
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa
File: b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa (raw, json)
Hash identifier: xIYtJmDsjGU5u+rbApNc5vTXA3WEQCeKQqsP27TNGPg=
Subject key identifier: E2:FD:32:74:BB:66:37:A4:18:A1:2E:A7:A3:C9:22:5A:DE:9B:BF:4E
Certificate issuer: /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial: 010D0C9F4328584EE0C1ED218B27181BD5F3E680
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 18875
IP address blocks: 192.153.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:ed:21:8b:27:18:1b:d5:f3:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=df8a29fb-f176-4db0-a97d-310c7ae492a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:47:4c:65:c5:12:80:34:89:fc:18:6f:37:
5a:66:2d:d3:f2:60:24:6e:84:ff:0e:31:3e:d9:fc:
23:12:dd:dc:2c:7c:ca:f7:18:ed:56:ab:d0:0b:df:
e5:57:69:99:33:5c:70:d6:ae:36:37:7e:06:ce:a0:
15:ae:0b:e9:e8:ec:bc:ca:c8:e4:9e:ee:77:ec:18:
08:6e:86:f4:1d:da:e1:3b:36:e9:8d:c0:27:03:77:
ed:e5:21:ed:aa:22:2b:eb:37:86:c9:30:d7:70:8c:
25:02:69:30:04:1a:2a:a8:f0:1c:89:56:8c:fc:23:
15:e1:86:51:ab:33:cd:c5:55:86:75:6f:da:dd:75:
3c:2b:8a:51:d8:c5:0d:71:dc:0c:39:ab:0f:b9:8c:
4a:3e:fb:f3:c0:0a:b6:48:7d:b5:af:77:85:d9:53:
ca:bc:a4:92:d6:82:20:6c:02:cf:97:ee:de:6e:0c:
30:96:a6:08:59:ad:f4:35:ce:84:46:a9:7f:a5:f5:
80:9c:9d:1e:ca:59:26:cb:82:99:59:12:33:d3:ae:
a8:73:ee:b5:98:d4:9d:c3:1e:fe:51:60:a2:a4:d5:
44:f5:a4:2d:13:9a:d7:1f:cc:67:f6:cb:ec:77:fe:
c5:e3:0f:9e:e7:91:db:78:4a:d6:cb:e7:91:aa:90:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:32:74:BB:66:37:A4:18:A1:2E:A7:A3:C9:22:5A:DE:9B:BF:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
X509v3 Authority Key Identifier:
keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:3a:cb:c0:f4:f3:55:6c:d3:32:66:fb:e7:1e:33:46:94:77:
fa:02:13:62:8f:a8:cd:f9:6a:9f:c0:41:96:99:87:60:c5:0e:
b1:a8:89:59:ce:bf:6d:98:25:ee:8e:01:85:1c:a5:96:89:c9:
9f:4c:ea:a5:35:ee:45:b3:48:51:45:a4:6f:9f:f3:06:55:ea:
67:38:70:da:57:e6:7d:31:66:fb:40:36:f8:9e:cb:14:86:89:
3a:4e:7d:1d:93:b7:69:d6:49:30:f5:91:ae:59:00:57:4c:2c:
e5:e2:de:97:b3:63:40:b6:f3:b5:c5:3f:27:1e:0b:65:a9:0b:
17:8a:f8:c2:ff:c1:10:ef:e5:a5:3e:19:08:34:87:f3:ca:d6:
80:09:7a:ec:1d:50:5a:2e:99:92:8c:b8:d0:74:aa:d6:d7:38:
99:7c:fb:90:a0:28:60:3f:2e:16:0e:d1:6a:78:bd:21:e9:c8:
aa:43:27:7f:f4:06:e5:9d:a2:c4:83:1a:f2:0c:72:49:91:e6:
05:0f:1c:79:00:73:13:16:cd:97:40:b4:c6:3d:54:77:9c:44:
64:83:b3:64:7a:36:11:23:73:15:8a:47:8e:fa:6e:70:c8:02:
95:c1:2d:2f:cf:b4:30:90:a1:05:66:ce:95:d4:b5:30:99:11:
5f:9c:a3:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwe0hiycYG9Xz5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk
YjI2MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZGY4YTI5ZmItZjE3Ni00ZGIwLWE5N2QtMzEwYzdhZTQ5MmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTFHTGXFEoA0ifwYbzdaZi3T8mAkboT/DjE+
2fwjEt3cLHzK9xjtVqvQC9/lV2mZM1xw1q42N34GzqAVrgvp6Oy8ysjknu537BgI
bob0HdrhOzbpjcAnA3ft5SHtqiIr6zeGyTDXcIwlAmkwBBoqqPAciVaM/CMV4YZR
qzPNxVWGdW/a3XU8K4pR2MUNcdwMOasPuYxKPvvzwAq2SH21r3eF2VPKvKSS1oIg
bALPl+7ebgwwlqYIWa30Nc6ERql/pfWAnJ0eylkmy4KZWRIz066oc+61mNSdwx7+
UWCipNVE9aQtE5rXH8xn9svsd/7F4w+e55HbeErWy+eRqpAy/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOL9MnS7ZjekGKEup6PJIlrem79OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5
MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvYjFlYTAwNmMtYjNmNi0z
MmRjLWI2ZDAtOWRkNDRmMzY2OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3
NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0
ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy
YzI3NGRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJm6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABs6y8D081Vs0zJm++ceM0aUd/oCE2KPqM35ap/AQZaZh2DFDrGoiVnO
v22YJe6OAYUcpZaJyZ9M6qU17kWzSFFFpG+f8wZV6mc4cNpX5n0xZvtANvieyxSG
iTpOfR2Tt2nWSTD1ka5ZAFdMLOXi3pezY0C287XFPyceC2WpCxeK+ML/wRDv5aU+
GQg0h/PK1oAJeuwdUFoumZKMuNB0qtbXOJl8+5CgKGA/LhYO0Wp4vSHpyKpDJ3/0
BuWdosSDGvIMckmR5gUPHHkAcxMWzZdAtMY9VHecRGSDs2R6NhEjcxWKR476bnDI
ApXBLS/PtDCQoQVmzpXUtTCZEV+co1I=
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:44:10 2026 by rpki-client