$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/211da43d-fda4-33b5-9961-187f3563b2d9.roa File: 211da43d-fda4-33b5-9961-187f3563b2d9.roa (raw, json) Hash identifier: B9ObKQNUbO7NmPlPFVEzjvP7U8DNtfFJchRDmIyBOLE= Subject key identifier: 95:95:D7:4A:F3:72:EA:3E:D5:40:21:B5:CF:EF:92:B3:BC:B3:61:4E Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Certificate serial: 010D0C9F4328584F4988170DD2BE6A318502FDB0 Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/211da43d-fda4-33b5-9961-187f3563b2d9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 141.195.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:17:0d:d2:be:6a:31:85:02:fd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3b9c659-d1e2-4e08-9803-8db842c7e14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:2e:ea:da:98:92:d2:08:bd:a3:68:1d:d1: 69:b9:da:29:45:a4:4b:cc:57:b6:97:ab:de:72:6f: d1:bb:1f:cd:c5:71:13:90:d6:9d:d4:79:e4:f2:e0: be:f0:74:b5:83:bd:7a:3f:7b:ba:b2:5e:7a:c2:9a: a0:22:63:82:32:9a:3d:2f:e5:a3:65:37:09:03:c3: 15:f7:c0:31:e9:66:d0:5b:f4:53:47:2a:2e:dc:a6: 2b:8a:6e:7d:07:69:9b:7a:a0:de:22:c2:56:fc:bf: 34:a1:bc:fd:ba:72:a2:d3:bb:5d:55:6e:cc:1b:3b: 97:9b:b8:3a:69:8e:87:8f:f7:af:92:8f:14:ab:73: f4:d4:da:4b:29:ae:be:3c:df:da:29:23:26:1f:a1: 9c:70:42:80:ee:a8:a3:17:e3:f2:70:9c:4e:70:b5: 52:a6:20:69:62:af:f9:1f:ca:f6:2a:65:64:a7:90: f2:0c:f8:48:8b:02:95:7e:c9:a0:5f:8b:de:42:37: 06:81:9a:32:7d:fc:57:00:67:87:24:0b:71:4e:d7: c7:a5:94:db:de:28:a7:55:3a:33:1b:ec:f1:0e:e2: 76:fc:34:3f:80:29:eb:33:40:d4:6d:32:27:fe:d9: b2:54:9e:71:86:15:1d:6c:65:69:e3:a5:d5:fa:06: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:95:D7:4A:F3:72:EA:3E:D5:40:21:B5:CF:EF:92:B3:BC:B3:61:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/211da43d-fda4-33b5-9961-187f3563b2d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl X509v3 Authority Key Identifier: keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer sbgp-ipAddrBlock: critical IPv4: 141.195.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8d:06:ec:2c:41:9d:b5:f3:99:5d:24:59:20:23:7e:66:1c: c0:b3:29:47:05:a3:1f:36:9a:17:97:c2:f5:32:c9:c2:ff:75: 09:5b:f5:47:75:27:83:b0:bb:66:84:cf:67:fc:60:5b:80:dc: 4f:56:a5:0f:10:ba:46:ec:da:c1:b5:aa:74:2d:11:ca:bf:a9: 97:ff:15:f5:59:79:e2:dc:86:c9:a0:d2:91:b1:37:bd:66:5b: 1e:31:9c:3a:68:16:96:15:f3:92:40:7d:5f:c0:9b:98:4d:ff: 47:dc:e9:47:c5:f6:15:bd:26:7e:d3:1d:36:1b:60:48:07:66: b0:24:6f:2e:27:ac:1e:43:32:73:a3:d7:db:14:4d:a7:50:12: 91:58:3a:d6:97:ac:f6:d0:e2:e9:3d:20:fa:7a:2c:85:57:29: cc:2f:71:d0:00:37:4c:eb:af:04:60:89:96:ce:b1:1e:0b:d5: 7b:e1:87:59:ae:bc:37:9c:87:54:55:0b:81:02:5a:ed:f4:49: 44:3d:c6:30:7f:29:f5:a2:8d:21:5e:79:14:8b:58:d8:1e:e2: 89:03:dd:df:50:f3:d3:6f:5a:ef:12:9d:18:fb:43:65:a9:2b: bd:79:5f:61:38:f9:e5:af:b6:32:ed:4b:5e:71:94:a3:97:f6: 58:1c:c7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiBcN0r5qMYUC/bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1 ZTVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTNiOWM2NTktZDFlMi00ZTA4LTk4MDMtOGRiODQyYzdlMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNIu6tqYktIIvaNoHdFpudopRaRLzFe2l6ve cm/Rux/NxXETkNad1Hnk8uC+8HS1g716P3u6sl56wpqgImOCMpo9L+WjZTcJA8MV 98Ax6WbQW/RTRyou3KYrim59B2mbeqDeIsJW/L80obz9unKi07tdVW7MGzuXm7g6 aY6Hj/evko8Uq3P01NpLKa6+PN/aKSMmH6GccEKA7qijF+PycJxOcLVSpiBpYq/5 H8r2KmVkp5DyDPhIiwKVfsmgX4veQjcGgZoyffxXAGeHJAtxTtfHpZTb3iinVToz G+zxDuJ2/DQ/gCnrM0DUbTIn/tmyVJ5xhhUdbGVp46XV+gY+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWV10rzcuo+1UAhtc/vkrO8s2FOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvMjExZGE0M2QtZmRhNC0z M2I1LTk5NjEtMTg3ZjM1NjNiMmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0 MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIONBuwsQZ2185ldJFkgI35mHMCzKUcFox82mheXwvUyycL/dQlb9Ud1 J4Owu2aEz2f8YFuA3E9WpQ8Qukbs2sG1qnQtEcq/qZf/FfVZeeLchsmg0pGxN71m Wx4xnDpoFpYV85JAfV/Am5hN/0fc6UfF9hW9Jn7THTYbYEgHZrAkby4nrB5DMnOj 19sUTadQEpFYOtaXrPbQ4uk9IPp6LIVXKcwvcdAAN0zrrwRgiZbOsR4L1Xvhh1mu vDech1RVC4ECWu30SUQ9xjB/KfWijSFeeRSLWNge4okD3d9Q89NvWu8SnRj7Q2Wp K715X2E4+eWvtjLtS15xlKOX9lgcx5s= -----END CERTIFICATE-----Generated at Sun Sep 27 00:11:57 2026 by rpki-client