$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa File: 59042824-a974-3473-be58-532204e52132.roa (raw, json) Hash identifier: E1BT1hjxjrZa+ecqgPD6fvuPF30cqh8fH0iJahR7cJ0= Subject key identifier: 5F:AE:66:85:B8:D3:6E:A3:4A:A8:AF:D2:95:96:3F:1A:F8:C9:53:F9 Certificate issuer: /CN=60b944fb-40a6-4574-a25b-dd101d7b668d Certificate serial: 010D0C9F4328584AADF106C1B76ECF59A7C64900 Authority key identifier: 7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 46445 IP address blocks: 192.40.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:06:c1:b7:6e:cf:59:a7:c6:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b944fb-40a6-4574-a25b-dd101d7b668d Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=aaf609a6-6450-4f5e-bea0-ed8bb3018781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:24:46:24:df:c3:cb:93:e0:08:ef:4e:54: 52:79:c6:3b:14:9e:c9:38:ab:11:63:61:82:85:22: 21:51:16:df:e3:74:ed:d7:00:57:76:2d:1f:b1:65: a6:f5:79:d5:cb:0f:d5:00:5c:19:68:c4:2b:36:54: 58:89:0a:1c:7e:58:e6:75:24:64:54:3e:98:38:52: ac:c2:84:6e:e9:97:ea:a2:04:73:75:c8:20:e4:69: 4f:b3:64:43:93:89:7d:31:e0:53:95:15:a4:df:49: a6:9e:f2:ef:95:7d:7d:55:ce:7b:a5:d2:d8:95:b7: a3:8f:c8:f4:84:b5:d9:0b:c6:0e:ee:8e:e1:8a:e8: e2:c1:f3:72:f6:44:2c:9f:7e:50:75:e1:fe:1d:5b: b6:97:e1:97:be:d9:32:cf:e3:58:b0:48:f8:ec:cd: 93:b9:f5:f3:39:dd:a7:ad:a2:ac:b5:5d:78:e8:1b: 35:54:23:89:78:bd:29:0b:bd:be:a1:96:9c:8d:52: db:3b:4a:12:06:e9:0f:69:9c:e7:3f:f7:65:bc:6c: b3:7d:28:7e:f2:42:52:92:3b:8c:d6:db:65:85:b1: 1d:3a:b2:3c:13:c5:39:31:ad:1e:5b:49:15:7e:05: b3:1a:7b:31:26:09:32:fe:1a:fc:10:f1:17:42:d2: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AE:66:85:B8:D3:6E:A3:4A:A8:AF:D2:95:96:3F:1A:F8:C9:53:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl X509v3 Authority Key Identifier: keyid:7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer sbgp-ipAddrBlock: critical IPv4: 192.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5d:c0:f5:19:49:3f:cb:fb:46:e7:7e:ac:d8:b3:e1:e8:3b: 69:3e:84:20:00:c1:f2:a9:fe:5b:d0:7c:9d:37:bf:96:9e:33: 2d:bf:2d:f1:8b:b6:65:31:41:62:4d:65:de:e7:df:6e:2f:89: e4:00:e8:21:40:05:e2:d9:ce:95:24:32:cb:6e:c9:46:b7:b7: 77:24:1c:f7:fe:a0:c2:08:45:56:f7:ba:52:73:f8:42:7e:95: 19:da:69:b5:72:c1:97:f4:8b:7a:d4:fb:37:f7:98:a7:a0:0b: fd:ce:04:ad:50:34:c3:61:95:1e:d1:5d:b4:84:33:a4:7c:e7: 80:ba:df:7e:63:69:9d:f2:b5:21:ac:0e:f3:f8:83:14:0b:2a: fe:47:52:19:88:f9:42:74:bf:33:3f:0c:6c:48:51:b5:cd:58: 8d:52:7f:65:9b:7f:1b:b8:9e:8a:08:2e:58:13:e1:6d:2d:48: 44:f0:58:4c:7e:1e:db:49:99:f3:01:ed:1b:52:b5:24:36:3e: 82:89:c7:b5:0b:09:3f:51:16:b4:9d:e2:04:1d:a9:00:3c:8b: 67:9d:64:8d:7b:1d:8f:8a:d5:80:79:51:cb:39:20:50:52:47: d1:c9:29:88:55:f2:f6:c5:d2:bd:f6:f5:bd:8d:df:c7:9e:70: 1f:58:04:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QbBt27PWafGSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBiOTQ0ZmItNDBhNi00NTc0LWEyNWItZGQxMDFkN2I2 NjhkMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YWFmNjA5YTYtNjQ1MC00ZjVlLWJlYTAtZWQ4YmIzMDE4NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnMkRiTfw8uT4AjvTlRSecY7FJ7JOKsRY2GC hSIhURbf43Tt1wBXdi0fsWWm9XnVyw/VAFwZaMQrNlRYiQocfljmdSRkVD6YOFKs woRu6ZfqogRzdcgg5GlPs2RDk4l9MeBTlRWk30mmnvLvlX19Vc57pdLYlbejj8j0 hLXZC8YO7o7hiujiwfNy9kQsn35QdeH+HVu2l+GXvtkyz+NYsEj47M2TufXzOd2n raKstV146Bs1VCOJeL0pC72+oZacjVLbO0oSBukPaZznP/dlvGyzfSh+8kJSkjuM 1ttlhbEdOrI8E8U5Ma0eW0kVfgWzGnsxJgky/hr8EPEXQtKf9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+uZoW4026jSqiv0pWWPxr4yVP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5 NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEwMWQ3YjY2OGQvNTkwNDI4MjQtYTk3NC0z NDczLWJlNTgtNTMyMjA0ZTUyMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjBiOTQ0ZmItNDBhNi00NTc0LWEy NWItZGQxMDFkN2I2NjhkLzYwYjk0NGZiLTQwYTYtNDU3NC1hMjViLWRkMTAxZDdi NjY4ZC5jcmwwHwYDVR0jBBgwFoAUfaPMfHvX3Wgqf0tXjXusRQsRoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEw MWQ3YjY2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHldwPUZST/L+0bnfqzYs+HoO2k+hCAAwfKp/lvQfJ03v5aeMy2/LfGL tmUxQWJNZd7n324vieQA6CFABeLZzpUkMstuyUa3t3ckHPf+oMIIRVb3ulJz+EJ+ lRnaabVywZf0i3rU+zf3mKegC/3OBK1QNMNhlR7RXbSEM6R854C6335jaZ3ytSGs DvP4gxQLKv5HUhmI+UJ0vzM/DGxIUbXNWI1Sf2Wbfxu4nooILlgT4W0tSETwWEx+ HttJmfMB7RtStSQ2PoKJx7ULCT9RFrSd4gQdqQA8i2edZI17HY+K1YB5Ucs5IFBS R9HJKYhV8vbF0r329b2N38eecB9YBHY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:44:23 2025 by rpki-client