$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa File: 59042824-a974-3473-be58-532204e52132.roa (raw, json) Hash identifier: sAG+AfLRsP3zTPIftKIYNYi/dPFyZpNb4wIOYebuk9o= Subject key identifier: 9C:3F:07:45:22:AE:2C:28:1F:E6:9F:6B:31:4E:D3:F5:DD:09:FC:82 Certificate issuer: /CN=60b944fb-40a6-4574-a25b-dd101d7b668d Certificate serial: 010D0C9F4328584F71ED8F31E434BBD657A22550 Authority key identifier: 7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 46445 IP address blocks: 192.40.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:8f:31:e4:34:bb:d6:57:a2:25:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b944fb-40a6-4574-a25b-dd101d7b668d Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=ece45399-36ed-4d2e-8256-e4a91709d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:3d:1f:e8:24:01:fc:7b:9f:bb:f0:44:1a: 2f:23:ce:3e:64:2a:4e:61:32:36:5d:24:22:56:6b: 8e:cc:78:df:70:f9:e3:4c:e0:a2:41:e2:2b:b0:69: f0:06:06:b5:48:fc:9b:b7:85:9c:d2:27:21:fe:24: 6f:6b:00:5c:1e:6d:57:ce:06:82:fe:05:55:41:3b: 15:c3:13:f5:de:d3:7c:dd:3b:44:0b:64:e9:44:8a: 54:df:11:89:7e:58:eb:db:bf:43:0a:07:61:f8:bc: 2b:1c:71:56:39:ef:09:76:f8:49:4b:5f:3c:ac:04: 0a:00:34:a2:33:89:7b:e9:e3:58:1a:95:06:0a:41: 4e:ec:2f:8c:c1:65:9c:c6:9c:d8:53:c9:1f:a2:12: 8f:9b:ae:dd:80:5b:23:12:ef:42:54:8e:2c:49:6f: 45:1e:0a:57:28:ea:fb:f6:23:d5:5d:59:0b:d4:d8: 1e:55:88:eb:49:f0:ca:76:08:64:aa:e4:dc:21:08: ad:d7:1d:b8:96:a0:2f:97:1c:fd:d3:09:59:aa:07: 21:3a:01:51:dc:66:7f:8f:ec:91:03:f3:73:b3:f9: c9:b0:1d:9b:cf:df:f8:a1:ff:c7:87:dd:b2:f2:a1: da:06:33:cf:87:6c:5f:66:46:5f:6c:84:70:0f:8d: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:07:45:22:AE:2C:28:1F:E6:9F:6B:31:4E:D3:F5:DD:09:FC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl X509v3 Authority Key Identifier: keyid:7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer sbgp-ipAddrBlock: critical IPv4: 192.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3f:23:d7:71:3c:aa:f0:a9:04:bd:63:48:d1:61:26:0b:c8: 86:d7:ad:f3:77:58:40:d6:e8:78:46:38:8a:53:b9:09:cc:3e: 4f:30:e0:cd:9f:02:db:f4:d7:48:86:76:74:b6:33:be:52:de: 77:d0:18:31:59:62:27:2f:07:34:57:43:57:f0:15:cf:6f:79: 58:30:8e:a2:6b:b8:e8:4e:ea:e4:ec:13:0c:80:cf:41:f3:03: 1b:57:68:45:7b:9a:b5:94:bd:2c:2c:85:7d:d5:42:f6:e0:22: 63:c6:99:d3:be:1c:95:e6:c7:0d:95:e2:39:56:b5:79:7d:47: 24:42:dd:ea:15:b7:6d:c4:ce:23:11:6a:f9:ca:c7:cd:6a:e9: 2f:66:df:b1:68:32:5a:94:66:83:71:18:1f:e2:3e:5e:0c:7c: f6:a9:db:85:e5:1f:ab:00:be:24:09:5f:fe:5a:40:5a:d4:d5: d2:35:d2:63:78:8b:2f:50:1b:d1:dd:0a:9b:8f:b4:d7:76:1d: de:8a:bc:7b:fa:2c:80:4b:06:41:8b:13:f1:4d:b3:cb:89:10: f8:0c:4d:c0:82:f1:7e:9f:60:3d:11:ed:06:3c:74:0b:c8:d0: c0:4b:56:df:35:35:f5:a2:70:76:87:91:8e:6e:fa:13:5e:9c: 68:41:6e:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Y8x5DS71leiJVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBiOTQ0ZmItNDBhNi00NTc0LWEyNWItZGQxMDFkN2I2 NjhkMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZWNlNDUzOTktMzZlZC00ZDJlLTgyNTYtZTRhOTE3MDlkNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgts9H+gkAfx7n7vwRBovI84+ZCpOYTI2XSQi VmuOzHjfcPnjTOCiQeIrsGnwBga1SPybt4Wc0ich/iRvawBcHm1XzgaC/gVVQTsV wxP13tN83TtEC2TpRIpU3xGJfljr279DCgdh+LwrHHFWOe8JdvhJS188rAQKADSi M4l76eNYGpUGCkFO7C+MwWWcxpzYU8kfohKPm67dgFsjEu9CVI4sSW9FHgpXKOr7 9iPVXVkL1NgeVYjrSfDKdghkquTcIQit1x24lqAvlxz90wlZqgchOgFR3GZ/j+yR A/Nzs/nJsB2bz9/4of/Hh92y8qHaBjPPh2xfZkZfbIRwD40MdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw/B0UiriwoH+afazFO0/XdCfyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5 NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEwMWQ3YjY2OGQvNTkwNDI4MjQtYTk3NC0z NDczLWJlNTgtNTMyMjA0ZTUyMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjBiOTQ0ZmItNDBhNi00NTc0LWEy NWItZGQxMDFkN2I2NjhkLzYwYjk0NGZiLTQwYTYtNDU3NC1hMjViLWRkMTAxZDdi NjY4ZC5jcmwwHwYDVR0jBBgwFoAUfaPMfHvX3Wgqf0tXjXusRQsRoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEw MWQ3YjY2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA/I9dxPKrwqQS9Y0jRYSYLyIbXrfN3WEDW6HhGOIpTuQnMPk8w4M2f Atv010iGdnS2M75S3nfQGDFZYicvBzRXQ1fwFc9veVgwjqJruOhO6uTsEwyAz0Hz AxtXaEV7mrWUvSwshX3VQvbgImPGmdO+HJXmxw2V4jlWtXl9RyRC3eoVt23EziMR avnKx81q6S9m37FoMlqUZoNxGB/iPl4MfPap24XlH6sAviQJX/5aQFrU1dI10mN4 iy9QG9HdCpuPtNd2Hd6KvHv6LIBLBkGLE/FNs8uJEPgMTcCC8X6fYD0R7QY8dAvI 0MBLVt81NfWicHaHkY5u+hNenGhBbqQ= -----END CERTIFICATE-----Generated at Thu Nov 5 19:30:27 2026 by rpki-client