$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa File: fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa (raw, json) Hash identifier: UCVr0Y9IOkT7OTeUHEtY7pZdnKXX/9UQziflSaKy4Ik= Subject key identifier: 8D:A4:BB:F3:8F:04:00:A3:35:91:F7:D6:90:74:CA:6B:E6:16:FD:F7 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B0746AF3E0DA88B6C1DE31F40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 31898 IP address blocks: 158.120.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:af:3e:0d:a8:8b:6c:1d:e3:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=5b5fc251-47a0-4ba2-8dbc-a5f282895c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1c:a3:63:83:8f:55:77:65:01:1e:34:ac:d2: 8c:9c:a7:ba:d1:27:71:2d:f3:b2:89:fc:7a:ed:7d: e9:aa:49:2e:8f:76:35:83:6a:93:eb:37:10:67:89: d4:34:5c:a9:c1:51:80:bc:11:98:88:40:4c:c4:fd: 1b:13:c0:a8:fa:23:2a:d1:5a:0f:0f:8d:34:7f:74: c4:41:94:a5:e2:a8:85:ea:63:9d:46:eb:8f:90:b6: 92:60:74:7e:d4:93:fc:3c:c9:95:e0:62:31:10:ba: 3a:08:71:8f:77:67:76:13:0e:27:44:f1:4e:0e:9f: 52:bb:67:f7:b3:3b:a3:5f:ac:c0:66:7e:41:85:a8: c2:5a:66:a1:c8:4e:51:95:7e:7b:3a:77:4c:2f:31: 72:ef:fa:68:7e:79:8e:b3:7c:da:f8:4d:dc:ba:b5: b2:49:de:a4:f0:b6:20:62:c3:1e:96:12:b0:d6:18: 66:bd:06:99:cd:9a:fe:01:ef:ea:0e:96:17:00:b0: 94:e5:fb:47:9f:45:2c:c4:dd:76:7b:8e:78:bb:ca: 05:3f:c6:ac:a7:94:1d:28:21:43:ee:7e:e5:15:27: 3d:0f:53:6d:ba:75:60:ba:b9:f7:c2:a5:01:d5:55: 48:e9:32:ea:1f:27:c1:af:90:7d:90:45:cf:2e:76: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A4:BB:F3:8F:04:00:A3:35:91:F7:D6:90:74:CA:6B:E6:16:FD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cd:4f:e6:0d:0f:07:12:c1:b6:07:7a:6e:10:95:94:90:e7: c3:5d:5e:b7:33:72:6d:1e:59:6e:39:56:32:ac:75:fd:e2:74: 49:0b:be:a8:93:e3:7a:2b:69:07:74:17:ce:d5:ad:d5:b8:ca: 6e:b6:4b:dd:43:f3:21:19:c6:b8:7c:9c:40:43:c4:3a:8a:27: ba:22:f9:01:a9:08:e8:ef:7b:c2:6a:c4:8a:d9:9f:50:40:3c: e9:f6:68:61:3d:a6:f7:33:c6:bf:64:c2:f5:2f:f4:eb:2c:79: 88:0b:90:cb:fc:05:b7:b2:af:fb:d2:12:ba:87:da:b9:20:31: 15:db:bf:d5:a8:fa:6b:2c:75:c7:c1:43:8c:20:30:41:6f:a7: a4:85:3b:b1:bd:0b:bb:28:05:ab:d3:95:10:5a:20:b0:a9:bb: 6e:dd:92:16:c7:be:83:78:6f:03:8c:f6:d1:3b:06:ca:ea:ff: 29:69:8e:f3:ab:d3:35:21:d5:2c:8f:6a:ed:dd:66:fd:91:8f: 3d:15:11:b3:ee:27:7a:ba:1e:ed:4e:c4:2a:cf:54:46:19:37: 4a:d5:bf:f0:72:15:d0:80:26:37:3e:2f:be:f2:3a:7f:98:bf: b1:67:84:7c:9b:96:b4:08:26:32:6f:4c:8b:6c:4c:1e:b6:7f: 30:dc:df:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRq8+DaiLbB3jH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NWI1ZmMyNTEtNDdhMC00YmEyLThkYmMtYTVmMjgyODk1YzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihyjY4OPVXdlAR40rNKMnKe60SdxLfOyifx6 7X3pqkkuj3Y1g2qT6zcQZ4nUNFypwVGAvBGYiEBMxP0bE8Co+iMq0VoPD400f3TE QZSl4qiF6mOdRuuPkLaSYHR+1JP8PMmV4GIxELo6CHGPd2d2Ew4nRPFODp9Su2f3 szujX6zAZn5BhajCWmahyE5RlX57OndMLzFy7/pofnmOs3za+E3curWySd6k8LYg YsMelhKw1hhmvQaZzZr+Ae/qDpYXALCU5ftHn0UsxN12e454u8oFP8asp5QdKCFD 7n7lFSc9D1NtunVgurn3wqUB1VVI6TLqHyfBr5B9kEXPLnY9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2ku/OPBACjNZH31pB0ymvmFv33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmFmZDhjYTktYjg0NS0z ODA0LThkNDItMmYxMTdhYTY4ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/NT+YNDwcSwbYHem4QlZSQ58NdXrczcm0eWW45VjKsdf3idEkLvqiT 43oraQd0F87VrdW4ym62S91D8yEZxrh8nEBDxDqKJ7oi+QGpCOjve8JqxIrZn1BA POn2aGE9pvczxr9kwvUv9OsseYgLkMv8Bbeyr/vSErqH2rkgMRXbv9Wo+mssdcfB Q4wgMEFvp6SFO7G9C7soBavTlRBaILCpu27dkhbHvoN4bwOM9tE7Bsrq/ylpjvOr 0zUh1SyPau3dZv2Rjz0VEbPuJ3q6Hu1OxCrPVEYZN0rVv/ByFdCAJjc+L77yOn+Y v7FnhHyblrQIJjJvTItsTB62fzDc3+E= -----END CERTIFICATE-----Generated at Thu Sep 18 03:57:48 2025 by rpki-client