74:6b:b6:a8:aa: 06:ac:3f:43:3b:45:ad:6d:7e:0b:f8:2b:6c:aa:bb: e2:8e:8c:7a:ca:3a:b3:83:53:94:0c:cd:e4:c4:62: 09:40:c9:b7:a0:f8:98:9d:41:db:cb:ab:af:6e:c9: 97:d5:9c:7d:58:7c:85:01:af:99:69:e5:3b:7e:dd: 4e:0a:0f:af:18:d4:a9:af:5d:81:e1:37:fa:f7:b6: b6:bd:2d:7f:f9:19:a8:c9:de:20:72:76:ee:b3:51: 9a:da:e5:7e:42:bd:70:19:6c:4b:ed:fd:8e:78:e5: 91:fc:0c:07:18:0d:5a:35:70:f3:d8:88:78:a2:6d: 8e:2f:ae:5b:73:f8:e4:a1:22:83:2a:c5:74:ba:fa: d1:a6:cd:96:8f:ec:62:5e:b6:20:20:e0:0e:af:61: 02:db:9b:c3:8a:ba:88:6c:0e:5a:87:39:e9:bb:63: c1:6a:06:80:c8:8f:83:9f:e7:2f:b9:8b:58:23:b6: c2:2d:77:f7:c0:08:63:d9:cf:ee:8f:8a:b3:59:b1: eb:e4:3f:8e:26:de:49:44:3e:70:39:01:f6:9b:5c: 26:90:21:90:ac:25:4a:8c:d7:69:20:fe:a0:f5:99: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B3:F6:E2:94:0C:16:A3:80:AF:32:0F:2F:A7:66:2B:7E:57:57:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:f7:99:89:61:d8:51:cc:cc:7d:0c:3f:6d:5b:ad:19:3b:78: c0:31:55:1f:48:30:7f:3d:53:29:2b:6d:3f:85:0c:d0:a5:03: 22:07:ce:ef:6c:12:ff:94:45:eb:11:de:95:c3:8f:ec:f0:48: e4:b8:2d:c4:9a:6d:23:70:54:16:a3:1b:e4:e2:f6:39:76:5e: 7d:bf:ce:be:54:fd:59:43:95:25:46:62:6f:4c:a9:52:c0:57: 82:92:39:17:8d:25:aa:ca:d0:90:59:27:f1:0a:67:3e:b7:88: 03:ad:33:27:87:f2:c4:e5:e6:c4:9c:d1:04:1d:95:d9:ca:1a: 98:64:54:7b:d9:7d:eb:c5:af:e6:ab:c2:b8:7c:03:24:ce:7b: 29:ee:85:23:48:b1:81:95:bb:c3:73:a6:11:af:4f:c1:f8:6e: aa:78:f4:56:24:d1:99:86:cc:03:2d:11:89:00:d8:58:a0:5e: 79:86:10:2d:d0:a3:ef:b3:1e:ef:1a:7a:79:cf:7c:29:36:58: c3:21:2f:2f:55:b8:e2:a1:f8:c5:d7:8f:43:6d:b2:35:bc:9d: 5e:5c:55:36:1a:2c:1c:f1:04:4e:ba:f6:d8:bc:f2:f8:37:e0: 2a:16:e0:3f:e9:48:18:48:e6:28:cd:86:ff:c1:20:c1:b0:9c: af:01:aa:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdzPzChTurzIXbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk ZmEwZmM3ZTktMzc4Ni00YzBlLTk5MGMtZTljNWI5OTcyZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydtENTcvcrdrvCPe7LismSFWIM24LpWodGu2 qKoGrD9DO0WtbX4L+Ctsqrvijox6yjqzg1OUDM3kxGIJQMm3oPiYnUHby6uvbsmX 1Zx9WHyFAa+ZaeU7ft1OCg+vGNSpr12B4Tf697a2vS1/+Rmoyd4gcnbus1Ga2uV+ Qr1wGWxL7f2OeOWR/AwHGA1aNXDz2Ih4om2OL65bc/jkoSKDKsV0uvrRps2Wj+xi XrYgIOAOr2EC25vDirqIbA5ahznpu2PBagaAyI+Dn+cvuYtYI7bCLXf3wAhj2c/u j4qzWbHr5D+OJt5JRD5wOQH2m1wmkCGQrCVKjNdpIP6g9Zly9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGz9uKUDBajgK8yDy+nZit+V1cKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2ZkZGQ2YTEtYWI4Zi0z NzkwLTgyODItZjc4YmM2NThiMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN33mYlh2FHMzH0MP21brRk7eMAxVR9IMH89UykrbT+FDNClAyIHzu9s Ev+UResR3pXDj+zwSOS4LcSabSNwVBajG+Ti9jl2Xn2/zr5U/VlDlSVGYm9MqVLA V4KSOReNJarK0JBZJ/EKZz63iAOtMyeH8sTl5sSc0QQdldnKGphkVHvZfevFr+ar wrh8AyTOeynuhSNIsYGVu8NzphGvT8H4bqp49FYk0ZmGzAMtEYkA2FigXnmGEC3Q o++zHu8aennPfCk2WMMhLy9VuOKh+MXXj0NtsjW8nV5cVTYaLBzxBE669ti88vg3 4CoW4D/pSBhI5ijNhv/BIMGwnK8Bqqc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:52 2026 by rpki-client