$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60146b39-c7bb-3c72-91ae-b76e074f8d07.roa File: 60146b39-c7bb-3c72-91ae-b76e074f8d07.roa (raw, json) Hash identifier: crSqNuANVQQXPrEr+D7+RRRs+PojJsboUb6kCaEjWWw= Subject key identifier: 2D:A1:14:7B:4D:9E:8C:49:61:D3:A5:29:42:33:E9:22:FD:61:0C:EC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D02178BA02B1DC9940C4BB680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60146b39-c7bb-3c72-91ae-b76e074f8d07.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 148.116.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8b:a0:2b:1d:c9:94:0c:4b:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=1b065978-e9a1-4783-afb2-3b29e093b43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:22:e7:53:e0:95:7e:55:be:3b:d0:41:02: cc:89:82:77:8a:14:0e:77:e7:19:ec:6c:45:78:bb: 75:c6:6a:de:71:c7:a0:f4:09:d0:f7:6d:26:14:0b: 8b:02:b2:ed:15:0e:30:cb:09:73:d6:f1:2b:62:07: 93:13:31:ef:07:02:72:94:c8:0c:91:36:0f:19:74: 31:97:36:55:15:38:11:d1:ea:51:0a:3e:4b:4b:6c: ed:f4:00:5e:ff:b3:51:57:ca:09:44:5f:5a:f2:e6: 46:c6:a8:14:1d:d1:28:36:d1:30:26:6c:d3:c5:a5: 7b:09:dd:01:c4:bd:d4:bf:47:13:a7:be:d3:2f:db: d8:cd:3a:10:e5:0a:f8:92:4c:7e:bc:1d:79:27:ec: cd:3d:a2:85:2d:a8:30:67:99:f0:d2:4e:f2:84:90: 3a:b6:fc:7d:26:99:c5:ed:a3:ef:3b:9e:a9:95:c2: fd:5f:69:61:27:85:7c:64:2f:4b:ee:31:f8:6b:31: bb:30:33:22:50:ff:84:bf:e2:ef:0d:1c:0b:d5:84: 94:9f:8c:b1:42:97:7f:b8:3d:10:00:f0:fe:a4:b3: 6c:2a:c5:e5:55:8b:83:6a:ee:74:d8:ee:df:c0:c4: d2:d8:96:19:08:ef:49:4c:f4:2e:80:ae:e4:47:b5: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:14:7B:4D:9E:8C:49:61:D3:A5:29:42:33:E9:22:FD:61:0C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60146b39-c7bb-3c72-91ae-b76e074f8d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8f:77:7d:02:26:85:62:8c:44:f2:93:87:3c:8b:8a:05:9f: 69:31:0d:cf:fa:6e:d2:59:d3:9b:84:21:c3:03:a0:e9:f7:87: 0c:a5:1f:f0:1e:9a:89:5e:10:ca:eb:3d:ca:dd:b1:ca:04:b2: 4a:89:b1:6a:48:47:6f:1b:c3:07:d5:d4:f6:50:99:fb:58:09: 60:30:33:8c:2e:a0:a0:7b:41:fe:81:5c:44:57:54:b6:ca:25: cc:d8:d3:15:f5:6b:b0:f7:01:df:54:33:1e:08:be:13:27:50: 3f:0b:df:fa:24:ea:13:0f:c1:68:08:0d:10:c0:40:6f:e0:5b: 9e:21:80:98:3d:50:45:58:e5:b6:b7:b6:e4:7a:c1:57:a7:67: 5d:4a:46:6f:84:9d:e2:71:9e:3b:79:ed:81:77:df:a5:a6:1a: 1b:f5:b4:10:7b:7f:bb:db:cb:63:1f:c1:cd:10:ba:8a:25:1b: 89:2a:76:f8:40:43:5b:a2:0c:27:19:01:7b:06:a4:d7:af:01: e7:5f:42:6a:46:99:ae:8b:2f:ac:5f:9c:22:b3:29:75:4e:b6: 51:75:b4:19:60:b9:97:3a:b2:75:db:a2:63:8b:1b:85:56:66: 23:36:8e:5c:3d:8a:ec:b4:cf:ca:a4:8f:00:62:42:de:af:69: e1:e2:a9:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4ugKx3JlAxLtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWIwNjU5NzgtZTlhMS00NzgzLWFmYjItM2IyOWUwOTNiNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB4i51PglX5VvjvQQQLMiYJ3ihQOd+cZ7GxF eLt1xmrecceg9AnQ920mFAuLArLtFQ4wywlz1vErYgeTEzHvBwJylMgMkTYPGXQx lzZVFTgR0epRCj5LS2zt9ABe/7NRV8oJRF9a8uZGxqgUHdEoNtEwJmzTxaV7Cd0B xL3Uv0cTp77TL9vYzToQ5Qr4kkx+vB15J+zNPaKFLagwZ5nw0k7yhJA6tvx9JpnF 7aPvO56plcL9X2lhJ4V8ZC9L7jH4azG7MDMiUP+Ev+LvDRwL1YSUn4yxQpd/uD0Q APD+pLNsKsXlVYuDau502O7fwMTS2JYZCO9JTPQugK7kR7V1PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2hFHtNnoxJYdOlKUIz6SL9YQzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjAxNDZiMzktYzdiYi0z YzcyLTkxYWUtYjc2ZTA3NGY4ZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlHRiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2Pd30CJoVijETyk4c8i4oFn2kxDc/6btJZ05uEIcMDoOn3hwylH/Ae moleEMrrPcrdscoEskqJsWpIR28bwwfV1PZQmftYCWAwM4wuoKB7Qf6BXERXVLbK JczY0xX1a7D3Ad9UMx4IvhMnUD8L3/ok6hMPwWgIDRDAQG/gW54hgJg9UEVY5ba3 tuR6wVenZ11KRm+EneJxnjt57YF336WmGhv1tBB7f7vby2Mfwc0QuoolG4kqdvhA Q1uiDCcZAXsGpNevAedfQmpGma6LL6xfnCKzKXVOtlF1tBlguZc6snXbomOLG4VW ZiM2jlw9iuy0z8qkjwBiQt6vaeHiqX4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:52:05 2026 by rpki-client