$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/f48e2900-2fea-3065-b439-004e04a6f200.roa File: f48e2900-2fea-3065-b439-004e04a6f200.roa (raw, json) Hash identifier: +XzGru9OTz9AHY0Cuy+wmZoXyNIDHuwmvm1bA42drmI= Subject key identifier: E7:AF:73:EE:01:E3:9C:D9:30:90:03:94:34:80:1F:97:3E:B5:4C:F4 Certificate issuer: /CN=60d1709e-04fe-45bd-bf22-78ea6043afe1 Certificate serial: 010D0C9F4328584D44FA7144AACE50D236028200 Authority key identifier: 23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/f48e2900-2fea-3065-b439-004e04a6f200.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 376 IP address blocks: 192.149.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:71:44:aa:ce:50:d2:36:02:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60d1709e-04fe-45bd-bf22-78ea6043afe1 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=ef35c643-4bc9-4caa-95b7-2e2f18790623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:29:c3:21:e6:98:c1:56:78:00:c0:14:c5: 82:36:2e:a9:76:95:36:a1:a3:ec:6f:c2:d9:dd:ab: c8:88:74:0c:02:e7:53:98:6f:5a:7e:f9:03:b3:a9: f4:45:0e:d8:d8:cc:1e:0d:6d:cc:0a:45:38:6f:c1: db:07:78:6a:dd:9e:01:b7:61:b1:4f:d4:56:4f:c2: 53:2d:bc:e5:74:86:c0:64:33:a1:49:91:ac:46:85: 09:06:70:58:30:60:ef:13:42:92:84:be:e9:32:81: 72:b1:06:d7:b2:39:77:8f:7c:36:4c:c6:e1:4a:2a: 4b:95:50:13:94:6a:76:cf:08:ee:53:c3:58:98:5a: d5:48:ec:3e:8c:38:5f:b4:8b:26:bd:60:c8:78:4c: da:85:8d:56:c5:db:07:2a:29:80:b5:c1:4f:b6:23: 69:a7:10:11:c4:90:75:a3:f6:59:a9:43:72:4b:93: a1:1b:2b:a8:78:4c:47:87:b5:12:00:88:33:79:41: 7f:6f:65:37:29:b7:d3:91:59:7e:47:16:07:22:72: 08:bb:22:5a:9a:10:23:4f:ed:5c:eb:0b:7a:ec:93: 78:a4:b7:87:2b:ad:59:d1:d7:d3:3c:80:a8:1e:e3: be:1b:e0:2d:80:70:cc:59:e6:b9:9e:ed:8c:a8:27: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:73:EE:01:E3:9C:D9:30:90:03:94:34:80:1F:97:3E:B5:4C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/f48e2900-2fea-3065-b439-004e04a6f200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.crl X509v3 Authority Key Identifier: keyid:23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer sbgp-ipAddrBlock: critical IPv4: 192.149.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:28:36:4d:05:33:64:00:0a:7e:2b:c8:12:f8:e9:4b:e6:e6: b3:5a:eb:99:07:28:6b:6e:8f:74:ba:58:29:1a:b6:21:6c:cb: 9f:97:3b:fc:c3:d9:41:ae:04:0c:c0:4a:a1:d6:b6:18:e3:ca: 4e:ee:31:de:62:46:ce:5d:75:30:3c:01:7c:93:77:99:fb:26: bb:d9:61:c4:c6:aa:16:a5:eb:d2:da:7b:a2:fa:86:89:6b:03: 17:db:a1:d5:16:3e:86:6a:fd:86:f8:71:d0:1d:e5:af:e2:78: 0e:84:e5:a5:55:d5:0b:46:23:09:47:2c:b3:27:5f:ff:c7:0b: 2f:77:32:4c:37:3f:32:c1:14:ac:63:18:2f:83:1c:70:79:7b: 94:28:82:05:2d:4b:1c:d5:71:85:ae:e1:c0:02:d5:2c:ef:23: d1:a4:0f:64:44:40:de:77:d7:62:8f:a8:31:ae:58:78:07:df: a8:e5:ab:82:83:4b:6d:10:70:ff:0a:e0:63:18:e5:bd:1c:15: 91:39:1b:bb:85:8b:42:1a:dd:30:26:c0:cc:bc:94:3f:89:cb: cf:70:71:40:82:89:df:9d:5a:a6:27:4b:a6:be:5a:eb:10:bf: 0e:2a:97:8c:d8:1d:0a:84:4a:ef:c1:56:75:59:8e:0e:87:46: 84:f5:77:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nFEqs5Q0jYCggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBkMTcwOWUtMDRmZS00NWJkLWJmMjItNzhlYTYwNDNh ZmUxMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZWYzNWM2NDMtNGJjOS00Y2FhLTk1YjctMmUyZjE4NzkwNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb4pwyHmmMFWeADAFMWCNi6pdpU2oaPsb8LZ 3avIiHQMAudTmG9afvkDs6n0RQ7Y2MweDW3MCkU4b8HbB3hq3Z4Bt2GxT9RWT8JT LbzldIbAZDOhSZGsRoUJBnBYMGDvE0KShL7pMoFysQbXsjl3j3w2TMbhSipLlVAT lGp2zwjuU8NYmFrVSOw+jDhftIsmvWDIeEzahY1WxdsHKimAtcFPtiNppxARxJB1 o/ZZqUNyS5OhGyuoeExHh7USAIgzeUF/b2U3KbfTkVl+RxYHInIIuyJamhAjT+1c 6wt67JN4pLeHK61Z0dfTPICoHuO+G+AtgHDMWea5nu2MqCeU0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOevc+4B45zZMJADlDSAH5c+tUz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGQx NzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVhNjA0M2FmZTEvZjQ4ZTI5MDAtMmZlYS0z MDY1LWI0MzktMDA0ZTA0YTZmMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjBkMTcwOWUtMDRmZS00NWJkLWJm MjItNzhlYTYwNDNhZmUxLzYwZDE3MDllLTA0ZmUtNDViZC1iZjIyLTc4ZWE2MDQz YWZlMS5jcmwwHwYDVR0jBBgwFoAUI68rzM9c2qvFPBceFLxJjIBEPyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGQxNzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVh NjA0M2FmZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUoNk0FM2QACn4ryBL46Uvm5rNa65kHKGtuj3S6WCkatiFsy5+XO/zD 2UGuBAzASqHWthjjyk7uMd5iRs5ddTA8AXyTd5n7JrvZYcTGqhal69Lae6L6holr AxfbodUWPoZq/Yb4cdAd5a/ieA6E5aVV1QtGIwlHLLMnX//HCy93Mkw3PzLBFKxj GC+DHHB5e5QoggUtSxzVcYWu4cAC1SzvI9GkD2REQN5312KPqDGuWHgH36jlq4KD S20QcP8K4GMY5b0cFZE5G7uFi0Ia3TAmwMy8lD+Jy89wcUCCid+dWqYnS6a+WusQ vw4ql4zYHQqESu/BVnVZjg6HRoT1d7A= -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:29 2026 by rpki-client