
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60146b39-c7bb-3c72-91ae-b76e074f8d07.roa
File: 60146b39-c7bb-3c72-91ae-b76e074f8d07.roa (raw, json)
Hash identifier: 8z/0TyqSjSEix5moV6ZTxEAqXSvHNKfM1xHISBz2XV4=
Subject key identifier: 79:AF:F0:61:72:30:8A:1B:51:9C:84:25:01:41:65:CF:8A:5D:4A:24
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F498BD4270FB06FC91C42CF00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60146b39-c7bb-3c72-91ae-b76e074f8d07.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 148.116.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:d4:27:0f:b0:6f:c9:1c:42:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8603ca0b-0830-4b9f-9d61-5b983cfff791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:b4:0d:70:0e:47:f5:66:07:71:ff:01:9c:
dc:e0:76:af:16:dc:ed:fd:54:21:76:71:06:67:57:
8f:17:86:5f:f9:5f:59:ad:32:2e:a7:41:89:f2:4a:
fc:52:cd:37:7b:08:58:73:10:76:f6:c5:3e:f1:9c:
72:bd:68:54:a9:70:c8:c5:94:90:a3:2b:01:e7:e5:
a6:08:12:1e:6c:ad:34:5a:af:29:40:66:98:ce:16:
42:e3:ad:a4:76:5e:88:aa:82:d5:a5:eb:57:69:e4:
44:57:6f:93:93:e6:4a:9a:0f:58:93:3e:f6:e6:30:
a5:09:30:91:64:67:7d:cf:2d:f1:8a:a4:44:ae:33:
6b:df:a6:22:f4:03:bf:03:fc:73:ef:61:0d:b4:96:
83:54:8a:5b:0c:5b:df:a1:b9:e0:05:3e:35:db:6d:
4a:4a:7a:7f:f2:d5:e5:92:7c:26:55:76:67:d8:86:
4c:65:89:00:7c:44:33:e6:0d:c0:30:f8:37:31:00:
52:38:30:3e:36:87:9f:f7:d1:66:b8:42:35:29:a9:
2e:92:50:c2:26:e2:f2:2c:93:a3:59:0f:03:52:20:
ba:c7:9f:a4:d9:1e:a6:71:f6:a3:9a:e1:2b:90:5b:
5f:40:7c:92:08:44:0d:c0:32:3d:b3:f9:a2:65:bd:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:F0:61:72:30:8A:1B:51:9C:84:25:01:41:65:CF:8A:5D:4A:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/60146b39-c7bb-3c72-91ae-b76e074f8d07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
148.116.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:3e:f3:9a:c3:e5:e0:c8:2c:72:54:9c:09:a3:d9:18:b9:35:
9d:26:91:25:57:8f:33:a2:5c:0b:c7:8f:8b:93:e1:39:5b:81:
29:11:e4:24:4b:01:d6:d3:3f:71:aa:9f:9c:8a:3f:17:b8:ae:
1f:7c:95:1d:7d:c0:b2:7b:c5:39:1b:b0:3f:b8:f1:92:ae:3c:
bc:2d:7c:8a:81:eb:12:c6:a5:07:f1:c0:1a:05:d5:a9:66:73:
ca:26:4f:80:55:ee:ae:d6:ae:da:0a:7b:4d:2c:ec:d2:ea:24:
0c:58:b1:24:c2:b2:28:3f:6b:9f:b7:0e:7b:af:db:dd:6a:ad:
4b:d6:f9:40:27:8e:a4:cd:22:88:80:78:1d:69:d6:4f:df:30:
98:9d:6b:6f:06:f4:19:b3:08:44:b4:10:f6:91:1a:30:e7:ab:
fe:11:0f:83:94:92:76:d2:fc:ec:0d:26:ec:0e:11:fd:da:c1:
91:19:bd:69:ff:26:a5:72:b4:a9:9f:25:ce:3b:99:95:90:87:
6b:50:2d:06:53:c6:1d:85:1b:c6:86:a7:21:0e:01:74:a1:a4:
20:2e:d3:ba:9e:77:ce:58:e9:a9:48:3c:39:1d:df:01:0c:5a:
fd:32:0b:19:35:a0:07:25:0f:d7:85:ab:57:b3:cd:64:8e:5d:
03:f1:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:46:24 2026 by rpki-client