$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa File: 59042824-a974-3473-be58-532204e52132.roa (raw, json) Hash identifier: sCfBKOMeCt7UxqpMHu8jD5lQd2FibxJy0pi3q2uagAE= Subject key identifier: 0F:1A:0D:12:63:AD:4B:A1:6B:83:2D:10:11:6E:96:0E:7A:73:47:10 Certificate issuer: /CN=60b944fb-40a6-4574-a25b-dd101d7b668d Certificate serial: 010D0C9F4328584D4D5A58758CA71C528F8B70C0 Authority key identifier: 7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46445 IP address blocks: 192.40.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:58:75:8c:a7:1c:52:8f:8b:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b944fb-40a6-4574-a25b-dd101d7b668d Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=b1ce09fd-2c3d-4702-a252-b8b8a9027c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:27:91:c6:89:1d:81:a6:29:91:d5:cf:ce: 1f:12:bc:ce:c5:8c:69:49:ee:fa:a2:d5:bd:55:a6: 4d:fe:b4:2c:61:ee:a5:8b:d9:ab:25:7d:e1:ac:d8: 89:0c:a3:af:37:bc:fc:e9:1e:43:5e:fe:09:26:15: 6b:73:4e:e0:fa:3a:b6:e9:28:13:4e:f5:88:b1:6f: 2b:7b:85:f4:26:46:d4:96:54:a6:b4:58:19:11:0a: e6:e3:a3:61:66:41:db:04:29:6f:ce:42:16:23:95: 0b:b2:4e:7f:24:b1:20:45:7f:d3:f7:59:1d:2c:b4: 14:32:b2:d5:aa:80:dc:6c:3a:ee:a2:d4:33:26:74: 8c:7b:43:27:4c:1f:58:82:2a:bb:cd:17:33:f7:e6: e2:22:44:fe:2c:36:0d:40:5e:70:3c:26:38:df:ca: 76:d1:da:7d:eb:45:3d:31:4c:0b:00:f8:80:dd:a7: 43:b5:29:78:4c:85:50:c3:5b:dd:ac:be:e5:07:23: 6b:e5:24:fc:3a:0d:ac:66:78:6d:8c:12:55:54:76: f3:41:79:7a:c9:f9:0c:b9:4d:b5:68:b8:62:89:80: 7a:7e:d9:f9:22:4a:c4:6a:18:3e:f4:51:19:0f:d4: 2a:e2:85:be:45:00:5a:cd:a4:9d:da:32:14:ad:fc: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:0D:12:63:AD:4B:A1:6B:83:2D:10:11:6E:96:0E:7A:73:47:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl X509v3 Authority Key Identifier: keyid:7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer sbgp-ipAddrBlock: critical IPv4: 192.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e4:09:84:57:62:c0:3a:c5:c9:66:85:06:c2:60:66:36:29: 19:ad:7e:e9:93:e4:16:2e:6f:02:7a:86:1b:1d:7f:a2:17:a9: 6d:1c:94:41:df:20:c9:be:6c:0d:05:36:f2:90:af:4f:a5:9f: 9c:6d:48:35:9b:02:07:20:0c:51:cb:39:36:59:a4:ee:cb:c7: 68:bd:cd:d3:0f:78:c3:74:43:cf:f1:64:b2:d2:ab:7f:a5:5b: 87:51:f3:bf:b8:f7:98:5d:15:0c:8d:44:d9:49:ca:d4:6f:fb: 9d:cb:01:c1:be:9c:71:6a:62:38:58:6d:49:01:4a:62:cd:04: 31:e0:22:ae:5a:40:eb:3e:b7:22:9e:9c:30:13:d2:a4:25:d7: c7:0b:94:bf:b1:54:11:0a:87:aa:f5:4c:56:5f:6d:5c:ac:03: f3:e3:0e:56:20:bc:67:ae:63:f8:58:6a:93:fc:1b:31:db:b9: 81:3c:2c:b5:55:d4:cd:ec:ff:6b:8c:e9:17:67:a7:eb:79:be: 79:99:c1:c8:c7:51:64:77:3a:07:56:05:70:9b:b6:8d:d2:0c: 16:39:2e:b3:1c:35:cc:3b:36:f8:c8:ed:a5:24:58:bf:9c:47: 6a:4b:43:5f:79:e3:fa:23:46:9c:86:fc:32:28:d0:d7:ad:e9: a6:c2:2c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlh1jKccUo+LcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBiOTQ0ZmItNDBhNi00NTc0LWEyNWItZGQxMDFkN2I2 NjhkMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YjFjZTA5ZmQtMmMzZC00NzAyLWEyNTItYjhiOGE5MDI3YzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdMnkcaJHYGmKZHVz84fErzOxYxpSe76otW9 VaZN/rQsYe6li9mrJX3hrNiJDKOvN7z86R5DXv4JJhVrc07g+jq26SgTTvWIsW8r e4X0JkbUllSmtFgZEQrm46NhZkHbBClvzkIWI5ULsk5/JLEgRX/T91kdLLQUMrLV qoDcbDruotQzJnSMe0MnTB9Ygiq7zRcz9+biIkT+LDYNQF5wPCY438p20dp960U9 MUwLAPiA3adDtSl4TIVQw1vdrL7lByNr5ST8Og2sZnhtjBJVVHbzQXl6yfkMuU21 aLhiiYB6ftn5IkrEahg+9FEZD9Qq4oW+RQBazaSd2jIUrfxSNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8aDRJjrUuha4MtEBFulg56c0cQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5 NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEwMWQ3YjY2OGQvNTkwNDI4MjQtYTk3NC0z NDczLWJlNTgtNTMyMjA0ZTUyMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjBiOTQ0ZmItNDBhNi00NTc0LWEy NWItZGQxMDFkN2I2NjhkLzYwYjk0NGZiLTQwYTYtNDU3NC1hMjViLWRkMTAxZDdi NjY4ZC5jcmwwHwYDVR0jBBgwFoAUfaPMfHvX3Wgqf0tXjXusRQsRoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEw MWQ3YjY2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfkCYRXYsA6xclmhQbCYGY2KRmtfumT5BYubwJ6hhsdf6IXqW0clEHf IMm+bA0FNvKQr0+ln5xtSDWbAgcgDFHLOTZZpO7Lx2i9zdMPeMN0Q8/xZLLSq3+l W4dR87+495hdFQyNRNlJytRv+53LAcG+nHFqYjhYbUkBSmLNBDHgIq5aQOs+tyKe nDAT0qQl18cLlL+xVBEKh6r1TFZfbVysA/PjDlYgvGeuY/hYapP8GzHbuYE8LLVV 1M3s/2uM6Rdnp+t5vnmZwcjHUWR3OgdWBXCbto3SDBY5LrMcNcw7NvjI7aUkWL+c R2pLQ1954/ojRpyG/DIo0Net6abCLKc= -----END CERTIFICATE-----Generated at Sat Apr 18 03:23:37 2026 by rpki-client