$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa File: 29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa (raw, json) Hash identifier: qDpCHmcrwwrIQwTXATt1NJedFt4rXd4SZV7/ctB8Xxo= Subject key identifier: EB:22:34:95:05:5F:66:F9:49:CE:BA:A7:55:3B:1D:02:AF:EF:E6:BB Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Certificate serial: 010D0C9F4328584F498BB66E252186D5FCB75080 Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399955 IP address blocks: 141.195.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b6:6e:25:21:86:d5:fc:b7:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7118204e-b9c7-4445-8d89-124aa441d5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:71:e7:bc:fc:46:6e:38:92:57:0c:fe:be: f5:62:82:8f:23:c3:df:69:94:05:cc:6c:35:8c:60: ce:c6:59:37:de:68:88:4b:6c:a8:e5:68:db:a7:42: 13:c6:ee:1b:c0:36:da:a3:0d:d6:15:df:8c:5f:79: b5:49:53:cd:d4:3c:3a:54:de:d0:c6:c8:93:bc:9b: 41:55:00:9c:a9:5b:50:7d:1e:cf:9c:29:31:e4:5f: 79:bb:cd:f7:e5:a8:9d:3e:30:99:e2:5d:c1:e4:bb: e7:d4:b2:6d:52:39:bc:27:a5:07:a8:8d:b8:73:e0: 46:b7:10:48:5f:d7:51:91:11:fd:d5:59:a6:95:a0: 8e:13:e0:bd:b5:2b:02:e6:a2:56:97:f0:e3:da:c9: d0:dd:1c:6f:c3:de:7c:66:df:78:07:0f:49:ea:e8: 3c:cb:e1:d2:71:52:a0:b6:6e:40:24:9b:fe:4c:a5: 60:08:dd:c3:27:ae:04:9d:51:cc:4d:8c:08:71:6e: 4e:e5:ad:ba:2e:fb:ac:62:40:3d:b1:41:76:63:d2: a8:09:9c:6a:a1:4f:dc:f1:38:31:77:fe:0b:33:ee: c7:29:b5:a1:eb:be:55:71:70:99:03:b4:91:25:5a: 12:8d:c4:91:9d:03:a8:86:dd:43:95:87:a5:76:86: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:22:34:95:05:5F:66:F9:49:CE:BA:A7:55:3B:1D:02:AF:EF:E6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl X509v3 Authority Key Identifier: keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer sbgp-ipAddrBlock: critical IPv4: 141.195.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a0:53:a8:53:88:78:e6:5b:5d:f9:60:14:dd:61:7b:50:e4: 57:ca:e5:63:d5:50:4a:7d:03:3e:c5:75:03:fc:18:e4:13:cd: 6f:2e:e5:e3:2e:48:67:c2:9f:9d:4c:29:64:4f:df:e5:84:dd: e5:86:63:f6:db:06:13:78:b5:3e:62:14:ec:66:0d:b4:fe:aa: 30:d9:09:db:06:bc:8c:fd:06:93:a1:30:91:63:00:83:8a:34: 1a:a3:c6:a7:77:da:03:9b:36:07:62:e1:58:69:cf:f5:0f:b5: 56:bc:4b:23:ac:17:8a:6f:d4:c5:db:0b:c6:db:7f:8a:ad:d1: ed:db:08:c8:0a:58:61:a2:a4:6a:9c:97:eb:07:6a:ae:ff:99: 46:28:08:1a:fd:da:9d:f3:a0:f2:d6:48:0d:d2:29:be:02:ba: 5c:3d:36:6f:25:23:4c:17:d6:0d:c2:55:d9:4d:51:c8:f7:6c: 3a:0b:33:80:a5:79:57:ab:54:59:72:f8:ac:f2:f2:85:35:f1: 93:f7:5b:30:46:06:38:20:3e:38:8f:ff:b2:93:c5:d8:72:a5: a2:88:78:d2:be:8b:67:17:20:d0:2d:37:09:27:1c:91:2a:b6: ab:96:06:05:16:0b:b8:18:98:a3:9a:f4:33:53:2a:9a:a0:6a: 6d:0f:15:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji7ZuJSGG1fy3UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1 ZTVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzExODIwNGUtYjljNy00NDQ1LThkODktMTI0YWE0NDFkNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq5x57z8Rm44klcM/r71YoKPI8PfaZQFzGw1 jGDOxlk33miIS2yo5Wjbp0ITxu4bwDbaow3WFd+MX3m1SVPN1Dw6VN7QxsiTvJtB VQCcqVtQfR7PnCkx5F95u8335aidPjCZ4l3B5Lvn1LJtUjm8J6UHqI24c+BGtxBI X9dRkRH91VmmlaCOE+C9tSsC5qJWl/Dj2snQ3Rxvw958Zt94Bw9J6ug8y+HScVKg tm5AJJv+TKVgCN3DJ64EnVHMTYwIcW5O5a26LvusYkA9sUF2Y9KoCZxqoU/c8Tgx d/4LM+7HKbWh675VcXCZA7SRJVoSjcSRnQOoht1DlYeldoaUfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsiNJUFX2b5Sc66p1U7HQKv7+a7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvMjliMDM5OGMtYzlkYi0z ZmQ3LTk2YTQtZjhhZGE0YzkxMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0 MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6gU6hTiHjmW135YBTdYXtQ5FfK5WPVUEp9Az7FdQP8GOQTzW8u5eMu SGfCn51MKWRP3+WE3eWGY/bbBhN4tT5iFOxmDbT+qjDZCdsGvIz9BpOhMJFjAIOK NBqjxqd32gObNgdi4Vhpz/UPtVa8SyOsF4pv1MXbC8bbf4qt0e3bCMgKWGGipGqc l+sHaq7/mUYoCBr92p3zoPLWSA3SKb4Culw9Nm8lI0wX1g3CVdlNUcj3bDoLM4Cl eVerVFly+Kzy8oU18ZP3WzBGBjggPjiP/7KTxdhypaKIeNK+i2cXINAtNwknHJEq tquWBgUWC7gYmKOa9DNTKpqgam0PFYs= -----END CERTIFICATE-----Generated at Mon Sep 28 21:19:20 2026 by rpki-client