$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa File: 29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa (raw, json) Hash identifier: zZpyfboldwvfrFxX+kK8d2NI1I0Y5uCY85d8QALJnxc= Subject key identifier: C2:9D:F6:0F:E9:F4:31:40:F0:C7:B6:32:DB:D9:D8:64:12:D4:0C:4A Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Certificate serial: 010D0C9F4328584DF4B9D2F0895665E63F3AB900 Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa Signing time: Mon 25 May 2026 23:53:13 +0000 ROA not before: Mon 25 May 2026 23:53:13 +0000 ROA not after: Sun 23 Aug 2026 23:53:13 +0000 asID: 399955 IP address blocks: 141.195.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:b9:d2:f0:89:56:65:e6:3f:3a:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Validity Not Before: May 25 23:53:13 2026 GMT Not After : Aug 23 23:53:13 2026 GMT Subject: CN=d4b22a1f-9bb2-4976-8cb8-185ec29da187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:79:12:c9:6a:df:b9:01:ac:f8:6b:c3:94:21: 1a:22:17:25:53:34:31:f4:29:15:74:44:b6:08:a3: f7:76:42:8c:62:55:3b:c4:29:aa:ca:d9:3f:c4:c7: c2:53:e1:e9:70:40:90:ef:2e:23:ad:71:a4:5b:c8: 96:29:db:05:a2:e2:aa:1f:bf:77:1c:1d:8f:a9:06: 77:3f:a6:71:8a:bb:bb:04:85:b9:9e:2d:75:84:19: f3:bc:95:5c:b2:6b:cb:77:18:09:08:0c:7d:1f:8a: cb:7a:b1:f5:80:41:cb:d5:24:07:ce:94:c9:f0:4f: fe:58:c7:b3:d6:43:0c:2c:dd:32:e0:6b:50:fb:a3: da:eb:4c:34:0a:b6:9a:8a:0c:fe:84:5b:62:52:76: 10:f7:bb:8a:8c:3b:5c:11:b0:61:95:f3:53:ee:31: e3:b8:6f:e6:52:e1:e3:26:ab:fa:a6:06:e1:25:7b: 24:76:7b:bd:a1:30:0b:d1:02:8e:97:ba:49:94:3c: d6:8c:7b:a9:2b:1c:a0:36:4f:41:44:d7:22:b6:2f: fa:33:45:2f:07:70:c6:03:ad:e2:aa:7d:43:2a:b0: 49:55:eb:eb:b0:13:ee:d5:a5:90:90:3c:c2:18:60: 2a:bb:ea:1b:1e:33:24:d9:e4:bf:32:27:d2:7b:fa: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9D:F6:0F:E9:F4:31:40:F0:C7:B6:32:DB:D9:D8:64:12:D4:0C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl X509v3 Authority Key Identifier: keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer sbgp-ipAddrBlock: critical IPv4: 141.195.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:34:0c:46:42:2b:79:e9:98:76:90:e4:2c:85:63:c8:ad:0b: ab:a3:73:17:0b:94:fd:ca:62:31:20:56:d9:68:e7:1e:02:94: 15:c4:64:de:9b:17:d0:37:2c:df:59:3d:50:47:aa:e1:6b:f7: 76:00:58:50:df:44:b0:9e:08:dc:93:6a:32:c0:d3:2a:82:9b: 57:87:5c:61:36:eb:f1:96:7d:49:d6:91:6f:a4:ed:16:a2:de: b3:0d:87:08:43:cc:d0:3a:e0:20:88:17:56:35:35:e1:49:4a: 75:68:58:5a:14:94:18:ca:9e:ff:72:47:0c:0a:a6:37:1c:ee: bc:44:78:a0:08:57:b3:43:d3:0a:71:a9:25:5b:b5:4a:21:c5: 92:4b:b3:98:c8:af:6d:c0:f5:d2:66:93:f6:0f:78:cf:bb:61: 4a:c1:27:05:5a:00:2f:a8:f1:e8:89:50:d7:c1:eb:1a:87:98: 61:06:63:83:93:9d:7b:f9:ee:f6:c2:4e:30:8a:2c:91:09:e6: 2c:d2:ea:8a:e9:30:96:7a:2c:a0:68:e2:bb:80:79:52:e1:dc: b6:c9:7c:b4:24:c4:d0:04:cd:a5:e6:a9:69:dc:41:fe:36:bb: 9b:60:ab:09:0c:39:2f:d7:41:11:f9:fe:6d:4c:47:6e:24:1d: 2f:f5:52:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30udLwiVZl5j86uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1 ZTVjMB4XDTI2MDUyNTIzNTMxM1oXDTI2MDgyMzIzNTMxM1owLzEtMCsGA1UEAxMk ZDRiMjJhMWYtOWJiMi00OTc2LThjYjgtMTg1ZWMyOWRhMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XkSyWrfuQGs+GvDlCEaIhclUzQx9CkVdES2 CKP3dkKMYlU7xCmqytk/xMfCU+HpcECQ7y4jrXGkW8iWKdsFouKqH793HB2PqQZ3 P6Zxiru7BIW5ni11hBnzvJVcsmvLdxgJCAx9H4rLerH1gEHL1SQHzpTJ8E/+WMez 1kMMLN0y4GtQ+6Pa60w0Craaigz+hFtiUnYQ97uKjDtcEbBhlfNT7jHjuG/mUuHj Jqv6pgbhJXskdnu9oTAL0QKOl7pJlDzWjHupKxygNk9BRNciti/6M0UvB3DGA63i qn1DKrBJVevrsBPu1aWQkDzCGGAqu+obHjMk2eS/MifSe/qXeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKd9g/p9DFA8Me2MtvZ2GQS1AxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvMjliMDM5OGMtYzlkYi0z ZmQ3LTk2YTQtZjhhZGE0YzkxMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0 MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA0DEZCK3npmHaQ5CyFY8itC6ujcxcLlP3KYjEgVtlo5x4ClBXEZN6b F9A3LN9ZPVBHquFr93YAWFDfRLCeCNyTajLA0yqCm1eHXGE26/GWfUnWkW+k7Rai 3rMNhwhDzNA64CCIF1Y1NeFJSnVoWFoUlBjKnv9yRwwKpjcc7rxEeKAIV7ND0wpx qSVbtUohxZJLs5jIr23A9dJmk/YPeM+7YUrBJwVaAC+o8eiJUNfB6xqHmGEGY4OT nXv57vbCTjCKLJEJ5izS6orpMJZ6LKBo4ruAeVLh3LbJfLQkxNAEzaXmqWncQf42 u5tgqwkMOS/XQRH5/m1MR24kHS/1Um4= -----END CERTIFICATE-----Generated at Tue Jun 2 22:22:27 2026 by rpki-client