$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa File: 29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa (raw, json) Hash identifier: 3OgHXOm3QOenziUpG92ztAVRWl+XMa2IN8IXQchKFAA= Subject key identifier: 22:15:88:63:AE:22:2C:16:CC:2C:F5:EE:5C:EC:A9:03:3E:92:53:AB Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Certificate serial: 010D0C9F4328584EA795D7B00096D4E6CFF6E580 Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399955 IP address blocks: 141.195.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:d7:b0:00:96:d4:e6:cf:f6:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f812a814-5f84-4b7d-bc25-76b885f3a51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:86:b8:24:c7:d3:28:84:82:35:52:c8:ad: 9c:2d:0e:c1:b3:d9:8a:2e:57:de:9a:f3:bd:be:9c: 67:4a:c8:66:df:c0:38:c1:3a:fa:95:9c:82:37:97: 1b:73:6d:84:4b:be:ee:db:73:60:ce:d2:10:eb:22: b6:8c:36:6f:3d:62:b4:b2:c2:46:4e:58:03:cd:3d: 77:39:8c:a8:ee:55:3a:3c:c4:3e:2b:55:ae:a9:23: b2:3b:5f:15:ac:1d:5f:b3:d8:9b:38:6d:da:20:eb: ad:d1:2d:db:70:44:28:7a:2f:f6:18:67:8c:36:ca: 8c:6b:57:22:97:26:5d:19:65:52:3d:d9:f1:a0:4c: 20:20:3d:b0:0c:bb:16:71:e6:c9:14:46:03:72:70: 4d:b5:b6:b8:7f:94:22:2e:7e:8e:67:9c:ad:41:91: c2:34:7c:62:ba:46:29:28:b6:bb:dd:a6:09:45:50: f9:60:0a:5a:64:a3:c6:6c:d4:3c:51:63:cd:80:c0: 70:4e:d7:3d:37:64:95:0c:12:7f:f2:57:a9:63:3b: 35:87:96:24:78:43:3e:ef:b2:f8:d5:09:73:cc:7c: d5:4b:52:5d:0e:fa:21:6f:dc:93:b7:d9:b1:98:01: 48:8e:d0:c5:aa:88:84:ef:2b:1b:73:29:42:13:cf: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:88:63:AE:22:2C:16:CC:2C:F5:EE:5C:EC:A9:03:3E:92:53:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl X509v3 Authority Key Identifier: keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer sbgp-ipAddrBlock: critical IPv4: 141.195.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9a:7d:98:f2:9b:de:53:6e:43:de:6b:ae:3a:2b:50:63:a4: 2f:1e:b9:fb:ea:af:49:94:db:b1:64:25:67:25:fe:ae:82:4c: 89:76:00:da:c9:c1:43:08:c8:4d:11:02:70:ae:33:87:68:42: 34:e1:d0:1a:b8:e6:70:3e:f3:3a:4e:a8:ec:8f:2e:66:a0:60: 60:97:5f:b9:6a:8b:9c:d6:22:86:71:bc:a6:cb:79:87:64:dc: fe:3d:c2:31:d6:6e:47:ec:2c:91:fc:db:05:5c:23:27:57:ad: 7f:54:ce:34:37:00:71:0c:08:81:b5:ab:68:19:56:2d:e8:2a: 61:ea:47:0e:0d:e0:43:14:e2:68:9c:47:79:33:27:a0:d7:27: 7e:b1:2e:65:99:ad:ae:3b:8a:32:ef:6d:21:ec:b9:12:3c:fb: 38:31:01:cf:e9:17:e7:c3:cf:db:f2:e4:de:1e:47:6f:ce:4c: 37:6b:d8:c2:aa:f8:45:bd:7b:e2:00:19:2c:b5:54:45:02:dd: 40:6c:32:f4:a6:fd:69:c2:b1:e2:9d:f5:f1:57:2e:64:30:04: 1b:24:7e:4c:be:a3:72:47:f0:1b:f9:ef:ec:fa:49:c1:45:78: 46:3c:c6:7d:bf:0c:27:40:3e:88:1b:5e:4e:46:02:8f:89:b3: 6f:07:5b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nldewAJbU5s/25YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1 ZTVjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjgxMmE4MTQtNWY4NC00YjdkLWJjMjUtNzZiODg1ZjNhNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1OGuCTH0yiEgjVSyK2cLQ7Bs9mKLlfemvO9 vpxnSshm38A4wTr6lZyCN5cbc22ES77u23NgztIQ6yK2jDZvPWK0ssJGTlgDzT13 OYyo7lU6PMQ+K1WuqSOyO18VrB1fs9ibOG3aIOut0S3bcEQoei/2GGeMNsqMa1ci lyZdGWVSPdnxoEwgID2wDLsWcebJFEYDcnBNtba4f5QiLn6OZ5ytQZHCNHxiukYp KLa73aYJRVD5YApaZKPGbNQ8UWPNgMBwTtc9N2SVDBJ/8lepYzs1h5YkeEM+77L4 1QlzzHzVS1JdDvohb9yTt9mxmAFIjtDFqoiE7ysbcylCE88lSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIViGOuIiwWzCz17lzsqQM+klOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvMjliMDM5OGMtYzlkYi0z ZmQ3LTk2YTQtZjhhZGE0YzkxMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0 MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISafZjym95TbkPea646K1BjpC8eufvqr0mU27FkJWcl/q6CTIl2ANrJ wUMIyE0RAnCuM4doQjTh0Bq45nA+8zpOqOyPLmagYGCXX7lqi5zWIoZxvKbLeYdk 3P49wjHWbkfsLJH82wVcIydXrX9UzjQ3AHEMCIG1q2gZVi3oKmHqRw4N4EMU4mic R3kzJ6DXJ36xLmWZra47ijLvbSHsuRI8+zgxAc/pF+fDz9vy5N4eR2/OTDdr2MKq +EW9e+IAGSy1VEUC3UBsMvSm/WnCseKd9fFXLmQwBBskfky+o3JH8Bv57+z6ScFF eEY8xn2/DCdAPogbXk5GAo+Js28HWw4= -----END CERTIFICATE-----Generated at Tue Sep 1 04:46:24 2026 by rpki-client